Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier: jMjtpuG6+wLabXTmC92OJm1rJiUT6i0ZbmaLlNClLPs=
Subject key identifier: A0:DB:1A:FE:D0:51:5D:04:F4:41:AF:D2:21:A6:31:2F:1A:DD:36:E8
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 01977C79BD60B1FF2C388C5B670B7358629A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number: 0F15
Signing time: Tue 17 Jun 2025 06:00:42 +0000
Manifest this update: Tue 17 Jun 2025 06:00:42 +0000
Manifest next update: Wed 18 Jun 2025 06:00:42 +0000
Files and hashes: 1: 1r-YWbxqyiaEeQQe7XhCESQq4-A.roa (hash: whgT3ej9YeVcd8f315sOoiAQXSfv+O+qM97fjItvC5w=)
2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: 1q6G8llfGZEpphrmp1rOp7lAi8MBQYDPY8i352eez/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:79:bd:60:b1:ff:2c:38:8c:5b:67:0b:73:58:62:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Jun 17 06:00:42 2025 GMT
Not After : Jun 18 06:00:42 2025 GMT
Subject: CN=a0db1afed0515d04f441afd221a6312f1add36e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:60:26:c6:e4:4b:68:77:cd:65:5a:3f:63:
47:05:e3:cb:f4:44:54:5e:9c:8d:52:24:6e:45:c5:
35:6f:53:18:51:d8:a8:16:20:ab:fe:b7:a4:a2:b6:
08:7d:a5:f0:8d:e1:d1:71:89:bd:0a:1c:20:2e:c0:
38:08:ef:b1:24:3e:88:9c:14:95:59:5d:4e:d0:f7:
02:00:ce:e5:e4:53:13:eb:4f:1c:9a:78:c1:7c:8f:
67:22:56:72:13:98:2c:a4:a8:63:86:4f:d8:8d:06:
6d:91:c2:12:a7:fd:51:3c:e6:39:22:c9:24:cc:89:
d8:c0:e2:45:02:66:22:04:c4:c9:d1:86:f8:cb:a0:
bc:1d:1f:46:c8:e4:c5:02:2c:46:d4:67:69:3d:06:
db:61:d6:af:80:1b:a5:cd:de:3c:d6:d7:19:67:c3:
76:71:9a:be:7f:3f:30:be:c1:f8:77:95:39:f9:e4:
59:0f:f3:54:be:1b:16:97:9b:3a:d1:1b:ad:42:6f:
6f:84:e4:73:74:f3:e8:43:3b:67:f8:fb:fc:43:4a:
80:ab:c5:65:54:ea:42:2e:91:ba:fe:7c:0e:39:21:
ba:63:86:44:e4:10:be:dd:a8:da:69:d2:53:6e:38:
02:eb:c2:12:9d:51:dd:b1:97:7a:34:42:ac:b6:56:
f1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DB:1A:FE:D0:51:5D:04:F4:41:AF:D2:21:A6:31:2F:1A:DD:36:E8
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fd:94:5d:77:40:83:c7:e9:62:98:ff:8a:a9:e7:f4:88:a5:
cb:f7:48:04:dd:bf:42:f7:81:13:0b:2c:88:08:6c:76:5c:94:
5c:ba:94:e7:32:a4:33:1a:65:e0:b3:d5:4c:f1:62:5d:57:0b:
f8:2a:6a:de:d4:3d:f3:b8:ea:cd:7a:b2:96:50:53:04:f9:06:
5a:f9:8b:f1:31:7e:a8:f2:90:0a:bd:23:38:95:1f:37:fa:33:
4d:22:53:05:55:7d:59:da:a9:7a:fa:f1:f9:39:34:8c:ea:e9:
c1:77:2d:98:9b:29:bd:ce:a6:5b:3d:66:d9:24:06:88:6c:83:
aa:b0:1d:e8:e4:33:04:97:67:63:ba:08:b5:3e:39:73:e3:7e:
19:0d:bf:5b:48:2b:2b:8b:3f:73:d7:d3:63:9a:b5:f0:08:0f:
f2:45:36:2a:c2:6f:a2:6c:a0:b1:c7:62:57:07:ea:a7:1c:f3:
98:59:07:d0:47:6e:3a:fb:59:1d:a2:05:a6:24:36:46:76:83:
c8:00:2a:99:a9:01:83:36:ca:4b:37:35:a1:72:74:66:b6:4f:
61:62:d1:82:71:12:3a:1d:1c:ff:7f:93:54:7d:29:65:a3:c1:
c1:23:8c:fd:e7:0a:98:51:83:a9:8c:cc:41:52:e2:83:26:83:
7a:15:dd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:14:31 2025 by rpki-client