Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
File: ZUdEPmINY8jk9UpnF4R00fkJr2g.mft (raw, json)
Hash identifier: TW/PgQ7I7kHY4yoLppUMvNf09PCq/jy1JR2mcmVCk40=
Subject key identifier: 9F:B6:6B:E5:1F:B0:33:25:A2:D7:FA:70:28:6D:24:30:FA:DB:43:E4
Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
Certificate issuer: /CN=6547443e620d63c8e4f54a67178474d1f909af68
Certificate serial: 01977CE7D163C07EBCB797EED3CF06AE7819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
Manifest number: 0617
Signing time: Tue 17 Jun 2025 08:00:56 +0000
Manifest this update: Tue 17 Jun 2025 08:00:56 +0000
Manifest next update: Wed 18 Jun 2025 08:00:56 +0000
Files and hashes: 1: ObZz_0AF61xVwJZ1enhy0gnRgCQ.roa (hash: x882U2h8oBPYNUh4TnbQfiF4AFln2XESGCfJHIw0DG8=)
2: ZUdEPmINY8jk9UpnF4R00fkJr2g.crl (hash: ur5GfQCycBQuSqDNJcOVA91xTrPb4+KM0zBsatEhMCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:e7:d1:63:c0:7e:bc:b7:97:ee:d3:cf:06:ae:78:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68
Validity
Not Before: Jun 17 08:00:56 2025 GMT
Not After : Jun 18 08:00:56 2025 GMT
Subject: CN=9fb66be51fb03325a2d7fa70286d2430fadb43e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:16:c0:37:e8:99:83:fa:08:a4:cc:7c:71:
fd:f5:8d:d0:c5:ab:db:cb:6d:f8:32:cc:3e:07:84:
06:3d:65:7b:0a:7b:2d:73:35:c6:a8:b3:18:e9:cb:
b9:44:a6:54:ac:17:9b:d0:2b:72:dc:6c:a3:a4:91:
7e:39:44:47:f9:7d:81:c4:3d:64:47:7e:f0:42:aa:
e7:07:1f:32:51:10:40:2e:06:fe:61:4b:10:b7:95:
dd:bd:4d:82:a0:5a:c8:d1:eb:a3:59:69:ea:81:75:
b8:ad:dd:a1:af:06:70:72:a8:66:8d:4e:35:5d:e1:
bf:05:f4:04:44:f3:39:a9:24:62:33:55:4d:7a:d5:
dc:a1:78:74:23:fa:00:4e:03:e3:a7:26:30:58:d2:
30:a4:0c:93:18:03:e3:78:79:cc:b7:d4:34:28:2e:
96:79:e7:d3:0a:96:39:06:a5:ea:30:f8:b3:6d:22:
57:3b:e2:8a:67:c6:c5:8d:c4:57:f6:80:3d:80:62:
32:88:b2:13:8d:5a:0d:bc:3f:ef:3c:0b:2f:95:71:
c0:d7:0a:fb:e1:84:10:31:81:fe:46:88:97:3a:e7:
18:68:4c:a4:bc:99:f6:ef:9d:6e:b6:25:e2:c4:39:
7a:50:78:86:1d:79:97:be:33:73:4f:a4:6d:a1:62:
44:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B6:6B:E5:1F:B0:33:25:A2:D7:FA:70:28:6D:24:30:FA:DB:43:E4
X509v3 Authority Key Identifier:
keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6b:3c:5a:10:b0:4e:5d:41:f1:d7:1f:0e:bb:e5:89:38:01:
f5:8f:f2:6c:3f:6f:a0:5b:a8:9e:bb:1b:2b:3c:44:5e:15:6f:
8c:b5:e1:1d:98:d2:cd:94:53:52:64:d9:28:b1:e3:3d:05:6a:
e4:de:8d:56:22:0f:da:ac:c0:a8:b2:db:f2:30:df:c3:97:0a:
03:7a:78:02:2a:d2:57:b7:e7:e0:03:7a:92:df:b0:2d:3b:90:
d5:96:42:86:93:6e:6f:d0:a2:5a:ef:78:55:0f:08:a0:94:ab:
f8:14:cb:d2:1d:b9:46:7a:e1:d6:c9:44:39:7f:9e:fc:39:88:
46:8a:c0:f3:2e:d6:24:a8:0f:d1:cf:27:66:ac:1a:d8:66:89:
01:d8:7f:a9:e4:c1:5f:a3:7a:12:3b:af:f7:ac:cf:38:6b:eb:
08:0a:97:0d:4b:21:51:21:b4:e0:a0:f9:fb:42:0e:ab:54:59:
f2:a6:df:07:f7:b7:88:28:21:15:9d:9e:a2:48:d7:03:89:bd:
22:e2:fd:c9:b8:6f:52:2c:41:7c:d4:bc:dd:24:bb:e3:17:0f:
98:65:f4:e4:f9:06:0b:4b:86:13:a0:19:3a:63:ea:54:d0:fd:
fd:66:a8:bc:cf:a0:99:9a:88:23:46:28:f0:61:41:49:73:cc:
72:6c:42:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:04:07 2025 by rpki-client