Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
File: zBEL75xblqgxx6v5VZJ0S7rx7mc.mft (raw, json)
Hash identifier: Bfs7qIMQCR1mvvrVN826H9gpALL+fKz6TxJdCugVW/w=
Subject key identifier: C8:16:4C:69:23:9C:E3:95:89:5A:05:0E:DD:E3:47:7B:B9:14:EF:66
Authority key identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
Certificate issuer: /CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Certificate serial: 019772648E3A2E57131B24130FD8066754EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 07:01:21 +0000
Manifest this update: Sun 15 Jun 2025 07:01:21 +0000
Manifest next update: Mon 16 Jun 2025 07:01:21 +0000
Files and hashes: 1: vb1dDyyTWxxLlSgfwG-f2LoghnM.roa (hash: /aBDSc4vT/oTqhg2Zpyh6DEtnkQwwXOnttzniIq6fsw=)
2: zBEL75xblqgxx6v5VZJ0S7rx7mc.crl (hash: 4yA2vqOWnB7fUk4ih7xjsULgvWYcmpfaz6GxkK4cV94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:8e:3a:2e:57:13:1b:24:13:0f:d8:06:67:54:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Validity
Not Before: Jun 15 07:01:21 2025 GMT
Not After : Jun 16 07:01:21 2025 GMT
Subject: CN=c8164c69239ce395895a050edde3477bb914ef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:f3:f5:3e:ae:9b:59:17:a3:f7:a2:91:e8:
41:a5:43:a1:ee:77:21:68:08:d4:f7:18:85:88:8f:
03:ce:bc:d1:37:05:5e:03:e2:72:37:48:39:df:cc:
c3:20:da:63:67:6a:b3:5c:55:7b:48:2e:46:4a:bc:
0c:b2:ff:d2:68:e5:db:a9:9c:23:3b:dc:c8:82:c0:
d3:cb:6a:db:56:cd:f6:12:b8:32:84:84:06:8b:bb:
2a:e9:08:d0:16:6e:26:22:9e:f3:2d:c4:30:f3:e5:
13:d9:29:38:61:2f:8e:2f:6e:9d:12:89:1d:ce:3c:
a2:87:a5:1c:42:aa:bc:59:60:6a:1d:01:85:93:d5:
df:5e:7a:4d:f4:0a:4a:41:29:55:8b:10:5d:ce:79:
5a:f2:28:2c:9e:f8:89:b4:0d:9d:6c:bf:14:6c:ec:
6f:c1:78:a9:72:6d:62:2d:6a:0d:82:da:21:65:02:
2a:b7:f0:4d:bd:14:6c:d4:b5:f6:f4:e5:a9:63:73:
8a:d3:3d:f8:72:a5:a0:02:3d:88:98:bc:5d:49:46:
bc:dd:7d:fe:46:d0:fa:b9:37:3d:fe:66:95:ee:8a:
b1:a4:cc:f0:b8:f6:d2:5f:2d:4d:aa:94:d0:ee:10:
28:f0:cc:1d:57:fc:10:6b:e6:10:e8:7e:e8:cd:62:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:16:4C:69:23:9C:E3:95:89:5A:05:0E:DD:E3:47:7B:B9:14:EF:66
X509v3 Authority Key Identifier:
keyid:CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0b:76:e6:dd:e1:2c:c1:b2:b7:5d:04:8e:8b:da:b3:05:95:
e9:20:4e:ed:25:c3:9e:ac:ea:51:b1:46:43:3f:65:f9:97:ac:
51:01:95:72:c4:8f:f1:96:6a:ae:b2:13:19:79:a9:31:f1:34:
38:44:d5:e9:07:29:63:58:20:79:55:12:c1:f9:f2:00:85:ad:
c2:ed:ab:1e:d4:87:ba:85:b1:a3:03:35:9c:5c:57:86:b9:5d:
27:c1:eb:1c:51:cb:65:a0:bb:01:37:26:ca:a6:a5:a1:3e:5f:
59:b6:2a:9b:3d:9e:fb:fc:d1:1e:a7:17:44:70:16:08:3a:a3:
7e:16:a6:c1:9b:f3:a4:42:36:41:d9:5a:d3:e4:71:11:2c:97:
0a:47:4f:a4:32:0c:c5:2c:dd:22:16:87:15:de:23:95:83:4a:
6c:ad:97:a4:5d:ab:7c:d2:e0:9d:61:24:cc:5e:11:59:90:5f:
ca:08:74:f4:67:7e:92:37:d7:de:be:03:3b:04:67:6b:b8:e4:
5c:78:2b:0e:68:dd:7e:53:d1:64:02:9c:c4:62:62:bc:aa:3f:
e0:e9:6f:e1:81:96:03:27:68:19:98:2b:58:36:60:8a:fb:33:
9f:3c:f4:98:96:70:78:bd:b3:e8:d6:f9:d6:3d:42:9b:6d:e1:
51:02:52:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:21:31 2025 by rpki-client