Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File: zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier: LyMXOru8Lwt7UINzinRpjZx7EZ9//iGlKjVKnSmRK10=
Subject key identifier: A3:83:41:21:19:E3:EE:30:F5:BA:E1:4C:E2:5C:C9:FF:D8:83:C7:21
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial: 01976C98C658041672D1DDD65EB3FB58C57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number: 0143
Signing time: Sat 14 Jun 2025 04:00:40 +0000
Manifest this update: Sat 14 Jun 2025 04:00:40 +0000
Manifest next update: Sun 15 Jun 2025 04:00:40 +0000
Files and hashes: 1: 8o5AYWh-4RXgT7Kh5e_5gWGFnZs.roa (hash: WhyrbQbNYw+ibwL1fIGjF77XjkxU2NCmWVAW1D5cDrM=)
2: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: 9nEItR8o3jmcj5I99qugVKTo7GnmsIbqe399PVo3js8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:c6:58:04:16:72:d1:dd:d6:5e:b3:fb:58:c5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Validity
Not Before: Jun 14 04:00:40 2025 GMT
Not After : Jun 15 04:00:40 2025 GMT
Subject: CN=a383412119e3ee30f5bae14ce25cc9ffd883c721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:f3:c0:d6:7f:06:cb:be:65:de:fc:a4:55:
29:5b:d5:52:82:ae:0c:27:1a:29:d6:65:7e:de:d1:
d6:10:c6:10:24:58:1f:00:1e:86:d2:24:10:87:36:
4f:e7:61:de:cd:f1:57:0b:62:05:93:81:12:0f:7f:
8f:3f:84:fd:72:f2:0e:ed:63:31:c0:ad:64:b8:0a:
80:c4:0a:29:59:fd:4b:2a:c2:24:96:19:b3:a8:f8:
0b:ef:d0:f2:05:9e:67:83:a4:b4:c3:85:63:09:42:
77:33:14:40:b8:c4:b1:ef:d1:9c:40:46:20:02:49:
c7:66:10:17:df:6a:06:8c:74:5a:5a:b3:79:2b:d6:
0a:97:de:7c:4e:2f:23:63:c9:69:ce:85:92:6f:fb:
cc:33:9a:ab:ce:52:8f:31:89:e1:a7:04:d5:84:03:
3e:4a:69:72:f8:e8:c4:3c:be:0d:c7:ae:23:5e:95:
46:80:a4:df:64:0e:e7:bc:c9:88:a4:4b:d9:33:56:
65:43:02:ec:bc:04:51:6b:64:2a:c5:37:1d:e2:fd:
50:b6:44:c9:89:4e:63:01:98:8d:fb:89:23:e7:72:
4c:56:93:51:fd:14:3d:f2:9d:f2:7d:0d:2c:a8:59:
03:12:a8:94:50:ad:56:36:38:56:3d:dd:0d:c3:11:
d1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:83:41:21:19:E3:EE:30:F5:BA:E1:4C:E2:5C:C9:FF:D8:83:C7:21
X509v3 Authority Key Identifier:
keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:13:51:f2:a0:08:43:91:3c:23:8d:bd:7f:94:2a:d9:a9:86:
b2:06:eb:f1:5a:b3:df:22:4e:28:89:de:a8:6b:21:22:42:f8:
f5:3e:d0:05:7b:00:34:3a:6c:8a:b9:cc:55:05:82:d8:5f:a3:
01:9c:55:2e:cb:04:87:a3:5e:ca:21:ad:6b:b8:7f:d1:0c:3b:
44:69:a0:e9:ae:1d:75:c4:af:43:13:93:cf:42:f0:c8:44:9c:
1b:94:8b:7c:06:98:18:53:7a:12:51:ab:39:50:4f:99:d0:43:
8a:7d:3c:21:ae:e6:d5:2a:a1:c2:82:71:58:e8:67:c1:21:ed:
82:eb:e4:d6:8e:cd:bc:ff:15:67:62:c2:22:09:9c:70:0e:84:
49:cd:37:6b:e5:fa:e8:8f:fb:ff:f1:cf:c0:77:b3:c3:8c:c8:
eb:7e:70:1a:03:1e:7d:86:5f:d9:61:a7:62:cd:32:1b:0c:20:
94:f3:b2:dc:88:02:65:76:dd:96:c9:96:e1:58:1e:31:de:38:
7b:65:0e:c6:bf:8e:1a:2b:9c:13:f8:f3:63:21:bd:14:97:6e:
7a:ac:47:be:80:b1:8e:63:d0:57:3a:e1:a3:10:d5:94:72:1c:
a9:3d:c3:43:3f:c7:fd:70:51:da:b6:0b:44:04:dd:3a:6e:31:
cb:46:c8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:08 2025 by rpki-client