Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: JzTF20xjjK9NV9Y1d4Dkih/P9Z30hRAh2Gy0mmSNSC4=
Subject key identifier: 40:10:6C:E6:12:BA:ED:1F:37:3A:43:2F:14:58:07:0C:07:16:C0:D4
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 01976BF470EC17480A73C5CA6FC43584DE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 01:01:11 +0000
Manifest this update: Sat 14 Jun 2025 01:01:11 +0000
Manifest next update: Sun 15 Jun 2025 01:01:11 +0000
Files and hashes: 1: CGIluw5b3rFNq3TYcrDu-mJjjcY.roa (hash: 7XYO0sh+h2BXkgYXdxURNA8WGt1oRVxjTX46cE0gy/o=)
2: RLQ2xMmRZoZiAtZFS_YRcySPvAc.roa (hash: P8RbzLYf4UK0GuClJazmarq7imv/ewysF1Ivpx0otS4=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: cBREfF/VR99oGJMB7Ef2byymEv2J8HEzkGS53c+5yB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:70:ec:17:48:0a:73:c5:ca:6f:c4:35:84:de:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Jun 14 01:01:11 2025 GMT
Not After : Jun 15 01:01:11 2025 GMT
Subject: CN=40106ce612baed1f373a432f1458070c0716c0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:b1:75:67:b6:94:41:f4:52:5a:cf:e2:4a:
3b:04:52:d6:40:e2:1a:6a:d9:f7:57:92:40:89:94:
2f:ad:78:f2:d1:9a:37:26:5f:18:9f:54:ce:5a:18:
cc:5c:fc:78:c1:85:d9:23:9f:73:7f:bb:60:0a:b9:
a1:89:72:83:22:45:9d:89:f0:7d:32:62:e9:55:14:
64:c6:e9:d7:59:45:a3:64:68:f4:57:b6:b8:3e:7b:
88:86:37:c2:32:7e:d2:81:03:9a:4d:cb:e3:ae:22:
33:54:e1:81:81:42:cf:37:83:4e:05:63:c9:ed:28:
40:f9:bc:e8:16:e2:dd:5d:0c:f6:f4:28:2d:f8:db:
8b:c6:71:2a:4a:0a:1b:6f:29:0e:78:29:0b:56:ca:
82:8f:92:e7:a9:9a:fe:3f:28:89:f8:65:6c:71:99:
cc:58:42:0e:c8:2e:d3:de:95:d9:97:76:2f:7a:af:
e4:d8:49:27:46:a6:83:d0:ef:0d:d4:26:cf:0f:38:
65:32:1e:73:a2:57:f1:3f:87:53:00:97:27:fe:a1:
9c:1f:48:60:0b:fd:39:cf:19:65:c0:4a:76:43:82:
70:c2:72:5c:cb:6e:c6:b0:1d:4d:64:d8:28:a8:a0:
bd:6f:99:2c:cf:68:90:19:f8:ea:28:13:10:4e:5b:
35:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:10:6C:E6:12:BA:ED:1F:37:3A:43:2F:14:58:07:0C:07:16:C0:D4
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ac:6e:32:b6:1a:50:4a:ae:6d:6d:12:52:cc:22:8f:bd:66:
91:59:a2:3a:97:c5:7d:72:63:c0:eb:bf:6c:8e:38:11:0e:0e:
6e:39:51:cb:0b:5c:a1:0a:a9:a8:ee:91:87:ed:99:48:40:18:
e2:46:31:b0:49:49:34:22:e1:17:1c:05:66:b9:ec:81:88:e4:
87:bc:cc:31:ca:df:5b:5f:e5:87:5e:3a:f1:72:52:0b:8a:f7:
b7:2c:dc:ec:ee:8f:d8:61:33:86:21:58:ac:d8:a2:3c:57:dd:
c3:1e:62:74:a4:96:cb:fb:0c:a1:94:95:c4:a6:c8:21:d7:14:
0a:45:30:8c:19:f6:5a:6d:61:83:a0:00:26:6e:26:dc:57:de:
58:c8:26:0c:18:e0:86:5e:ad:1e:59:db:d6:e1:6d:aa:a3:13:
84:84:73:72:01:74:fb:be:84:40:01:85:bb:d3:1c:0e:95:aa:
f4:63:21:5e:4c:ef:e3:7e:c3:29:cd:f6:25:36:e7:97:9e:0e:
5e:7f:76:a2:4c:99:7c:8b:85:50:51:e8:ae:99:ae:a0:98:19:
2e:54:fb:ff:d9:17:8b:d0:40:bd:3e:4a:f5:cd:4c:4a:04:b2:
82:82:85:7d:06:75:34:8c:90:72:27:89:2d:ca:d1:55:c0:8f:
10:6e:29:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:18 2025 by rpki-client