Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
File: zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft (raw, json)
Hash identifier: Byg/qIjHfqYo5GRGTuC6TjIP/kT5smKGuAm8LKJeTVw=
Subject key identifier: EF:A8:F0:37:6D:88:FE:FA:42:5B:51:E6:F7:5D:21:30:D2:A8:22:C1
Authority key identifier: CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
Certificate issuer: /CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Certificate serial: 01976D74B39F0F9B18ECD09A9258F06C46A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
Manifest number: 0B2B
Signing time: Sat 14 Jun 2025 08:00:54 +0000
Manifest this update: Sat 14 Jun 2025 08:00:54 +0000
Manifest next update: Sun 15 Jun 2025 08:00:54 +0000
Files and hashes: 1: 0_tGmdVdpjc2L8zUWyzyW9iPObU.roa (hash: bn84kxibGx4/EOPh2OY0dkRz9RK07gMRfVN7WrprjOg=)
2: zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl (hash: Ha7pVpukb+uIfT+skFDvdHIqxTX7aFBr87fGTbODSc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:b3:9f:0f:9b:18:ec:d0:9a:92:58:f0:6c:46:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Validity
Not Before: Jun 14 08:00:54 2025 GMT
Not After : Jun 15 08:00:54 2025 GMT
Subject: CN=efa8f0376d88fefa425b51e6f75d2130d2a822c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:18:a2:a0:cc:2e:80:a1:1b:68:85:67:f2:
c5:00:d7:89:e2:df:f2:28:55:0a:e3:ef:96:03:e0:
92:37:8a:3e:bc:50:f1:c1:04:14:c0:be:69:b6:48:
41:63:29:fa:e7:2e:df:57:02:d8:45:7d:24:a3:9b:
94:74:1e:ac:cf:06:70:1c:6b:35:f5:cd:5c:99:36:
c6:01:5c:17:b5:39:ec:9d:1f:3c:3c:c8:97:08:cd:
18:95:e5:92:86:af:17:20:8c:ee:70:78:bc:8f:93:
5c:d2:cc:1f:54:0e:1c:81:be:d4:56:eb:bb:71:22:
e1:f6:8e:7c:ec:37:2b:18:ed:13:f1:46:76:46:fe:
76:35:6b:39:70:3c:b7:0e:02:c4:6c:71:9b:43:6c:
a0:cf:0a:cd:56:03:50:e9:88:02:9e:05:a9:7d:3d:
96:aa:c1:0f:65:fd:42:3e:7f:0d:9b:4a:ee:3d:cf:
f0:40:5e:12:81:43:11:c8:d1:b4:44:b3:22:b2:58:
ae:ce:1a:df:5f:4a:90:85:a1:77:51:38:b6:89:36:
4f:28:67:99:fc:20:d9:11:08:49:07:a1:96:6f:fa:
ea:50:1d:f0:7e:ba:31:7c:46:31:d4:fc:1c:40:40:
d3:7b:6b:40:c4:de:d9:0a:b5:54:c8:85:c1:ed:3a:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A8:F0:37:6D:88:FE:FA:42:5B:51:E6:F7:5D:21:30:D2:A8:22:C1
X509v3 Authority Key Identifier:
keyid:CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:be:a5:20:f0:33:2e:2d:74:26:61:2e:c7:b5:6d:16:f1:31:
e0:a2:8b:70:a2:7c:05:ac:e6:ac:e3:79:88:90:fc:7d:f9:21:
19:6e:f4:60:c3:c9:06:65:19:01:a3:e0:2b:13:f1:38:f1:a7:
81:00:36:c2:50:58:38:dd:a2:d4:a5:89:66:b2:87:c7:43:a5:
04:44:dd:7d:61:22:91:50:b4:3c:44:78:79:a2:71:81:99:60:
ac:9a:db:0e:e8:bd:1b:40:df:84:d6:a1:0d:4e:6c:b8:b7:02:
2f:fe:e2:8c:8b:c6:2b:64:d4:77:bc:7a:c2:3a:ec:51:4f:d8:
f6:09:22:f0:93:2f:10:3e:ed:e5:fe:69:c8:7f:85:20:42:96:
e1:2f:92:5c:61:1f:e8:31:39:08:15:e0:a0:7b:e2:b7:f1:61:
65:38:59:1b:00:09:5f:8d:9b:83:6c:83:54:99:4c:a1:51:00:
36:14:61:5b:18:ce:af:1d:51:fe:52:2e:db:66:0e:e1:20:30:
48:f5:9a:06:c0:71:08:43:f7:ab:53:2a:4d:6b:b2:9d:9b:fd:
30:82:8b:d8:87:bf:ad:d1:22:16:9b:e1:fa:b7:bc:4a:48:3e:
95:79:a3:d6:4c:54:d6:f5:34:78:32:7b:37:94:86:52:42:19:
38:68:77:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:38:56 2025 by rpki-client