Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
File: zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json)
Hash identifier: JBWHyGaNLJ5WRoiRjaQbklWEbfewEaGpToA1qUXdWRY=
Subject key identifier: 62:80:FE:7E:69:E5:E0:B1:08:4A:B6:00:45:EE:8B:1D:3D:E6:A1:53
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial: 01976C2A91B5540AB6C32F64EE2D1FD2FA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 02:00:18 +0000
Manifest this update: Sat 14 Jun 2025 02:00:18 +0000
Manifest next update: Sun 15 Jun 2025 02:00:18 +0000
Files and hashes: 1: OcgJ9gd4XPf2cH1vwOSDk8wsWCY.roa (hash: mqfa0ZehsylIV/d7nzWZG94iCnmV9oQHVVnGpSyC+og=)
2: pdwDWOzc3QzXOsiEO7HIgZ0hQdQ.roa (hash: m/RIMhJds2RFVXbpbtSSU1vxyz5pEJiQgY8y39qh5vk=)
3: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: 4OtlreJhTafz+128i+7tlAwOcir0g1zfcMXgvfZMi3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:91:b5:54:0a:b6:c3:2f:64:ee:2d:1f:d2:fa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Validity
Not Before: Jun 14 02:00:18 2025 GMT
Not After : Jun 15 02:00:18 2025 GMT
Subject: CN=6280fe7e69e5e0b1084ab60045ee8b1d3de6a153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:a4:93:d2:3f:14:df:36:24:8a:10:b3:bd:
a1:dc:1d:22:48:44:86:2e:8b:03:9d:f3:c1:cc:46:
81:b2:12:a5:cf:b0:e0:cd:75:7e:b3:b4:9d:8b:af:
ef:3d:be:65:0f:10:92:d0:d7:d4:20:2d:a8:05:0c:
51:94:ce:27:56:b4:0b:51:20:7f:2b:80:68:66:1f:
9e:05:05:34:db:e6:d2:e4:f7:2a:83:61:b3:c8:63:
27:e9:60:e1:a9:1c:ac:15:3a:53:45:5e:fe:29:e5:
3c:e0:5b:f5:22:70:3a:9b:ae:da:81:f1:8b:d5:57:
0c:0b:9d:94:54:41:72:fc:bd:00:3a:1e:91:64:61:
eb:15:15:eb:1a:24:47:7f:1d:b3:e9:8b:f5:c9:6f:
b1:45:ea:95:d1:bd:17:36:f9:84:dd:2e:8e:1b:ca:
be:b1:d0:84:45:3d:79:65:f3:43:58:06:3c:3a:d9:
d4:37:e3:8f:69:cb:ea:d8:c3:62:b3:cc:1f:2f:6b:
1a:40:1b:98:4c:85:47:fa:1d:79:38:2d:8b:63:66:
8b:7f:c9:3b:20:77:40:f4:c2:ec:eb:fc:0a:84:ab:
69:18:61:6e:7e:25:1d:78:0e:93:ad:ca:29:88:06:
65:90:1b:91:5b:e4:f9:09:fe:37:73:fc:8e:76:eb:
a4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:FE:7E:69:E5:E0:B1:08:4A:B6:00:45:EE:8B:1D:3D:E6:A1:53
X509v3 Authority Key Identifier:
keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0f:42:6b:c8:de:8d:41:71:d2:6e:8f:ca:66:71:8f:8c:f6:
7a:13:12:73:6f:c9:68:f7:7f:d0:8f:30:a2:e5:01:ca:43:69:
58:5b:e3:e4:66:23:c9:f4:b5:cf:c7:03:e2:10:b1:de:42:c8:
40:13:58:f0:5b:da:ab:2a:fa:bf:85:fc:fb:59:fa:e4:1e:96:
a6:d5:3b:60:7d:c4:d1:d2:7e:46:a7:51:22:1c:d8:5b:51:07:
72:0a:ff:fd:2e:a6:23:4b:26:6f:85:7f:a3:cd:bd:88:00:73:
82:dc:4e:19:b4:54:38:45:ac:bf:c2:79:4f:13:82:ec:6e:ab:
15:4f:e0:69:80:da:48:2b:83:15:dc:4c:01:22:f2:00:07:08:
27:f5:8e:a2:3c:9c:04:f5:3e:1e:22:f8:3c:90:37:9b:6d:49:
15:49:cd:86:40:85:a7:2d:54:8f:ea:38:f6:5d:ae:27:f8:03:
e8:a9:99:75:f5:cf:bf:ed:3c:c9:b9:96:50:06:6b:d1:2b:ee:
a6:1c:47:66:e9:f6:0c:79:1f:0e:2a:44:1a:a1:09:eb:9e:66:
fb:f8:60:78:2b:a6:17:3c:73:d4:dd:62:97:ba:5f:ff:d6:e2:
f9:73:55:2b:87:4e:90:1f:1d:2e:c5:05:00:e6:87:70:cd:d5:
cb:22:8e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:35 2025 by rpki-client