Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
File: _zfWwfalxKkrv_2FxBQhJ_o-GjA.mft (raw, json)
Hash identifier: ZInlzBMgAb+FD2e0+FsYxSYLwG7UVkYJNhji9OlEZaE=
Subject key identifier: D6:63:E3:F2:95:90:DD:58:10:A8:14:F0:FF:79:D5:E9:56:1A:A7:1F
Authority key identifier: FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30
Certificate issuer: /CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30
Certificate serial: 0197711A22738293A45829BA11EEC682E0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 01:00:27 +0000
Manifest this update: Sun 15 Jun 2025 01:00:27 +0000
Manifest next update: Mon 16 Jun 2025 01:00:27 +0000
Files and hashes: 1: 95UilOURLat0lc9QoS7Ws8cK2EA.roa (hash: IqAjP92yfLol/XET3CMcHwom9MrBLP/CZ4kPceWSYnk=)
2: _zfWwfalxKkrv_2FxBQhJ_o-GjA.crl (hash: QsfjHAM4r8cE+W7KX/0d+KVN3KdEBpqvIf/9s8F7ChY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:22:73:82:93:a4:58:29:ba:11:ee:c6:82:e0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30
Validity
Not Before: Jun 15 01:00:27 2025 GMT
Not After : Jun 16 01:00:27 2025 GMT
Subject: CN=d663e3f29590dd5810a814f0ff79d5e9561aa71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:38:fc:b0:d7:a2:b1:db:32:a9:1c:d8:3c:
39:27:9a:e6:c9:91:e5:0e:ed:12:52:3c:54:8b:09:
0a:73:b1:91:e5:dd:bf:3d:ea:43:e5:80:0d:a3:37:
6e:d1:00:11:0f:f9:74:4b:39:3b:b4:3f:c0:db:d1:
86:08:a0:8f:33:c5:48:04:63:03:e9:bb:d9:fe:5a:
81:d5:5c:51:e9:a4:31:9a:27:53:5b:dc:a2:2b:2c:
ad:35:02:43:b2:fb:cd:4a:fe:6e:43:ad:70:0b:91:
cf:b2:e9:4c:b2:c9:23:90:d5:07:79:44:bf:27:5d:
8f:92:57:7c:da:8a:1a:5b:8f:5b:b6:ee:d8:83:66:
88:e8:e1:b5:fb:65:45:3b:19:dd:a3:99:a9:c6:85:
09:7a:08:77:d5:e2:78:4b:ea:7e:91:da:cb:41:30:
e0:be:a2:90:76:86:c2:26:b9:37:21:66:e2:4b:c7:
40:20:1b:5e:7f:69:46:58:6d:15:a0:76:ad:f8:aa:
8a:94:e3:71:37:3e:57:62:8d:5c:a2:7e:e6:be:97:
a4:78:23:5a:da:09:d3:7e:1c:45:a7:e9:af:43:53:
23:70:73:24:7a:ae:65:42:fc:f3:1d:be:68:15:ec:
5e:af:d8:e6:72:de:e5:6d:a1:59:0d:26:7e:61:cb:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:63:E3:F2:95:90:DD:58:10:A8:14:F0:FF:79:D5:E9:56:1A:A7:1F
X509v3 Authority Key Identifier:
keyid:FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:07:32:bd:fd:88:4d:5d:3f:58:b5:3c:39:e6:3e:0c:08:f7:
69:e6:f6:b6:69:39:c7:a6:1f:2b:fa:79:2f:e7:82:38:45:f0:
56:f8:f3:b2:53:32:8d:0c:7b:40:93:74:3a:86:23:b1:27:92:
5f:94:69:60:15:06:09:cd:d3:ee:cb:23:19:70:b4:f7:70:32:
46:51:5d:45:01:ff:ab:83:34:cd:32:df:f5:01:e6:24:96:9e:
6c:be:02:f9:45:56:dd:11:40:04:8f:43:3a:e6:3e:77:3f:2e:
75:0e:60:2c:71:f3:63:c9:79:56:64:af:87:f4:66:89:fb:bb:
45:d2:02:38:85:3b:8e:78:5a:52:de:a0:9f:0d:33:61:b4:11:
99:a1:34:37:15:a9:3d:79:d6:47:56:8b:4d:e5:1a:5f:38:74:
e5:5c:0c:1d:a2:92:3a:ce:58:32:55:35:cf:4f:f7:c0:3c:68:
e8:f6:c6:a4:9e:95:4e:a2:07:35:a2:14:1d:eb:b8:9b:e9:d4:
13:cd:94:e1:b3:de:76:d9:8a:0d:9b:59:9a:d0:79:99:2b:76:
89:d4:90:7a:ab:a7:95:b4:42:e1:f8:20:20:ca:05:83:f0:42:
a0:fe:27:4e:9a:24:c6:1a:b9:f0:02:ac:66:92:85:14:a4:36:
db:59:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:27:20 2025 by rpki-client