Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
File: pZDvI7RWydsg0wdCkysBf8VyTlY.mft (raw, json)
Hash identifier: p/8LRQZ/C3FWZsJesVTlp15A5DkGHzhrf5O6KEGFkuQ=
Subject key identifier: 7D:6A:1B:9B:8C:0B:D8:BB:B0:35:27:40:39:A7:08:43:58:F5:39:7A
Authority key identifier: A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
Certificate issuer: /CN=a590ef23b456c9db20d30742932b017fc5724e56
Certificate serial: 01976D748E9A701EF5D65ED37DC6FCD745A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
Manifest number: 0D44
Signing time: Sat 14 Jun 2025 08:00:44 +0000
Manifest this update: Sat 14 Jun 2025 08:00:44 +0000
Manifest next update: Sun 15 Jun 2025 08:00:44 +0000
Files and hashes: 1: pZDvI7RWydsg0wdCkysBf8VyTlY.crl (hash: cswOCCalgt3jLrXrHKpuqdbxn1tgUEdkc/9tfpE+eeY=)
2: qkuFYPmd6yVSJeAUkr6iVxoW6uI.roa (hash: 6R5f5Psj0EmX1v5BkourUurygRB3rOnwEBUagdishKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:8e:9a:70:1e:f5:d6:5e:d3:7d:c6:fc:d7:45:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590ef23b456c9db20d30742932b017fc5724e56
Validity
Not Before: Jun 14 08:00:44 2025 GMT
Not After : Jun 15 08:00:44 2025 GMT
Subject: CN=7d6a1b9b8c0bd8bbb035274039a7084358f5397a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d4:11:9b:ba:83:f3:4a:10:60:f6:73:16:11:
84:91:1b:c9:8e:72:18:48:73:f8:64:af:73:6c:57:
e1:ca:0f:a4:5c:84:04:75:67:0a:63:78:bd:82:e1:
b3:90:70:5d:4d:35:bc:2e:8b:c7:0f:15:d1:3c:5f:
7b:50:6e:06:3f:9d:c0:5f:0a:1a:cb:b2:c3:c3:63:
50:c9:77:90:15:5d:64:6f:b0:f7:3b:8f:3e:62:0b:
1f:dc:58:4d:30:46:3f:b6:08:3c:9e:1f:96:c8:4f:
93:b2:90:23:ef:4b:af:39:58:ac:e6:ac:b7:24:4e:
24:ac:33:9b:e5:46:15:01:9b:9c:08:b9:3b:92:89:
b9:24:78:df:e0:70:e1:e9:12:5d:58:b5:81:40:85:
23:54:01:22:6f:ca:28:60:1f:33:a6:db:6d:18:e8:
48:72:4a:2f:56:cb:5a:89:eb:75:e9:e1:30:40:7b:
a2:de:c6:57:99:e7:ce:a1:ef:ac:c7:fe:dd:60:ae:
bb:fa:e9:4e:51:95:87:8e:e9:86:1c:f6:1c:09:33:
2b:e9:e8:82:46:b0:14:30:4e:90:70:f7:45:91:26:
bc:62:0d:6c:92:02:b3:39:55:bb:18:50:b1:15:4a:
ec:f4:62:eb:dd:ee:4a:70:b5:f6:e9:c4:e6:f5:92:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6A:1B:9B:8C:0B:D8:BB:B0:35:27:40:39:A7:08:43:58:F5:39:7A
X509v3 Authority Key Identifier:
keyid:A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d6:99:0d:15:e4:d7:55:8f:99:e8:fc:75:de:31:86:1a:9a:
bf:b0:9e:52:9c:5f:3f:7e:b0:7b:75:99:b7:59:4b:e8:26:61:
3a:2b:a8:70:35:86:c2:ba:25:2f:0b:65:fb:bb:d9:76:4e:8d:
22:19:4f:b6:9c:db:00:a4:87:75:66:d5:a0:bd:5e:d2:e2:0d:
49:08:c6:e9:6b:c0:7a:f0:3e:78:4f:10:bb:2b:1d:85:96:1a:
21:c5:fb:51:d5:f5:7a:a2:00:c9:92:78:58:9a:24:33:8a:a4:
bc:1e:d1:6d:88:a6:5f:3b:85:a6:1a:d9:6f:fb:ab:ca:3c:cf:
64:a4:95:c4:4c:13:c2:ba:90:de:a2:a5:09:58:54:b7:7e:07:
26:25:6a:6d:bc:3c:15:b6:91:0f:48:cc:a9:3b:4e:54:68:fb:
d4:1d:0c:90:74:fd:9a:39:7b:5c:a3:68:c1:58:03:a8:46:7e:
63:ce:41:80:dd:77:e4:ed:55:a0:85:82:b6:26:70:2a:b8:76:
cb:71:56:c6:4c:d7:83:4d:9c:7a:d2:8a:fa:56:89:ab:09:65:
1a:c3:c3:ec:e0:39:77:a4:31:57:79:3e:39:31:bd:24:c3:dd:
a0:cd:34:b3:81:3a:11:af:f7:a8:0c:f2:0f:4e:a1:5e:6b:31:
61:86:e7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:01:19 2025 by rpki-client