Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier: k/DgcDbg6kBTLbuXmPjmtn4dLTc9osmCgkb82Mnbs3Y=
Subject key identifier: 36:F6:79:93:87:90:93:51:C2:CB:1A:35:67:8C:A9:E9:D2:07:6A:C1
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 01976EF4C9672E5556BD92F793E809DDF5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number: 12D6
Signing time: Sat 14 Jun 2025 15:00:25 +0000
Manifest this update: Sat 14 Jun 2025 15:00:25 +0000
Manifest next update: Sun 15 Jun 2025 15:00:25 +0000
Files and hashes: 1: JLmy4TR8RrUtQURM0_SunkucXNg.roa (hash: tyjdJ+wzrKeWzDFxJ16QXw9ZyxjFDWvObDxvX6J8AjA=)
2: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: Gc8t599zbcQ7FBj9s12a3nb8dOWv4hMurf8/ewTv0Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:c9:67:2e:55:56:bd:92:f7:93:e8:09:dd:f5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Jun 14 15:00:25 2025 GMT
Not After : Jun 15 15:00:25 2025 GMT
Subject: CN=36f6799387909351c2cb1a35678ca9e9d2076ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:5f:67:21:cb:c2:31:9a:f4:15:ed:20:7a:
6e:3e:4c:09:72:23:2c:a3:11:76:7e:dd:08:28:fb:
b9:cd:8c:67:2c:f7:dc:0a:e3:56:bb:a8:37:76:05:
c0:79:a5:b2:fe:d0:ea:ca:ec:13:95:08:e1:e6:31:
09:0b:c1:21:3c:47:1f:74:22:d3:7d:1e:0f:2a:af:
c5:41:ee:ba:ff:83:dc:22:76:8d:86:3e:54:0b:38:
9b:22:77:ff:3a:16:79:a2:e9:40:b1:31:28:cf:5c:
ce:d5:b4:33:10:75:df:f1:f3:a1:19:c5:98:ec:a9:
c8:10:9b:b6:72:2e:14:f7:90:3a:f7:2a:f3:95:9b:
7f:29:ea:e1:e8:87:1a:31:c4:1c:b5:eb:af:6a:23:
2d:5a:ce:cd:29:d1:e8:71:43:44:8e:f9:d0:d7:f7:
0c:55:4c:e0:b0:1c:d5:3a:61:6c:3d:35:30:74:64:
2c:13:af:90:9f:e4:39:db:2d:67:f9:d3:e3:fa:b9:
de:bc:6f:53:5b:5c:83:cc:8b:89:5a:78:91:7f:48:
29:9d:aa:0b:d2:68:43:47:d6:15:fe:55:76:ef:71:
78:45:e1:00:b0:30:ae:27:36:90:d0:f6:b8:85:24:
2e:8b:2d:e9:1e:7c:1f:c3:af:82:b7:1a:d4:a1:f9:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F6:79:93:87:90:93:51:C2:CB:1A:35:67:8C:A9:E9:D2:07:6A:C1
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:20:60:76:9d:bb:51:fb:47:db:83:25:b8:79:0e:27:8b:d1:
ae:02:b0:f5:73:62:d8:30:3b:c2:bc:fc:b2:33:bd:ab:0a:f4:
e0:78:69:18:8b:b2:2b:07:e1:97:a2:08:7b:1a:f4:e8:6b:e7:
91:14:dc:d3:51:17:26:9d:91:c1:14:50:1d:0a:8a:a6:62:7a:
64:77:df:53:a9:6e:cc:1e:b7:24:96:98:6a:79:08:ba:df:2d:
82:20:35:31:6e:37:60:e0:37:00:e1:a4:e8:c5:13:65:ed:31:
7a:3d:ba:4e:80:dd:e4:85:5e:d1:f5:a5:db:d8:a2:32:6d:8f:
7c:c0:75:14:aa:bc:14:cf:db:23:a5:d1:45:4a:d0:0a:35:9f:
99:21:0e:07:b6:f6:cb:be:be:aa:4e:a6:3e:e4:95:21:f5:ea:
f6:68:ed:82:3f:8d:8d:b0:18:dd:77:03:a4:ec:06:39:a8:09:
c3:38:33:1b:9c:a3:b0:54:ae:dc:56:69:de:75:4b:24:53:cb:
2b:84:f8:11:70:15:cf:c1:11:63:c8:4c:5d:d4:10:fb:5e:6a:
a8:f3:de:0f:40:5e:d5:96:a7:7a:fd:6b:a6:13:de:48:93:08:
5c:df:e0:0a:8f:3b:d2:1b:90:b5:62:be:70:95:66:5c:b8:e1:
e5:a6:0e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:15:37 2025 by rpki-client