Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
File: zEa__4uQ43SFVboUR_1O3sw0ChM.mft (raw, json)
Hash identifier: OrzbfcLrWoNEgyR5nNFCnAQyXlsesR0Kp6hfl27FuJI=
Subject key identifier: 3B:F9:43:AD:1F:CF:56:92:2B:7C:98:D4:29:65:A3:A3:A3:C9:87:AB
Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Certificate serial: 01976F62BACF4B53D6DB19AC54CEFBE487A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 17:00:30 +0000
Manifest this update: Sat 14 Jun 2025 17:00:30 +0000
Manifest next update: Sun 15 Jun 2025 17:00:30 +0000
Files and hashes: 1: F0jtKGP40uC6UeGFBvx9vjMBKeg.roa (hash: /o36By5Q83qZbeXySOjiZ7fpjLFdoyPEIY6paV+aTiU=)
2: K0qFWulaqLgz9oT0AMcv9eNzEJE.roa (hash: Y/5We05dA9t/MagriMHFfJFSjAFcig5JEV5W+cYXjE4=)
3: zEa__4uQ43SFVboUR_1O3sw0ChM.crl (hash: V7ZvzQTQiyWo/YAIrzsEtTBsn6sddphXdtnZQki4AVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:ba:cf:4b:53:d6:db:19:ac:54:ce:fb:e4:87:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Validity
Not Before: Jun 14 17:00:30 2025 GMT
Not After : Jun 15 17:00:30 2025 GMT
Subject: CN=3bf943ad1fcf56922b7c98d42965a3a3a3c987ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:df:45:ef:7c:f1:36:4b:0b:b8:95:b2:9d:1a:
1b:59:f8:c5:22:bc:74:5f:b6:48:43:41:a8:0e:98:
b6:7d:f8:a6:b6:6f:f4:98:d6:a5:f6:f0:8c:a4:17:
08:f9:d2:4e:85:b3:08:de:13:7d:91:c0:1f:3f:0e:
98:ac:c6:59:a6:1f:96:d8:3f:0e:04:dc:96:b0:cd:
ee:bf:cc:ed:40:4d:e9:54:9a:ed:1a:a9:6b:a4:34:
e6:4f:19:72:d7:f3:d1:97:84:81:f1:7a:36:14:41:
5a:22:1e:46:4b:d8:df:25:86:2d:38:64:83:d7:2d:
7c:9c:72:89:53:2e:21:10:59:e3:60:bb:02:d2:d1:
77:15:22:45:08:09:3d:5d:c7:25:dc:a2:74:71:74:
42:2b:f1:ea:98:54:e0:bd:1d:51:d7:9a:0b:c1:1a:
6c:3c:c9:18:1b:0f:18:c5:41:73:4d:0b:0d:fe:5c:
e0:4f:29:95:49:bf:4a:2b:de:69:84:21:4b:aa:19:
13:f4:c6:50:a6:6d:1d:c8:fa:98:4c:17:1b:8e:e2:
f6:7f:47:02:a7:ef:4d:d5:a4:24:b8:81:a9:ed:a3:
87:2c:e2:00:72:e9:2d:3b:56:9f:c7:39:37:c9:84:
44:c7:71:82:b2:ed:e8:e4:11:97:d7:86:01:3c:5d:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F9:43:AD:1F:CF:56:92:2B:7C:98:D4:29:65:A3:A3:A3:C9:87:AB
X509v3 Authority Key Identifier:
keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2c:da:df:8c:e7:6f:f6:8d:7b:b7:c4:af:98:e6:21:04:24:
7e:fc:7c:47:6e:8b:d1:b2:52:a3:28:27:66:5e:d6:c5:55:08:
4d:fa:24:69:8c:4e:69:9d:7d:b1:91:df:fd:20:b2:c8:dc:fc:
c5:49:9c:ff:87:26:55:b4:97:bc:26:66:4e:59:37:96:7b:ee:
f5:b8:fc:02:ac:72:49:a2:4b:e3:cc:c3:1b:92:1b:0a:30:eb:
0c:c4:e4:eb:27:73:fc:72:ce:e4:cd:ae:1c:3e:ec:a2:1b:f6:
f2:22:06:47:f9:2e:7d:d6:b9:3c:fb:16:2e:b3:69:a7:40:a9:
6a:30:0e:77:b1:f2:80:92:c2:72:a1:54:00:dc:31:e9:09:ee:
cf:42:77:32:91:a4:40:15:34:8b:6c:62:16:80:71:d7:d2:f3:
0a:a3:7c:2a:84:7d:e1:52:27:c1:cd:97:59:e5:f2:e6:39:30:
ea:f4:87:cb:fc:eb:e0:ad:a4:95:ca:5d:be:c9:ff:59:d0:51:
b4:60:83:44:ca:57:9d:95:6e:ac:71:2a:94:29:4f:44:35:2d:
5a:e1:ab:13:4d:e7:30:48:d5:f4:ef:a1:1e:ec:4a:d3:e5:5e:
ea:21:ea:83:5d:ff:5a:fb:ae:89:1c:4c:eb:84:36:24:98:d2:
7f:71:a4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:04:48 2025 by rpki-client