Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.mft
File: zTwRDf139XdXORwPrt7r42CGVx0.mft (raw, json)
Hash identifier: BhAp/vMiWS5PSZ4zyXPWPZgVmeFF+CnDVFxm9DxaEjY=
Subject key identifier: 68:6E:41:FC:F4:D0:7D:F5:C6:2C:FC:57:6D:38:D9:0F:B8:B1:0E:87
Authority key identifier: CD:3C:11:0D:FD:77:F5:77:57:39:1C:0F:AE:DE:EB:E3:60:86:57:1D
Certificate issuer: /CN=cd3c110dfd77f57757391c0faedeebe36086571d
Certificate serial: 01976FD0E41694CB09AB0C6C84754D6F2894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.mft
Manifest number: 0DAC
Signing time: Sat 14 Jun 2025 19:00:50 +0000
Manifest this update: Sat 14 Jun 2025 19:00:50 +0000
Manifest next update: Sun 15 Jun 2025 19:00:50 +0000
Files and hashes: 1: n79crWM-L0W_-YTIs0SA8x1g-4g.roa (hash: WTPugh0CrOL+7geJ0TTyRViJCXrCGCyNH+3nK4QxB48=)
2: zTwRDf139XdXORwPrt7r42CGVx0.crl (hash: rSzvJ756xPWK1xnUS4fvAFRePSP4y5C1L8gSWb8FAXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:e4:16:94:cb:09:ab:0c:6c:84:75:4d:6f:28:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3c110dfd77f57757391c0faedeebe36086571d
Validity
Not Before: Jun 14 19:00:50 2025 GMT
Not After : Jun 15 19:00:50 2025 GMT
Subject: CN=686e41fcf4d07df5c62cfc576d38d90fb8b10e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:a3:74:42:8c:14:cf:6c:ac:17:3e:57:aa:
e1:91:3d:44:8c:31:f3:fe:e0:46:96:d4:e3:16:21:
2e:a9:98:da:26:df:f1:0a:ed:17:2b:39:6e:31:27:
07:5a:95:05:9f:35:8d:ef:c8:c1:34:dc:c6:cb:b1:
3d:eb:ab:c6:d0:f6:e5:8e:37:fb:82:ed:22:2b:6b:
2f:30:71:8d:c8:7d:b4:a7:51:9b:8d:56:40:d1:f7:
66:7b:be:07:c2:d6:de:f6:60:2d:65:19:90:c6:f9:
fb:93:f6:15:9f:d3:63:ac:92:5b:2c:87:00:ec:8c:
63:41:04:35:5f:cd:6e:fc:d6:cc:94:08:25:72:a3:
0a:ea:d4:8a:08:33:f6:bf:eb:11:a6:70:e1:84:d8:
97:f4:3a:0c:8e:83:e2:97:1c:30:8b:71:ed:d0:9f:
8e:89:95:ed:f8:63:27:87:94:21:53:0b:3e:b8:e7:
df:87:12:c1:93:a3:d4:60:bd:3c:69:ed:95:88:a8:
da:3c:47:c0:69:31:de:70:0a:12:a0:4a:ad:36:3c:
21:3a:1a:26:b7:df:4b:2e:10:fa:6b:c7:51:33:54:
bf:6a:e6:7f:aa:ae:53:c2:89:a7:17:76:83:37:10:
b5:eb:7c:83:ad:07:8b:7a:34:16:62:02:72:1b:97:
61:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6E:41:FC:F4:D0:7D:F5:C6:2C:FC:57:6D:38:D9:0F:B8:B1:0E:87
X509v3 Authority Key Identifier:
keyid:CD:3C:11:0D:FD:77:F5:77:57:39:1C:0F:AE:DE:EB:E3:60:86:57:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:33:43:37:49:2b:73:dc:c4:df:4e:17:92:23:16:03:91:b1:
8f:c2:fc:29:a3:7c:c8:9c:b6:58:41:60:46:e5:c8:23:b4:46:
5c:d3:93:55:24:c4:54:d4:9a:6f:12:a7:c9:13:ed:2b:50:01:
9f:24:98:58:16:4c:3f:d7:8b:73:aa:7a:e5:b3:dd:cd:b7:31:
51:6f:db:31:0b:d7:d5:c4:66:3e:6f:f6:51:3d:8a:aa:a6:4f:
e1:85:85:76:fb:65:1c:05:5a:45:3e:c9:bd:df:68:7c:09:d2:
0a:84:82:57:0e:e1:45:86:5b:df:df:fe:20:b1:59:e8:fa:14:
8d:a1:f5:38:e5:c1:b3:17:45:3f:f9:53:d0:7e:46:e8:c3:58:
82:77:b6:fc:be:80:5f:84:fe:9d:83:37:4b:d7:14:ec:3a:3d:
ff:23:d9:8c:0a:8a:4b:6e:2b:9a:ff:05:20:d3:3b:08:0e:cc:
7e:46:02:a1:57:38:ff:47:4d:4a:3c:67:76:bc:8f:c6:83:66:
72:78:f1:6e:8e:6a:5a:6f:af:5d:59:07:52:b8:51:6f:33:c6:
e9:f3:88:bd:4b:04:61:54:29:36:06:88:c8:d2:ff:e4:80:fe:
95:3b:03:10:50:02:84:74:16:e5:02:b2:5e:80:12:58:01:7b:
ff:7c:67:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:14:42 2025 by rpki-client