Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
File: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft (raw, json)
Hash identifier: 44KKTpFhRccAfcSXrdJyMo5sqpeCda4RUEgwQasq33k=
Subject key identifier: 9E:04:C3:6D:B3:F1:D6:23:85:E7:DE:38:CD:29:94:21:65:30:5D:E7
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 01976929CB23C4EBBBE576FE9939DA303540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 12:00:36 +0000
Manifest this update: Fri 13 Jun 2025 12:00:36 +0000
Manifest next update: Sat 14 Jun 2025 12:00:36 +0000
Files and hashes: 1: O_KCzwVMWWFZcOERuZfC4YWn9FY.roa (hash: GvDcDGS0R/CSMmzRrzV54m/DC/W2FYWSA7lqDitIkMA=)
2: bp7wOLoR7KHYyMpRk1AVcymuiZM.roa (hash: xjmDEJIk2t11tVAVqOoUo8z5SEcqH7rBtC3fb0L+2ZM=)
3: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl (hash: gL7Qy0CbuNHaVGW1J+OYdhS+JbNJNMs2zubPGm1cKRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:cb:23:c4:eb:bb:e5:76:fe:99:39:da:30:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Jun 13 12:00:36 2025 GMT
Not After : Jun 14 12:00:36 2025 GMT
Subject: CN=9e04c36db3f1d62385e7de38cd29942165305de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:61:cc:fa:15:d5:cd:e9:ed:be:b7:f3:4e:
20:1a:00:05:ac:70:4b:b6:77:c6:80:ab:67:0c:65:
58:2e:c0:f6:a4:60:ab:6c:53:ec:b2:ce:57:4f:ee:
55:9e:c7:c4:bf:d2:6b:24:74:98:76:e8:12:70:9f:
a5:6b:a3:9b:98:82:db:c5:63:2a:27:99:93:9b:b0:
a1:ce:7f:b5:e5:a0:bb:46:a9:83:38:61:49:f8:ee:
61:d4:d3:d3:d5:01:b2:8d:08:a6:3f:a5:a0:35:5e:
d2:df:fd:cc:e1:17:0e:14:73:6e:c7:7b:97:93:16:
ce:2d:20:c3:5c:19:0d:56:03:19:54:86:74:4e:34:
56:24:56:a6:0d:ff:22:81:6b:30:49:82:69:4f:f4:
a0:cc:f3:07:44:0c:c3:d1:74:bb:d5:38:2b:29:96:
47:c8:41:93:2c:12:33:27:fb:37:03:5a:3d:59:0c:
2a:08:87:af:87:08:fc:8d:53:c7:fc:82:20:78:a8:
b0:93:3b:e6:5d:20:a4:06:48:db:6d:62:34:76:4d:
a4:3b:f5:6f:9a:f6:20:05:1b:0f:5d:90:41:86:62:
78:43:a3:45:e8:08:05:70:4c:81:ac:ca:48:af:4b:
52:1c:dc:b7:8a:99:11:b5:a4:59:88:a3:28:42:69:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:04:C3:6D:B3:F1:D6:23:85:E7:DE:38:CD:29:94:21:65:30:5D:E7
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3b:54:0f:ab:3c:99:5c:24:44:07:5a:41:e0:fe:3d:a6:9f:
5d:b3:2e:76:99:1e:65:89:2a:73:fb:a7:9d:86:b9:9b:ae:c1:
67:56:51:03:ed:10:82:39:d5:7e:db:00:35:25:d0:38:b3:2d:
3d:87:5f:80:56:79:a3:c5:bb:f1:62:a2:24:b7:bd:31:39:ae:
d0:08:78:57:34:e4:c9:4f:02:b1:20:f4:62:c8:a7:44:ff:3a:
31:d9:53:41:29:70:6c:ab:ad:dd:18:77:a0:b6:0c:6c:cd:87:
d7:66:0c:84:4a:db:51:01:c6:65:b5:cb:a1:2f:9c:8e:00:e9:
86:99:d2:97:e3:83:b7:e6:e2:d2:f0:40:4b:c5:91:ee:0b:02:
fd:4c:cb:a7:a3:14:ad:a1:4a:dc:67:a8:d1:3e:69:05:1b:52:
af:1e:2a:06:dd:72:76:84:80:2c:f4:98:bd:11:9d:d4:28:d2:
df:cc:71:92:3e:03:4e:34:6e:c8:6b:1f:3b:27:3b:e9:e8:43:
de:10:47:9c:6e:61:53:22:e2:0f:29:93:07:8e:0f:bb:c9:79:
ef:d2:02:dc:76:c4:01:3f:88:6e:15:19:c8:62:37:44:8e:2d:
9f:c3:cf:d3:3b:78:64:b4:e1:d7:59:35:c2:38:bc:ea:15:ee:
72:9f:63:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:45 2025 by rpki-client