Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: 7xoh+iieSf6jFnQWlBrofezci7B6Nt7t+R/Y+0hhzsk=
Subject key identifier: 89:CF:F6:90:B5:19:52:FD:E7:1E:5C:CA:D4:67:DA:CF:1F:35:6D:CC
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 01976D3E6C6EFEB913A0B603974CDD93B7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 0A60
Signing time: Sat 14 Jun 2025 07:01:36 +0000
Manifest this update: Sat 14 Jun 2025 07:01:36 +0000
Manifest next update: Sun 15 Jun 2025 07:01:36 +0000
Files and hashes: 1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=)
2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: amEgZi9CR8mTPmtD+uKr8+XLuS0Xh2ELtvnfooqmqFw=)
3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:6c:6e:fe:b9:13:a0:b6:03:97:4c:dd:93:b7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Jun 14 07:01:36 2025 GMT
Not After : Jun 15 07:01:36 2025 GMT
Subject: CN=89cff690b51952fde71e5ccad467dacf1f356dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:ff:86:76:c1:4c:f8:a3:a2:8e:c3:36:e5:
c6:fa:19:93:b5:93:a3:ec:02:8b:ee:eb:3f:95:39:
74:c6:01:da:f1:04:63:1c:8d:66:b4:ae:32:ba:42:
97:d6:31:34:fe:43:c4:c7:8d:2e:54:2d:00:8f:02:
3f:be:f7:42:3d:2a:76:fd:ab:ed:4c:3d:47:3e:29:
bb:6f:33:2f:68:40:56:5e:c5:4a:f0:01:d7:05:a7:
1f:5c:e1:95:ab:80:cb:18:fa:22:0e:1b:9f:18:f2:
6d:7f:f3:c6:7f:b7:0d:d4:33:f3:d1:cd:2d:7b:8a:
b9:0a:ea:a9:b6:08:73:85:8a:15:d4:19:9d:64:40:
76:6d:37:98:a6:7d:a3:aa:b6:2e:f3:46:3f:ab:bf:
a2:d6:d5:7e:6d:84:ec:fd:db:89:b8:4d:22:51:1e:
6d:e6:ca:07:84:85:ce:12:ec:21:2f:5d:19:75:c5:
74:a9:dd:2a:e5:fa:33:07:11:25:c1:39:20:24:57:
48:bc:f7:ef:46:60:b5:0e:33:fe:fc:e5:c2:47:01:
80:c8:d6:eb:95:23:39:10:5e:db:3f:1c:1c:26:db:
57:7c:5a:01:10:07:87:fc:03:ed:a0:b4:4b:a2:2e:
68:13:d9:be:69:69:32:17:28:5a:3f:30:44:80:4b:
35:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CF:F6:90:B5:19:52:FD:E7:1E:5C:CA:D4:67:DA:CF:1F:35:6D:CC
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2c:80:55:e4:01:45:a7:51:bf:c7:da:3e:9b:57:e7:78:3a:
7a:09:90:02:98:51:58:35:1b:8f:bf:86:71:22:03:2f:43:0b:
42:4e:87:ce:9c:98:fa:12:d9:26:64:a1:ff:b0:b4:4c:78:ed:
25:e8:39:b4:46:00:dc:3d:99:be:ee:2d:ec:6e:7b:75:a5:d2:
00:2c:56:84:4a:69:71:3e:ae:06:93:46:15:90:7f:64:45:d3:
71:23:9c:3a:db:c9:19:c6:d8:4c:01:e9:25:7b:d3:57:93:89:
79:b9:08:8d:ef:86:de:4d:7d:fa:f3:16:f1:15:7c:80:15:66:
7c:64:1b:cd:78:70:0f:2c:39:13:af:f8:71:3c:0b:5c:42:4c:
f1:3d:85:c2:bb:e1:79:8c:bb:a7:c0:29:96:b5:4c:4a:a6:a6:
a7:07:7c:33:f2:49:94:db:d5:71:4d:ef:b2:2c:9c:0a:44:82:
08:dd:ac:26:0a:a9:bd:fc:6d:71:67:0d:86:42:15:42:e8:fb:
15:af:f4:20:74:a4:50:37:a8:69:df:5a:f7:e5:b3:e3:5d:a8:
42:27:03:b1:ad:54:23:6c:a5:19:1c:d9:f2:9a:f8:89:7e:90:
0d:57:0b:7a:3c:a0:9b:00:c8:1d:6b:6d:dd:57:a6:a9:35:98:
7d:6f:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:38 2025 by rpki-client