Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: sYi5c7ULSmaFiCXzosfYAGzJx1RgAIYo7BVNZS0GTos=
Subject key identifier: 1A:D7:6B:11:65:40:02:B3:EE:DA:2D:E1:05:25:DD:89:E3:CC:53:9E
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019768BBB4D435B0F5D091FE41CD6056A4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 0E89
Signing time: Fri 13 Jun 2025 10:00:21 +0000
Manifest this update: Fri 13 Jun 2025 10:00:21 +0000
Manifest next update: Sat 14 Jun 2025 10:00:21 +0000
Files and hashes: 1: iFAQtylr3ZRvM5JOhViQDahNSl8.roa (hash: ziaVf39GfMHlG6F56FK5ey4SYxeBfLmJtFc4nGwT8Lo=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: W2DxIKaZi9GXVGu2tByO31TP6OICBKSOHbBIsRqvEIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:b4:d4:35:b0:f5:d0:91:fe:41:cd:60:56:a4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Jun 13 10:00:21 2025 GMT
Not After : Jun 14 10:00:21 2025 GMT
Subject: CN=1ad76b11654002b3eeda2de10525dd89e3cc539e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c0:55:5b:07:30:bf:10:4f:23:df:77:ab:15:
ef:65:7c:f0:3d:4d:d6:64:d8:ea:02:da:7c:12:40:
95:37:ba:3e:22:ed:1e:8c:ee:54:13:ca:31:aa:85:
dc:de:75:02:72:09:03:dc:74:27:b7:df:74:7e:08:
88:59:cf:1d:31:4a:6c:2c:e6:14:64:ca:83:67:15:
16:33:c9:3b:5d:2c:8b:c6:ee:e3:b6:f1:e1:8d:c4:
42:08:57:7e:31:2b:40:f0:30:2a:36:f7:dd:f6:ec:
73:49:b5:e1:a5:ef:02:14:66:a9:88:f2:06:b6:93:
83:88:3f:91:77:46:d1:a5:70:d5:6d:bc:48:4e:d9:
fc:f4:38:1e:9a:02:cf:6c:08:3b:48:0c:8a:26:75:
8e:d6:59:0b:95:83:0a:15:bc:7b:e6:bf:61:da:95:
1b:58:fe:b1:f9:f5:c6:3c:67:77:35:7f:ea:43:9b:
b8:33:f4:60:14:eb:20:0e:aa:de:41:09:60:f9:d7:
72:6b:5c:7e:39:20:04:0e:28:b1:e3:ee:23:f9:07:
33:fe:e9:e4:67:29:af:fe:ee:6f:59:ab:0d:0f:21:
65:2b:04:b1:cd:d2:73:e9:19:66:93:ab:bf:6d:b6:
1f:8c:71:84:f5:4d:28:ec:39:b7:95:41:8a:db:78:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D7:6B:11:65:40:02:B3:EE:DA:2D:E1:05:25:DD:89:E3:CC:53:9E
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0e:46:db:bd:e3:72:15:66:68:c1:d0:1a:94:ab:53:05:17:
f5:30:4e:32:dc:d0:ab:8c:b7:ae:b1:17:ae:58:c8:23:63:17:
1b:c7:82:e4:d6:3a:96:68:73:ec:b3:29:59:b2:74:0f:35:37:
51:87:c5:69:23:53:31:c0:fb:00:97:cf:d9:28:35:0c:95:28:
25:c3:f6:d6:10:1f:7c:f9:c9:ef:61:ae:bd:1e:a6:bc:76:d6:
71:b9:06:cc:43:34:c1:94:33:0e:cf:d1:73:1a:f9:5b:b6:a6:
8a:8d:a8:5b:e4:65:fb:27:16:f6:86:ae:61:8b:e2:62:8f:7b:
18:3e:d3:83:10:54:b0:bc:8e:3c:d3:36:4a:27:08:4f:93:d1:
4e:f5:ea:dd:7b:84:2d:cb:32:11:c4:b6:60:8d:f3:a8:3c:9f:
f7:04:b9:9e:0c:e3:c8:b7:88:51:2f:42:2c:cd:b5:22:94:bd:
14:b0:6e:11:a1:8f:57:82:da:26:fa:93:08:34:dc:c3:e9:bc:
a1:3d:ef:75:21:78:79:23:7e:f3:13:2c:56:b1:53:25:65:ec:
d2:ac:e1:0f:ba:87:2b:12:a2:6f:85:6e:83:9e:80:a4:8a:d1:
dc:4a:d2:8b:de:ac:e1:1c:f9:d2:01:65:a0:ca:43:6d:4f:7a:
8f:f6:b2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:57 2025 by rpki-client