Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: I8/bcT9zkfBN7iLsG7AdD7BFJqH8GOF8z0WQuiJVFl0=
Subject key identifier: BA:88:4C:36:43:91:8F:F9:AD:5E:75:5C:C6:E8:52:CA:A4:B3:42:2D
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 019778D4111C11D317DB9902248CA7BB946B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 13:00:53 +0000
Manifest this update: Mon 16 Jun 2025 13:00:53 +0000
Manifest next update: Tue 17 Jun 2025 13:00:53 +0000
Files and hashes: 1: J0wD1VHXSK8IW6oG7-DG_smgYpA.roa (hash: CViIeXhdVqcAItp5448I2Btx/FMsFejPzyYEyeUsBBw=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: d5gmsxuJP0MDaW1lqaMYp3Z0mONK8Dpp7jc/3+Z9/TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:11:1c:11:d3:17:db:99:02:24:8c:a7:bb:94:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Jun 16 13:00:53 2025 GMT
Not After : Jun 17 13:00:53 2025 GMT
Subject: CN=ba884c3643918ff9ad5e755cc6e852caa4b3422d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:b5:f2:85:07:4c:ad:fc:95:23:aa:cb:c7:
7f:d0:c8:da:b6:e2:ce:01:77:c5:92:fc:cb:1a:8e:
53:5d:99:8b:f0:62:4d:41:0c:e8:f4:00:70:13:2c:
b5:52:2d:26:15:2f:6f:9d:01:35:21:0a:e0:58:13:
f9:6e:cd:70:d8:ec:49:63:fa:b0:d5:1a:e1:6d:68:
ca:5e:ea:65:aa:5d:1c:df:6d:79:47:45:bb:91:7a:
36:f7:80:6f:d2:6d:2a:bc:44:67:a1:e5:e0:d2:60:
ed:d2:be:cd:7d:f0:05:05:53:7f:a0:82:33:ab:8e:
fa:b8:b8:de:5b:6a:07:94:53:4c:63:a9:71:70:f4:
ae:58:d3:3f:b1:41:ca:5d:a1:8b:f1:38:9d:87:47:
b3:28:ef:9a:6e:dd:ce:8a:af:69:f4:17:92:9d:80:
7d:b4:73:db:68:3f:61:73:fb:8b:ab:13:31:23:cf:
27:48:51:e7:42:0f:05:6b:3d:c9:b5:9b:1e:c2:43:
16:5a:2d:e7:40:dd:55:f7:7a:93:2e:f9:a7:25:f0:
cb:ee:67:2a:1e:80:84:98:fe:51:a6:27:8e:1b:41:
58:f9:27:4a:48:31:10:11:08:11:63:89:66:b0:b8:
5e:4d:58:c3:56:28:a9:95:86:20:80:e0:95:f2:d2:
1f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:88:4C:36:43:91:8F:F9:AD:5E:75:5C:C6:E8:52:CA:A4:B3:42:2D
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7a:c4:36:e5:c6:8f:38:cb:04:b1:c5:69:d0:0f:61:60:d6:
07:17:57:05:59:24:f6:96:9b:fa:63:07:a8:30:13:18:3f:ac:
41:ac:b9:bd:7c:7f:d9:2f:0a:73:01:93:6e:4f:ac:8a:ec:38:
e5:ce:a7:9f:11:4b:c9:a9:19:26:aa:25:a7:0a:2f:62:eb:bc:
ae:ce:e6:5c:a8:9e:ea:1b:48:0b:f8:b8:28:08:7b:51:7b:83:
46:7e:1c:2e:5f:6c:62:e6:c6:83:eb:c6:a0:24:74:e8:e9:d0:
af:53:9c:e5:43:1a:d6:cd:4a:d9:bf:48:92:a3:2c:fd:69:a6:
ca:9a:9f:f1:be:62:f5:70:9e:4e:3d:51:64:ad:a8:1c:75:6a:
09:ef:2f:42:6b:ba:85:8e:a3:5f:d7:57:10:6b:62:88:d5:8a:
ad:fc:76:93:cb:90:1b:b3:61:b4:51:c0:81:61:eb:d9:c8:a7:
bc:be:e2:72:f4:d9:11:39:e9:ab:aa:2a:4f:bd:aa:17:e9:7f:
c3:fe:1c:83:8d:b6:f3:4d:5f:ff:83:9f:55:5f:35:54:ab:d6:
1a:81:d4:ab:36:5f:d6:90:a6:81:44:e2:7f:7c:dd:09:bb:c2:
2d:93:40:34:b8:fe:50:ec:bf:d1:6c:38:ae:c6:fb:0e:b1:7c:
14:fa:ef:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:51:34 2025 by rpki-client