Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: wrldk29BeKygZgxZXFdHx/Q5jdDPZGEMNONR8dyZPYc=
Subject key identifier: 06:0D:A4:04:ED:8A:19:38:B9:5A:B1:9C:2D:88:3D:08:44:98:88:B2
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 01989336E67C3E3FC6FEED00C2CBE2B77B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 14FA
Signing time: Sun 10 Aug 2025 09:01:45 +0000
Manifest this update: Sun 10 Aug 2025 09:01:45 +0000
Manifest next update: Mon 11 Aug 2025 09:01:45 +0000
Files and hashes: 1: 39Bz52ELCw7-ugSWUI3vnSlzFNg.roa (hash: rckVCS2UVoKbUdjWWt9CdJoQbIemzvnGfOdJDV2aAiA=)
2: Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa (hash: 6u7uSnyKmvTYrS//fLotXcXAf6aLw/ExzniA6nUG6Kk=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: cFiYxME/G/w5EQCCOIm15I3u+4adeuON5oconGenPCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:e6:7c:3e:3f:c6:fe:ed:00:c2:cb:e2:b7:7b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Aug 10 09:01:45 2025 GMT
Not After : Aug 11 09:01:45 2025 GMT
Subject: CN=060da404ed8a1938b95ab19c2d883d08449888b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:3e:7e:b2:1c:26:3a:0a:60:3e:49:68:f8:
70:96:8e:ea:f6:68:f8:20:2c:cf:0f:6e:f7:b6:34:
62:c4:70:ee:b8:be:05:c5:9c:42:97:d1:7d:23:57:
13:98:38:b7:32:ee:7e:31:41:4a:4d:7c:c4:95:e1:
94:10:39:51:00:86:9c:fc:e9:5e:ec:94:85:d0:67:
0c:88:89:3b:14:3f:dd:e0:61:2f:e3:74:85:c5:00:
67:58:c8:90:7c:5d:c3:65:89:8a:3c:6b:bb:d9:2b:
f6:b8:7b:43:cd:7c:ad:70:f6:73:30:d7:1b:78:5e:
fb:6f:f3:37:9b:ea:a6:20:38:2b:e9:06:41:ee:97:
48:75:e3:2a:6c:59:0a:87:b0:d9:35:92:f7:de:aa:
9a:df:05:1d:8b:48:b9:7a:ac:c7:49:08:21:4f:db:
ad:f0:68:0f:3d:15:c9:2d:8e:07:16:0c:e3:7b:06:
96:2c:03:d2:fb:4f:51:56:69:e1:30:ce:bb:de:7b:
92:97:e1:3b:ab:a2:ce:d3:9a:c7:a2:7e:03:30:5c:
47:a8:87:cc:e1:bc:47:97:da:3d:eb:43:31:4f:0d:
d8:f5:d6:3e:7f:90:40:94:0c:64:ed:ee:98:8f:4b:
23:5f:73:25:1a:e3:be:0d:24:1f:01:54:cd:87:08:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0D:A4:04:ED:8A:19:38:B9:5A:B1:9C:2D:88:3D:08:44:98:88:B2
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:06:dd:cd:7f:9a:d9:f6:56:8e:f8:97:17:b3:01:b2:d8:69:
5f:7b:a7:66:c2:a6:d2:2e:4e:92:65:f2:f2:ed:7b:1d:4c:bb:
a9:d4:9b:6f:23:13:3f:9e:93:ea:e6:88:88:c9:26:ea:cb:1f:
69:78:e7:63:b0:61:ed:3c:50:bb:60:db:08:bd:77:71:a4:22:
e6:5f:ae:07:9a:35:67:79:1e:41:b6:b3:46:48:b4:cd:61:8e:
d0:84:c0:21:b9:01:67:fc:1f:bc:2a:df:7e:e7:1b:3c:4f:0b:
b8:08:66:a0:af:68:8d:56:d2:8c:6d:b8:b4:f0:b0:87:4a:ca:
3b:3d:bb:aa:eb:a7:61:0f:fd:85:60:fd:65:92:0d:82:25:72:
38:7b:ff:2e:10:f9:36:e5:74:97:6c:18:c3:34:1e:75:f7:ff:
1e:97:41:db:77:5f:8d:42:66:d4:9d:79:bb:18:6b:03:3f:21:
b4:f8:46:9b:77:40:44:50:1a:fb:fb:a7:0d:63:40:3c:eb:2e:
0b:e1:ea:90:56:3f:7d:6b:18:bd:16:97:76:ca:d3:70:50:ca:
e0:0a:b2:ca:4d:0f:51:05:4c:fd:f3:f8:1e:4e:d9:f6:ba:50:
e0:57:4e:4d:c3:2c:a3:d2:a7:ee:44:a8:53:42:1d:40:ed:e5:
7a:f4:14:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:00:08 2025 by rpki-client