Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: mpSb/zagwI9PHzYcmwRoqmnCm0qwrats7uzvkrIQ8Jk=
Subject key identifier: B6:57:8F:DA:A2:84:A2:C6:61:7E:36:FA:48:0A:70:C3:19:26:73:F3
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 019782E9A7390BCBD8141A6F1D8F455F2641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 159B
Signing time: Wed 18 Jun 2025 12:00:40 +0000
Manifest this update: Wed 18 Jun 2025 12:00:40 +0000
Manifest next update: Thu 19 Jun 2025 12:00:40 +0000
Files and hashes: 1: 2gXpcecRRCZij4ZXTFv5wgCwpoc.roa (hash: XTp2a7d9Z4/ce0bBWK6Hs10N2L5hCV8LpzUzoDu0gs0=)
2: 6UlZFNCUrDjb89rguKwpyS9qT0g.roa (hash: D/Hmsl6tGFB+vz20t6vs0y0e3hMtr6xcd6Lxa8Hmltk=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: 9CQCr1ldZo1QbducrQOw/jUCd1ympGrmEEMHYl1WbpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:e9:a7:39:0b:cb:d8:14:1a:6f:1d:8f:45:5f:26:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Jun 18 12:00:40 2025 GMT
Not After : Jun 19 12:00:40 2025 GMT
Subject: CN=b6578fdaa284a2c6617e36fa480a70c3192673f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:ad:ea:ce:bb:95:19:22:08:4c:11:50:b8:
eb:52:3f:4c:a1:af:f2:0a:ff:c9:93:9f:67:49:95:
d2:bf:f3:5b:d3:e0:89:2d:8d:95:29:1b:22:6a:37:
a2:f9:e3:48:49:2f:84:03:e8:7b:52:ea:86:78:83:
a3:ac:3d:e4:ae:12:40:48:36:88:b8:d3:3b:ce:53:
b0:a9:46:a8:99:e0:c7:84:80:cd:d4:32:86:f4:a8:
7b:b7:5a:8c:8c:eb:db:ef:a5:71:ac:12:04:96:c1:
e1:ee:ef:e6:6a:65:a0:da:56:20:91:19:f6:2e:6d:
da:f0:a4:43:cf:85:7c:86:27:a4:20:1e:f0:f7:ab:
fa:d6:d9:ee:79:b1:ba:23:a9:6c:9f:7a:b5:94:22:
53:eb:90:0a:79:b3:0d:05:21:a9:08:bb:cc:95:40:
37:95:21:82:c8:91:c8:36:18:25:56:a3:4f:bf:b9:
18:03:62:a0:c5:31:95:21:e5:79:d9:96:c9:97:60:
59:8d:24:1e:6a:4f:bf:14:50:f9:d5:49:85:04:95:
6e:9a:64:96:d8:38:df:59:51:63:26:0f:8f:95:52:
df:28:6f:1a:d7:3a:b0:2c:7f:da:bd:c5:8d:d5:a5:
06:a7:bb:19:fc:a5:b9:51:70:c8:fc:73:29:b9:fd:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:57:8F:DA:A2:84:A2:C6:61:7E:36:FA:48:0A:70:C3:19:26:73:F3
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:48:a4:28:17:1b:94:92:15:60:2b:94:7a:71:c2:f0:d4:0c:
ad:98:90:6f:cf:06:99:4f:ac:6d:90:b8:88:37:ea:f7:a6:1d:
55:f0:2c:a6:8c:90:ea:d2:8d:d1:5b:2d:13:bf:a2:17:71:a9:
2c:98:51:5c:91:34:32:69:8f:02:d4:76:85:f0:e9:7e:2e:9d:
7d:b5:10:51:60:ba:19:21:c6:f4:3b:13:5f:5a:6f:74:89:7f:
41:7a:6e:69:77:75:81:7d:69:64:e0:8c:3b:69:47:4c:d9:82:
8d:fa:cd:91:3a:7c:39:13:4f:26:e5:9e:91:d3:4c:43:a4:87:
5e:1c:4a:84:8f:be:92:31:be:6b:18:0b:67:d2:fa:c6:f7:74:
a2:38:34:da:cd:64:91:e4:ec:03:22:92:0a:63:ce:03:08:55:
72:01:b3:95:f3:20:ac:62:52:58:37:5d:b4:4c:8b:db:16:ec:
eb:66:21:46:d1:c0:75:8c:87:9c:9b:43:82:49:78:9a:6c:b1:
85:66:cc:ee:fb:ce:48:d8:f1:f7:0a:38:70:a8:61:af:18:2b:
52:ae:81:44:9d:d3:93:a5:0d:fd:2b:e5:e9:1e:a4:e1:15:f4:
08:53:0b:fe:49:38:b4:a7:d9:f2:09:e6:c0:cb:c6:7a:41:31:
9c:3a:8d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:27:12 2025 by rpki-client