Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
File: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft (raw, json)
Hash identifier: bZhq6nam4N7yBQfSDaKag/+3cF+RGKCM5OsMsoHsLPM=
Subject key identifier: 5F:04:EB:AE:06:EE:E3:2D:0E:80:A4:C0:79:61:6E:95:8F:D3:75:42
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial: 019770AC793C10981943E3B3C7B75DF9F1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
Manifest number: 0B43
Signing time: Sat 14 Jun 2025 23:00:40 +0000
Manifest this update: Sat 14 Jun 2025 23:00:40 +0000
Manifest next update: Sun 15 Jun 2025 23:00:40 +0000
Files and hashes: 1: pbWUlF6kph4C-luLlJFzTT778aw.roa (hash: FFtm0Ye7lx+oD8pt9jf446A0y5P8uQmRXJuEy3Pug1Q=)
2: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl (hash: uCmFk7TPCM35uM7BgYIJv8kGqUomEad/FM+0EuPIQNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:79:3c:10:98:19:43:e3:b3:c7:b7:5d:f9:f1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Validity
Not Before: Jun 14 23:00:40 2025 GMT
Not After : Jun 15 23:00:40 2025 GMT
Subject: CN=5f04ebae06eee32d0e80a4c079616e958fd37542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:e8:c1:cc:60:97:10:63:eb:02:f6:dc:a2:
9b:db:a5:91:74:c1:ab:2f:eb:81:76:75:ba:7d:a2:
2b:48:8f:d0:3a:b1:68:b5:2e:24:99:8d:3e:5b:1b:
53:a0:48:f8:80:0b:b6:37:c8:8a:9a:39:3d:0d:3c:
ed:fb:ad:08:e8:ab:6e:f6:6c:d6:64:fd:b0:00:1c:
13:f6:dc:e2:43:d8:64:5a:64:9c:25:e0:d9:38:cb:
2b:df:3b:88:9d:03:3f:44:cf:a3:f1:32:64:44:83:
c9:1e:32:6d:ab:4b:c8:8d:a1:e9:ed:aa:78:73:21:
33:d5:fd:f2:87:07:4c:63:06:62:e8:7a:8d:84:00:
20:f1:9a:d4:8b:8d:4c:ac:36:72:18:94:ba:48:d4:
31:1e:0b:91:47:3f:a3:7b:99:21:86:c5:60:8a:83:
ea:3e:ad:a7:f2:f0:82:86:ba:fd:83:45:fb:59:20:
ec:13:cb:36:b0:ae:1d:64:26:f7:72:25:c5:29:14:
d6:9e:c5:8b:29:1a:5d:6a:1e:a8:3b:34:dd:63:15:
6b:32:3c:f2:1e:d1:89:e9:77:06:77:42:b4:3d:67:
0f:83:44:09:4b:34:26:75:2d:1a:90:85:03:70:bc:
26:7e:8e:5b:35:7d:53:af:37:23:bf:e2:6e:ba:23:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:04:EB:AE:06:EE:E3:2D:0E:80:A4:C0:79:61:6E:95:8F:D3:75:42
X509v3 Authority Key Identifier:
keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:23:6d:53:4f:6b:e8:1f:cb:06:73:2a:f4:31:0a:e2:e0:d7:
46:84:8c:e4:63:c9:e7:ee:a1:c7:41:bf:16:c7:0b:63:40:d8:
f7:cd:e3:65:61:9a:fb:5e:66:a6:db:e3:90:ac:32:ac:35:da:
fa:6e:0e:e3:d0:10:a2:9f:08:92:0f:99:7d:b9:d9:d1:6b:3a:
5d:81:e4:5a:3f:91:1d:ce:2e:23:a9:8b:ea:2a:c4:6c:97:9e:
a9:99:50:85:57:70:ec:d1:0a:d0:be:39:c9:4d:cf:3e:51:7a:
f8:cd:29:d5:bb:0c:21:c3:e7:75:4b:bc:e4:d0:a8:a4:3b:76:
3d:b8:32:7d:0f:03:54:a1:5f:64:bb:0c:0b:34:f1:41:bc:37:
fe:a5:fc:30:70:ff:6d:87:b3:a3:3b:15:ca:3f:f4:3a:32:f4:
ac:f7:49:fd:1b:1e:63:6d:34:0e:af:16:1b:9d:7d:b8:24:25:
ac:84:29:b3:d2:55:f5:76:ea:92:3c:d3:b5:f6:8f:ff:cb:19:
14:eb:eb:49:f4:cc:0d:26:59:5b:29:65:7e:67:8d:09:44:39:
bb:cf:26:01:72:c0:44:39:ed:80:94:2e:ca:8c:c6:73:30:39:
21:13:1d:c6:65:82:43:d2:36:6a:7f:3f:a0:dc:47:22:ee:ab:
23:d4:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:02 2025 by rpki-client