Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: Z17jr5lK9U+LTI6fAZ5ZJj8gLdFG43Mu7gVXMiH+ekI=
Subject key identifier: F2:A7:27:02:FF:28:6E:4C:9F:58:C5:F8:EF:55:4C:CE:A7:15:CC:EC
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 0197808D7D85F57264B9B80DAC1B738ED9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 1598
Signing time: Wed 18 Jun 2025 01:00:45 +0000
Manifest this update: Wed 18 Jun 2025 01:00:45 +0000
Manifest next update: Thu 19 Jun 2025 01:00:45 +0000
Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=)
2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: iAp+FoxQiyb8x6cY5qey6VXcjkR/Jl30xjohYu4Lhlk=)
3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8d:7d:85:f5:72:64:b9:b8:0d:ac:1b:73:8e:d9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Jun 18 01:00:45 2025 GMT
Not After : Jun 19 01:00:45 2025 GMT
Subject: CN=f2a72702ff286e4c9f58c5f8ef554ccea715ccec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:f1:9d:9e:b6:b3:43:c9:d2:fc:f8:51:e0:
09:41:c2:fe:d9:ab:1c:08:d7:a7:13:3b:d0:85:fe:
fb:86:2c:52:1a:bb:de:36:0a:34:0f:17:dd:4b:bc:
cc:88:34:36:69:64:f6:11:f9:c7:95:27:75:57:7e:
7b:dd:b1:2f:d5:17:a2:b9:29:35:84:b6:a6:83:fd:
dc:e2:9e:02:bd:ff:b5:39:00:3a:68:51:ef:8e:45:
61:9f:46:59:10:27:2c:f8:7b:bc:74:78:a4:d0:f7:
ef:c3:02:74:c7:a6:61:44:2c:5f:b3:f8:cc:60:f7:
c8:65:93:25:d0:58:4c:e3:a4:4a:af:79:c9:a3:72:
2f:a4:28:c7:7c:18:ed:39:90:30:a1:1c:df:31:89:
1b:7c:c2:34:c2:60:c6:7a:91:df:65:5b:db:5f:c9:
6c:52:56:6c:de:4b:e1:5f:0c:4d:d3:05:a6:66:15:
90:11:84:a3:83:41:0c:21:7a:b5:88:5c:2e:9d:d0:
08:5a:48:fb:b2:43:b0:4d:ec:5e:3a:aa:71:54:82:
7b:bb:86:e3:35:db:2a:07:29:a2:a1:b0:7d:fd:c6:
6b:0d:83:bd:f2:f1:56:80:9b:27:16:58:c6:8b:cb:
d4:4a:f0:c9:c4:6f:ca:08:c5:65:a8:bd:bf:07:18:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A7:27:02:FF:28:6E:4C:9F:58:C5:F8:EF:55:4C:CE:A7:15:CC:EC
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:69:d9:85:4d:2d:1f:a7:3b:18:fe:20:73:32:1f:a1:19:06:
e9:cf:55:84:55:de:e6:2f:1a:5a:46:48:95:db:cd:b9:f9:ed:
71:a3:1a:4e:17:32:f2:c3:f4:db:bc:26:01:9c:ce:de:72:8f:
4f:20:40:cc:0b:5a:f3:ee:9c:85:53:f7:a9:99:a1:3f:be:90:
31:5a:e4:9c:f3:5e:50:50:35:fa:46:e0:31:bc:69:6b:6c:b9:
82:ac:e9:c4:85:95:f8:cc:6d:a1:e1:53:dd:04:36:bf:a2:09:
76:af:a7:3f:3c:78:6f:50:d0:1c:67:f2:5e:58:d9:a9:be:37:
c5:77:52:cc:a8:32:ee:03:2d:37:f1:26:6f:d6:b8:19:1f:6d:
f7:db:c0:33:bb:3e:16:4a:f1:e8:72:c0:bc:95:bc:62:c7:0a:
be:a4:24:68:54:91:82:b7:e6:1d:de:f1:77:e7:f7:3e:9d:da:
75:41:14:a6:b6:05:7b:98:4d:a8:af:8a:0a:1d:ed:ae:ba:d7:
79:a8:d0:d8:fd:d8:3a:66:b6:0e:94:04:be:df:7d:56:f0:a9:
ef:70:fa:ae:0a:5c:b4:f7:40:98:ad:23:10:ac:2b:13:d7:e7:
ce:ec:b7:25:cf:f1:bc:b3:50:33:ea:6d:27:7a:9a:02:69:be:
6a:a2:ac:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:48:29 2025 by rpki-client