Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: e0VjYV6sDd8mQ9NfcPFMt18CT+Ixk/oFXfSJUQ3OaoE=
Subject key identifier: AB:6C:1F:C8:0E:AC:BA:DA:00:76:1C:31:DB:F0:DD:23:E3:57:DC:15
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 01976929B56AB3BE07B0817CFB6B242BAE1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 12:00:30 +0000
Manifest this update: Fri 13 Jun 2025 12:00:30 +0000
Manifest next update: Sat 14 Jun 2025 12:00:30 +0000
Files and hashes: 1: XmInGKZQVpi4yiOnRct1YYYqWiE.roa (hash: R86EgdaEJJTkg9AcxCYcJUrFnlotYJxO2Dz2JbHzD6o=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: u9c5XSVv8I9X2mcRk0CnIN/HxKfArCKguJlUI1fFJjU=)
3: quUKUBb4zZe6-7AC8l87cCVH0H0.roa (hash: GrPFGNPKw3mudZK+q8bDj+RCkl+C4u9ag/IOaEBEaJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:b5:6a:b3:be:07:b0:81:7c:fb:6b:24:2b:ae:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Jun 13 12:00:30 2025 GMT
Not After : Jun 14 12:00:30 2025 GMT
Subject: CN=ab6c1fc80eacbada00761c31dbf0dd23e357dc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:0b:8c:03:42:05:4e:4d:0f:2e:99:25:37:
ed:c7:1d:cd:d5:20:8d:b4:5b:12:33:56:4a:f9:0d:
fe:12:ab:b2:88:39:3e:fd:b7:e3:52:55:96:0f:92:
2f:d7:37:62:b1:c1:fb:95:c0:ef:96:04:79:48:d5:
69:c0:dc:6c:7e:35:46:16:05:4f:3f:73:cc:13:3b:
61:ba:c4:99:1e:d6:7e:53:30:de:f7:2d:5b:fe:7d:
1c:59:ad:6d:08:ec:75:75:30:26:36:68:f7:14:dd:
1d:a4:97:fe:23:9b:fb:9a:c6:62:d3:c9:7d:96:54:
26:6b:d6:03:43:76:ac:8f:dc:bd:aa:d3:ac:a2:f9:
c6:25:e4:42:6b:61:1c:7a:3d:af:c9:ff:73:7c:75:
f7:5c:1a:44:49:15:e2:75:69:04:b6:0e:4c:66:23:
db:da:e9:02:b5:88:87:d6:36:fd:ef:9e:e9:b4:7c:
e4:77:94:30:58:38:ee:5b:c6:aa:4d:d5:1b:25:3b:
60:7e:e8:dc:38:6d:dc:ae:5f:83:8b:0a:49:94:e4:
60:e9:b4:65:fc:6f:1f:6d:93:f1:16:e1:c0:c2:0a:
34:d1:f2:60:74:ad:dd:ab:d0:36:fc:45:26:aa:ac:
26:a2:c3:ed:ec:48:cf:78:7f:57:24:19:e9:32:32:
2d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6C:1F:C8:0E:AC:BA:DA:00:76:1C:31:DB:F0:DD:23:E3:57:DC:15
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:86:9e:b7:f9:31:98:1f:07:21:0a:48:3d:81:66:15:37:18:
31:c2:6b:f6:b5:df:36:c9:73:18:43:f6:6e:c4:01:1e:f4:fe:
cc:31:d0:51:4c:03:a0:a0:92:6c:b1:7e:be:f3:4b:8c:3b:c2:
a5:9e:53:37:8f:10:1d:5e:05:24:97:ad:ab:01:f7:20:02:8e:
9d:f3:57:e3:1b:4f:f1:2a:f8:02:74:b3:ac:c5:70:65:fb:02:
c6:7f:d5:3d:cb:bf:0b:9f:de:65:d3:be:d8:85:2c:a9:ad:db:
d6:e6:5e:9e:df:48:b9:83:ea:37:4b:c5:ed:77:12:57:04:57:
5f:e7:e3:77:79:81:f2:93:ab:2b:66:ff:da:f6:fd:13:8e:6d:
84:6c:1a:2d:f8:2a:22:85:fc:04:ec:ed:47:3d:47:3d:3f:38:
40:c2:f0:51:22:4e:75:05:3f:1f:f9:5d:28:86:3d:bf:87:c0:
8d:7d:ce:23:94:03:fc:d9:82:17:77:52:2c:57:4c:15:79:24:
3b:3f:ec:6e:a3:03:13:ca:99:3f:f5:c3:82:e0:3e:44:a8:45:
25:79:12:1e:e8:97:2a:01:a6:97:24:c4:dc:43:e3:58:8f:c4:
db:72:1e:18:a2:2f:7a:56:e6:a7:65:08:b8:d9:c5:87:0c:3b:
69:32:e7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:03:21 2025 by rpki-client