Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
File: zcmBSoLMto9Rw3v4OubPV4JEyho.mft (raw, json)
Hash identifier: 2FWCNrR7UkokIonSfEOHNDx66646LlPq3YkHBWLMCqc=
Subject key identifier: BB:87:DC:8F:9A:B1:A6:12:88:5D:05:C4:94:77:EB:43:20:01:D9:C0
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 01976997DAA49A616762C6A9C123F2FF81CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
Manifest number: 1492
Signing time: Fri 13 Jun 2025 14:00:48 +0000
Manifest this update: Fri 13 Jun 2025 14:00:48 +0000
Manifest next update: Sat 14 Jun 2025 14:00:48 +0000
Files and hashes: 1: LenxSXNvYUG0PNAIsxLHW6t8Gig.roa (hash: 2tRf/A4+PlvxT/fJxe1ZYsaChcE92rdvTlPk4uzM12k=)
2: RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa (hash: Pc/AiM+TyshIYca3WAF87A9bUXB/n7CNYqhspT/vd/c=)
3: zcmBSoLMto9Rw3v4OubPV4JEyho.crl (hash: O7zlMNhUB171vETPKbs8lbNCRcVfifo9X91XQ23oPb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:da:a4:9a:61:67:62:c6:a9:c1:23:f2:ff:81:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Jun 13 14:00:48 2025 GMT
Not After : Jun 14 14:00:48 2025 GMT
Subject: CN=bb87dc8f9ab1a612885d05c49477eb432001d9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c1:88:c1:cf:fe:33:86:c2:3a:8c:71:fd:d7:
05:68:67:75:2c:5e:74:76:9d:b5:87:d5:2a:24:6b:
c3:2f:5d:9a:a6:c3:ae:43:86:9e:0b:5e:95:12:21:
0a:55:11:21:e3:0c:26:4a:bc:0d:86:f1:e0:a7:c9:
93:bd:f3:0e:76:a6:1a:24:45:50:86:2e:81:8c:70:
2e:a9:a9:88:4e:77:dd:d8:73:7c:9b:d0:eb:45:92:
ab:6c:2b:2d:3e:d2:ab:db:7b:27:bd:df:4a:91:45:
a1:4f:5e:21:83:f7:38:0f:97:bd:a2:55:38:65:30:
06:0e:0b:d3:bb:5b:bd:09:a9:61:58:ca:25:12:d3:
0c:8d:62:97:1a:e2:e3:7d:2e:f6:87:4a:37:c0:ae:
a9:57:76:d0:9a:1e:9a:8e:5c:cf:a5:f2:3b:ec:ab:
6a:7b:bf:93:87:a8:7f:d3:6e:29:06:9e:da:cf:db:
57:35:c0:1d:db:dd:36:d3:2b:2e:80:91:f5:a0:56:
dd:de:d1:ee:2c:a5:de:8e:b7:54:66:37:6c:dd:14:
a2:a9:69:13:52:11:5d:7f:a3:11:be:ba:40:ab:77:
93:14:12:f6:74:b1:36:e1:2d:24:f5:02:5b:0c:cb:
a7:05:78:c0:46:8a:86:e3:26:4c:ff:24:de:a6:8b:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:87:DC:8F:9A:B1:A6:12:88:5D:05:C4:94:77:EB:43:20:01:D9:C0
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:77:28:e9:5b:19:5e:5a:05:0a:f6:69:8c:11:d4:9f:ec:01:
17:5c:ba:f1:bb:17:76:55:5a:93:5d:ad:a5:4c:07:44:96:ed:
c2:83:ae:3f:80:a8:2d:49:21:d2:79:cb:ae:9f:fc:1e:2b:64:
97:0a:52:f5:bc:58:b7:5e:b2:77:19:ef:44:82:a5:06:5c:10:
02:9c:b0:1e:1f:c3:43:c5:46:83:7b:54:ff:93:50:98:00:f9:
95:1e:d6:8a:fb:b6:41:3f:44:98:97:71:62:1e:98:79:06:8c:
a4:71:b7:1c:d6:e2:90:3c:1c:37:ed:ac:9d:81:79:0d:2f:12:
c3:5f:9c:e3:47:9c:bd:24:5f:1a:be:34:ab:02:1c:e2:eb:08:
d9:f5:aa:40:35:fe:52:c9:fe:0e:24:55:98:db:b3:cb:74:16:
ae:81:41:cc:e4:1f:b0:6d:78:2d:14:c0:11:83:e5:30:a6:ab:
39:68:cd:a6:d3:5f:b5:eb:c0:b1:50:97:85:a3:45:39:23:33:
ed:96:85:90:fb:8e:04:b9:b5:32:98:25:47:32:8d:95:f5:14:
8a:fe:29:22:5e:39:13:cc:97:eb:ac:2e:84:27:a2:63:b0:c7:
5d:de:4d:a5:38:2e:2c:2a:3e:5d:31:1f:6c:8c:37:93:d7:fc:
bf:41:9a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:35 2025 by rpki-client