Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: oC9mDOMdMxAiAb17M90cxZ+l4/yl/+oTX5hgLC7+qD0=
Subject key identifier: BD:43:C0:50:BC:7C:CA:6A:0A:EE:A4:1E:0B:5A:6A:7B:99:C3:68:54
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 01977007B50F61FBB1FD88B892E255C58BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 1046
Signing time: Sat 14 Jun 2025 20:00:42 +0000
Manifest this update: Sat 14 Jun 2025 20:00:42 +0000
Manifest next update: Sun 15 Jun 2025 20:00:42 +0000
Files and hashes: 1: sQGDlHpoLDO9MGkxSeBWC8uppqs.roa (hash: 6KgDIkevhFyVfhdKRkIXWLxH6LsOjOgpwNrZ+fmFguE=)
2: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: EhBxoqz9m9YV3Zv+WoxoMChuko3CS3AO8Y5R1/67SAQ=)
3: ziOY-6fncsLuQQzVu0Sf6c2Hbmk.roa (hash: AVAQzd3M8IxybV2CUgMzwoAYpnE92DpPd7dWpe04sBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:b5:0f:61:fb:b1:fd:88:b8:92:e2:55:c5:8b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Jun 14 20:00:42 2025 GMT
Not After : Jun 15 20:00:42 2025 GMT
Subject: CN=bd43c050bc7cca6a0aeea41e0b5a6a7b99c36854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1f:f0:9c:06:32:e2:fc:08:6f:6f:66:b2:3d:
ea:32:25:9e:34:1c:70:ea:60:33:71:dd:b4:8a:82:
c9:ee:54:33:25:3e:2f:a6:0e:9a:19:1a:85:69:76:
2f:d9:41:03:f6:85:11:00:0a:64:31:46:2f:cb:57:
eb:05:ab:ff:e2:93:26:fe:be:7a:0d:f7:76:a2:b9:
7c:6e:3c:01:70:ff:ee:9a:bd:91:d5:de:74:75:31:
cf:03:ea:a1:d3:09:27:ad:94:95:94:f5:a0:d6:4f:
b9:6c:8e:8e:7c:d1:a6:27:d8:47:85:51:51:1b:41:
de:77:11:12:37:b8:51:a3:bd:44:98:ea:7a:a6:4c:
da:19:16:f2:bb:ec:f9:a6:f2:43:aa:8d:5d:74:9f:
8b:16:9b:f8:91:f4:9f:d6:db:fd:ff:ea:a8:90:8f:
41:fc:a9:6a:07:12:b3:dc:3a:83:6c:02:b6:6a:0e:
55:db:96:4a:dc:16:d4:0a:ff:21:fb:4d:4f:87:a0:
ed:9b:8b:50:25:0e:8f:86:4b:c1:da:92:28:fa:ca:
62:fb:ce:bc:b0:99:c9:ac:6a:4b:68:9d:d7:6c:57:
c5:26:72:19:8e:98:6c:67:5c:99:6c:78:c4:4d:6d:
05:96:de:9c:ee:80:ea:b3:ab:7e:c4:d9:ed:e1:e2:
52:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:43:C0:50:BC:7C:CA:6A:0A:EE:A4:1E:0B:5A:6A:7B:99:C3:68:54
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:58:db:2f:b4:64:d2:0d:a0:87:21:36:d6:3b:98:48:44:f9:
3f:ef:bd:a8:5e:58:01:39:ed:d0:7b:fd:7a:98:40:d0:70:66:
13:ef:5d:05:a7:53:a8:42:54:ec:75:e6:e6:4a:a2:b9:fd:44:
67:46:22:62:d0:cd:c2:1e:75:b3:7d:5d:20:c3:97:f9:48:db:
42:b4:c7:84:44:26:17:26:59:89:c1:46:a8:24:af:7d:89:3a:
3d:3f:11:ce:9f:60:df:1b:91:c3:1b:1e:16:4e:fe:a3:cd:a5:
82:78:ba:32:e2:9b:92:17:63:8f:e4:de:ea:8e:be:b7:8b:6e:
c4:44:72:62:e8:72:b3:bf:4a:17:c4:b1:83:8f:21:c7:f5:a8:
b7:8c:af:48:00:2b:25:c8:40:fa:ca:ee:09:48:f0:1c:bd:21:
ab:93:e8:22:35:11:d7:85:aa:ce:ff:94:3d:64:df:f9:53:75:
0e:e4:78:ff:49:22:af:6f:58:c5:2a:d2:85:78:63:bd:1d:5f:
12:7e:cb:15:ec:c9:55:fb:a7:08:97:67:17:62:ee:92:86:0c:
fa:0a:1d:ff:5d:6a:eb:75:60:d6:60:76:e4:2c:e0:29:a1:93:
30:85:b2:79:c3:9c:09:3a:f6:6d:aa:a0:c4:13:b8:49:d7:c8:
1c:a7:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:42:05 2025 by rpki-client