Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
File: ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json)
Hash identifier: RqybxHB4CEgZM+cPag7Q7P8TKUfEWrrEMkTwkLaSPbs=
Subject key identifier: 28:58:31:8E:71:71:F9:E0:7C:01:E2:7F:0E:18:F9:DE:7C:65:51:46
Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Certificate serial: 01977753A6DAB002FA517FD5D484287B0762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
Manifest number: 0E43
Signing time: Mon 16 Jun 2025 06:01:00 +0000
Manifest this update: Mon 16 Jun 2025 06:01:00 +0000
Manifest next update: Tue 17 Jun 2025 06:01:00 +0000
Files and hashes: 1: WmCvFXCeg0oTa1TckRvrs8RNar8.roa (hash: Mzv2Vj1XxZUvLysQKOIpSBENViQwEO98u/fFHAl/Wq0=)
2: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: ma3B2UBJkYGh36id14OVaoZohTtesu4QwTOh+9CuI48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:a6:da:b0:02:fa:51:7f:d5:d4:84:28:7b:07:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Validity
Not Before: Jun 16 06:01:00 2025 GMT
Not After : Jun 17 06:01:00 2025 GMT
Subject: CN=2858318e7171f9e07c01e27f0e18f9de7c655146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:ce:5b:8c:24:ed:97:34:6e:28:11:4b:72:
63:f7:63:44:1e:19:8e:fe:2b:56:08:89:3a:bb:0c:
91:46:f0:e3:34:fe:65:db:06:bf:3a:21:54:8b:0c:
6a:59:1d:22:fd:e5:fd:b6:05:f3:a6:fb:00:9d:55:
2b:ce:c4:0e:37:87:c1:fe:66:db:7a:74:43:ea:67:
c6:14:c1:86:b5:33:a0:4c:39:3b:3c:a0:81:8d:e3:
12:79:a5:30:cd:6a:6a:48:77:4d:11:a0:d4:e3:3c:
57:28:e3:f5:90:07:45:fb:b6:4e:e0:3f:4d:12:f4:
f9:f3:df:74:a2:c4:bf:f2:52:58:2b:c0:67:01:30:
04:5a:52:16:37:a7:61:91:d7:9f:e4:99:c5:83:81:
ec:54:5b:98:ef:03:3f:40:ec:78:42:2f:16:34:52:
03:d6:9d:4f:b1:4c:47:94:bd:88:b7:fc:b3:09:86:
9c:d9:98:64:29:02:48:ef:1c:08:fb:45:bb:de:fe:
39:b8:5c:93:68:ca:0e:2a:11:30:af:a8:5b:d6:59:
88:b5:38:55:42:65:04:55:b9:e6:83:bb:d8:29:2f:
9e:96:a0:d7:70:b1:aa:3b:8a:8b:51:4e:fe:b5:ce:
88:e2:b2:0b:e4:f9:91:7f:d5:78:fc:00:c3:37:57:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:58:31:8E:71:71:F9:E0:7C:01:E2:7F:0E:18:F9:DE:7C:65:51:46
X509v3 Authority Key Identifier:
keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ff:4f:f2:59:a0:b2:24:17:d6:0f:ea:59:3c:0e:b0:51:cc:
17:9d:50:f0:d8:d8:6f:f3:60:a2:0d:92:8c:fd:81:f6:1b:a4:
41:ce:b5:72:f9:b8:a8:73:b4:cb:e5:89:21:bd:70:51:40:c5:
5c:b5:dc:ca:9d:15:ac:40:d3:10:24:ec:42:41:96:5c:ee:70:
30:46:36:25:87:25:51:eb:49:d2:a2:bb:05:6f:0e:bc:df:81:
ba:58:8d:32:ee:99:5b:50:50:e5:68:f0:15:dd:dc:e0:83:2e:
d4:14:c6:33:aa:eb:6a:92:8a:d8:74:1d:1e:fb:0b:60:f3:b5:
26:ca:a9:76:96:49:46:98:7b:cf:b0:11:16:a7:89:8e:ae:3a:
d4:34:e8:49:53:44:d1:f3:b2:43:d2:8e:e9:b3:07:60:85:4e:
ca:78:4e:ae:d6:6f:29:fa:6a:37:11:90:14:a7:4a:c3:04:c7:
57:15:92:26:93:77:2a:58:e7:8a:60:77:7c:ab:75:19:15:bf:
f7:68:59:63:7f:2c:b7:af:bf:2f:a1:32:ab:12:91:45:33:85:
ad:b8:e8:3d:94:ae:8f:86:72:14:88:e8:84:fe:6e:e8:a6:04:
6b:94:f8:e1:c8:36:19:cc:81:b7:2e:b4:6b:05:e9:2f:cb:e6:
8f:5f:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:55:00 2025 by rpki-client