Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: A3OSGms3KaHtsqkzlvvdstFQiNL5RnqYrGZbYQOyNZw=
Subject key identifier: 89:33:C8:58:B3:C7:9F:26:3E:7F:71:2C:9B:51:76:91:B4:0C:39:BC
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 019769613C5B00E12ECCA174AD36C65CE756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 09F4
Signing time: Fri 13 Jun 2025 13:01:09 +0000
Manifest this update: Fri 13 Jun 2025 13:01:09 +0000
Manifest next update: Sat 14 Jun 2025 13:01:09 +0000
Files and hashes: 1: JZLfCpTMSe09vK_TLbLQFlxw2Ds.roa (hash: oEwUEmn9BEj5nCyDqmNSjb0S6HVplNaKnZXZP0H/66Q=)
2: UojdXawnx16jHvQuUPhyRGr9AUA.roa (hash: Hr78TmcOhe37IFpeiMzuuAac0/dugWioMJ66bJbp/E8=)
3: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: zAuexoFCopy2u/TbgfN2naABLJxVr+m0XGi+ybhhI5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:3c:5b:00:e1:2e:cc:a1:74:ad:36:c6:5c:e7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Jun 13 13:01:09 2025 GMT
Not After : Jun 14 13:01:09 2025 GMT
Subject: CN=8933c858b3c79f263e7f712c9b517691b40c39bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:05:9c:aa:75:58:ab:c9:ed:45:ec:b4:f8:
54:d9:5b:6d:6a:6a:48:64:63:0e:ee:ce:00:66:c9:
d4:f5:7f:71:1c:dc:3f:1d:5b:5b:a7:19:e6:b7:d9:
bd:11:13:00:5e:e0:b4:4b:0b:9f:fc:a0:84:51:ac:
3f:39:6b:46:2e:c5:46:8b:f4:34:cb:ee:4d:0a:9f:
62:b4:90:f3:c0:01:16:77:61:2f:66:25:fa:aa:04:
d7:cd:2e:7d:1a:da:7e:9b:5e:d5:24:ad:85:4d:a7:
ea:68:39:30:81:46:f0:2a:b9:3e:52:fd:af:e3:7e:
16:24:fe:eb:19:a4:99:82:01:9f:6e:60:a8:88:71:
c9:76:48:ba:46:79:46:45:cb:8f:e8:45:37:84:b4:
f4:ed:b9:94:81:96:ad:2c:60:03:7d:11:c9:bc:c4:
08:af:1b:ed:8c:3c:16:af:14:e8:a5:c4:53:d8:18:
ab:aa:c7:f4:77:29:02:98:1f:e7:10:4b:9c:fa:57:
00:d6:6c:de:ee:cf:10:0a:f0:3e:62:3a:b4:d2:1b:
b7:7c:87:69:ee:85:40:0b:51:ff:ed:19:52:7a:95:
2c:83:46:c1:2d:1d:9d:ba:1b:87:cc:75:99:33:88:
f9:e4:ee:5d:6b:44:b5:34:29:a3:32:6b:79:54:cb:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:33:C8:58:B3:C7:9F:26:3E:7F:71:2C:9B:51:76:91:B4:0C:39:BC
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:49:1f:57:1c:72:f2:af:3d:14:85:a5:1b:e6:62:70:16:08:
5b:aa:19:57:3e:90:cf:14:9d:dc:2a:ac:cf:3a:67:80:48:f6:
87:e4:79:bb:a9:39:8c:cb:41:b7:81:67:5c:0f:3e:30:be:0e:
07:16:4e:ad:68:41:5f:57:d9:7f:09:85:12:40:27:ab:76:11:
45:72:45:fb:b9:ed:3c:47:38:cb:ae:56:52:59:2c:f2:42:b5:
56:c5:2f:6b:68:26:6a:3c:aa:52:e0:a4:e6:b0:ea:31:b8:f0:
6f:d6:75:e3:f4:e1:97:87:7b:1f:e3:29:e3:0f:60:0a:75:c9:
eb:cf:e8:b3:0f:8a:33:de:9b:a3:d3:29:97:90:ec:27:c1:c4:
9d:13:ed:e4:87:9a:5a:6f:46:a2:fe:2d:92:a8:3c:cb:7c:e4:
98:8d:9d:a0:74:e5:59:3d:68:cf:6a:c5:6b:0d:22:91:ca:8a:
10:e1:c0:0b:5f:ec:05:07:50:9e:5f:fa:ad:ef:10:23:96:d7:
86:fd:81:84:af:2b:dc:17:4d:d9:c2:2a:0f:47:26:c9:da:9d:
b2:01:c7:06:3a:32:15:ec:fb:7f:12:18:5a:6f:b8:37:5c:b8:
42:be:76:42:df:53:6f:81:e6:00:a7:f2:1f:ad:48:24:1d:cf:
0a:1c:0e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:45 2025 by rpki-client