Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: wfgcpaWFO772o0BdasTeCLtQZJLDMClIwbpYWapZ2No=
Subject key identifier: EC:67:F0:B3:00:9A:7E:82:FF:E5:15:CE:72:F9:A0:4E:95:D5:BB:F0
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 01976F2BBF52A5868EB6AEE97CE1F289F029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 16:00:27 +0000
Manifest this update: Sat 14 Jun 2025 16:00:27 +0000
Manifest next update: Sun 15 Jun 2025 16:00:27 +0000
Files and hashes: 1: 67RitCBEehLxJhsm7693l29x0Rs.roa (hash: EB1M/ZAO+oOFucZBilmgdoi7GfXpFnwu8Kuu/wM/CCw=)
2: r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa (hash: GKWFo62wVPaicbH3wRKatj9Dg7f4fzo4X4faRV/0xFc=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: sLLCavQTSt77Hfryz+fJCnkfhQ2cO+g+uPA3+tVvnis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:bf:52:a5:86:8e:b6:ae:e9:7c:e1:f2:89:f0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Jun 14 16:00:27 2025 GMT
Not After : Jun 15 16:00:27 2025 GMT
Subject: CN=ec67f0b3009a7e82ffe515ce72f9a04e95d5bbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:d4:60:16:af:88:51:bb:9f:ae:d9:2b:d2:
b3:aa:12:a8:6c:f6:9a:fb:ae:90:c6:64:8f:ac:30:
1b:bd:5a:fc:c1:e5:86:69:fa:80:e5:f0:2a:45:b6:
94:5a:04:80:41:2b:84:30:19:71:bc:72:fa:23:20:
07:d9:1a:48:61:5f:4f:e1:e4:49:cb:0f:db:fe:9b:
12:d9:25:58:28:c9:11:66:e7:d6:c7:61:d9:92:e7:
f3:b5:5c:ac:8e:07:2a:3a:61:3f:db:6c:44:1e:91:
57:79:63:8d:81:c6:9e:a1:c8:84:90:19:a9:6b:18:
9c:ad:c7:81:d3:14:e7:91:3f:80:25:68:79:01:9c:
b5:b4:13:27:67:02:31:83:07:89:68:d0:3d:45:13:
d4:08:a1:bc:9b:b6:60:4f:38:04:bb:55:c7:f9:64:
fe:7f:9c:05:a9:a0:7f:e9:a8:bd:46:a1:13:c6:4c:
e7:4c:26:6b:28:f8:ca:60:98:10:d1:bb:68:fa:da:
dd:33:5c:8b:45:08:60:97:bf:80:1e:57:33:8f:6d:
43:9f:56:94:ae:fc:29:a2:e0:f2:32:cd:97:86:90:
35:e9:28:67:a5:91:20:c0:8c:24:c7:60:ec:45:8e:
1b:07:5c:35:13:29:ef:47:11:1c:62:00:03:9b:80:
a5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:67:F0:B3:00:9A:7E:82:FF:E5:15:CE:72:F9:A0:4E:95:D5:BB:F0
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bf:2d:34:e8:9e:9e:6e:8b:ae:8f:68:72:c6:a8:2e:e9:e2:
c7:f3:7a:2c:70:10:e0:94:5a:55:a9:5f:27:18:63:e7:c6:e5:
6e:a9:83:2f:b6:60:10:2d:9f:1c:43:5d:96:a8:38:49:bb:15:
da:4c:0f:28:9c:fc:9a:42:b8:76:54:e1:30:04:f9:3f:68:4c:
a1:d2:1a:98:82:14:90:27:a3:ab:f4:23:c3:f8:f0:36:89:0d:
cd:08:8c:02:04:47:1b:4e:b0:fe:b1:89:b0:dd:1e:40:dc:ce:
d3:c8:22:3c:c9:db:47:ef:d4:c3:07:f9:7f:92:5e:bc:37:b4:
38:55:dc:8b:0c:7c:2e:a7:13:37:cb:8b:b3:41:03:70:65:8a:
d4:e8:95:79:60:c6:0d:5c:4d:2a:fb:3d:5a:fe:3f:05:57:0c:
ae:37:85:26:01:e1:39:b8:f7:2e:48:02:7e:f1:5d:05:a1:83:
28:1e:ea:9e:eb:e1:ce:c0:6e:df:1e:ad:ac:f7:36:08:ab:24:
cb:e7:88:fe:00:bf:3c:21:ec:29:89:85:bb:82:8f:36:ab:78:
8e:a4:02:e6:04:79:bd:da:9d:e9:11:7f:9e:c8:4a:22:9a:8a:
f6:83:6f:98:71:ed:5f:91:01:56:bd:40:cd:96:68:4d:94:af:
c7:f8:29:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:51:05 2025 by rpki-client