Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
File: ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json)
Hash identifier: eutUxxR/p1b5nTmSGMWs8TzOzyP/czvXWhIuSp/IAqg=
Subject key identifier: B5:D2:DE:16:F8:11:CC:CC:14:3A:0D:01:B9:93:68:24:0B:61:E7:3A
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 01978B1092DC8705A82DEE0A2781BD7B30F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
Manifest number: 15A0
Signing time: Fri 20 Jun 2025 02:00:08 +0000
Manifest this update: Fri 20 Jun 2025 02:00:08 +0000
Manifest next update: Sat 21 Jun 2025 02:00:08 +0000
Files and hashes: 1: Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa (hash: MQWABCmJmPzBZuvJm1UdXrqjK/z2moIohkG/Rp3fZtA=)
2: E3ZC-IKUFV8dsLuSPPYjoVWBSBk.roa (hash: /bl5hl4kqSXgSNneJaVMs/G9S7DHiQCDWl5lO8OIAgk=)
3: nBzRioAspYogjhuqMfmeJKfieBA.roa (hash: zMCnSjaFE4ydwmXDRAVpua0IoyMIX5RMql4K/75vlGo=)
4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: QBt+zKlmhXH+gLiMPrIomSj6XKN9HLYgF6OrRzMV0L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:10:92:dc:87:05:a8:2d:ee:0a:27:81:bd:7b:30:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Jun 20 02:00:08 2025 GMT
Not After : Jun 21 02:00:08 2025 GMT
Subject: CN=b5d2de16f811cccc143a0d01b99368240b61e73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:15:9f:cb:20:57:9e:6c:2f:7a:95:a3:db:
39:12:bc:73:9d:33:da:40:bc:6b:4d:10:d0:2c:8f:
13:1a:64:cb:57:00:8c:02:49:38:65:ec:c0:a0:46:
de:76:de:c8:4f:be:d8:ab:da:cb:74:c6:c6:e5:83:
48:35:ec:cb:33:a3:99:8e:da:69:c9:3e:79:1e:fe:
38:e5:53:6e:fc:83:4e:c6:38:02:06:f6:b7:33:f1:
88:87:5c:4a:39:61:c3:3a:22:60:cd:d0:45:f1:8a:
7b:ee:9b:7d:bf:52:86:de:7f:48:37:6e:08:b9:3a:
11:19:d3:6d:42:0c:f1:90:bf:7d:12:d5:0e:a2:9f:
51:dd:af:e8:71:72:bd:37:60:6b:aa:18:b1:33:98:
7a:df:53:3e:d8:3b:2b:f1:6e:71:88:1a:0b:a5:29:
96:22:ad:10:62:b2:e8:38:d8:3e:29:7f:ae:9a:56:
31:56:7a:8e:71:39:23:1f:4f:09:2a:c4:c1:99:72:
75:dd:23:74:a5:f8:f2:27:94:01:2f:42:4b:50:23:
b1:f1:51:22:81:2d:ec:56:29:00:70:35:d9:4e:36:
62:39:1b:2d:a0:07:6c:1e:94:32:bb:90:48:c9:ef:
ad:2b:ed:88:98:c9:43:59:e1:fa:b3:6d:12:4d:83:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D2:DE:16:F8:11:CC:CC:14:3A:0D:01:B9:93:68:24:0B:61:E7:3A
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f7:fe:1f:0d:ef:03:92:09:96:74:5c:9a:d8:88:0c:67:fc:
0a:5e:fd:09:0c:04:58:d7:04:f7:fe:57:f6:4b:25:83:7f:17:
71:a3:d0:2a:bb:e0:f0:81:f6:aa:5e:59:5d:99:52:62:7f:10:
44:f2:ab:0a:0a:b0:c8:96:23:82:4a:d8:fa:14:d8:e6:33:a2:
bf:1c:d0:f8:b3:8e:18:66:d5:38:c8:8e:02:58:c4:7e:4b:a9:
17:2d:be:9a:58:95:5b:be:e4:b1:7b:29:67:71:ef:f4:8e:cd:
bc:9a:00:5b:36:b3:05:51:f3:e6:63:b2:15:32:b1:68:74:c6:
b9:62:e5:03:78:8f:72:49:93:a3:44:ab:97:df:6c:b5:e0:21:
e3:77:e7:da:56:bb:f1:89:0f:b9:a5:2f:c9:8c:a4:72:0f:46:
5b:1a:5e:98:d4:8c:52:b2:c3:d0:b1:20:8d:01:c7:bd:50:41:
47:80:f7:e9:70:7d:a7:b4:3e:25:71:84:bc:3e:96:27:2e:fd:
8a:c6:5e:ef:ae:ca:f6:d6:b5:45:df:e4:1c:f6:48:21:da:0f:
45:56:47:f0:09:41:17:1e:58:93:63:c7:67:8f:ad:73:69:14:
1f:80:89:0a:92:5f:01:46:8b:3c:f3:86:9c:cb:3e:73:9c:b5:
ba:c5:d8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:59:01 2025 by rpki-client