Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier: eXmuk6Ua5Ic79clru1V9oFfnDPCmAuHUFcM7Yvz6DCU=
Subject key identifier: EF:38:FD:34:E3:22:5B:15:78:9C:ED:F8:58:71:3F:EC:D7:CE:49:B5
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial: 0197B6A13A10791DF2B38C9BE8907231F381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number: 072C
Signing time: Sat 28 Jun 2025 13:01:48 +0000
Manifest this update: Sat 28 Jun 2025 13:01:48 +0000
Manifest next update: Sun 29 Jun 2025 13:01:48 +0000
Files and hashes: 1: OBgfNHwDlYtlqjjhJRFUWeZDTUY.roa (hash: 6sPRuYPKeEviFfVQ52vvMVNq0j09JkQvr2PG17VGRJU=)
2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: 0Zk59w4szeee5V1sORRckdOBwUQMQXu0+KssfOpl9Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3a:10:79:1d:f2:b3:8c:9b:e8:90:72:31:f3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Validity
Not Before: Jun 28 13:01:48 2025 GMT
Not After : Jun 29 13:01:48 2025 GMT
Subject: CN=ef38fd34e3225b15789cedf858713fecd7ce49b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:32:3d:01:19:0a:f6:d6:eb:eb:21:a2:39:
b9:4b:69:b5:64:01:07:64:3b:be:73:ad:e5:59:50:
0b:3e:b4:2f:66:b4:dd:26:40:b1:ec:e3:a4:98:c0:
f0:66:ee:9d:76:af:9e:0e:ef:a5:9a:53:35:6d:25:
f0:f7:ad:e1:b0:f3:ba:87:c4:46:ad:51:c5:de:f9:
e6:e1:ff:bc:7d:86:2c:7f:71:77:dd:8e:73:ec:9f:
fe:4f:52:8b:74:95:aa:36:6f:b7:48:9c:0e:93:e0:
d7:f4:99:73:ab:28:06:a1:3c:e7:50:f6:b0:59:3c:
16:f2:36:80:9f:88:51:35:82:df:1e:32:d4:6b:24:
31:a3:a1:5b:d6:0a:a3:01:8b:00:28:90:0d:be:f2:
a8:60:1d:ce:cb:32:0e:ee:d1:32:33:82:7d:a8:7c:
c0:fb:9a:ae:2e:fe:58:f5:ce:c4:42:32:ee:3d:c9:
0f:4e:5e:ea:93:0e:57:5e:2f:f9:4e:d8:03:f1:b7:
52:a6:fa:7a:7d:d5:55:fb:ed:cf:5d:a2:b1:52:89:
51:62:ab:66:50:98:7c:75:62:5c:8b:2d:89:e7:17:
d4:f8:e9:74:b0:1e:25:39:fc:d7:73:38:b8:c5:52:
3b:85:55:65:4d:1a:3a:fb:28:1b:d5:7f:f3:a8:48:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:38:FD:34:E3:22:5B:15:78:9C:ED:F8:58:71:3F:EC:D7:CE:49:B5
X509v3 Authority Key Identifier:
keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:be:7e:50:f7:08:ab:db:14:4d:5a:63:e0:e8:08:1e:a5:25:
07:d8:0d:ff:13:2d:e4:ef:d3:a0:2e:41:65:90:04:47:64:af:
55:54:d5:43:ad:b6:33:b0:7b:14:22:d0:26:f5:25:15:47:f3:
53:ce:a2:09:98:8d:2e:8b:97:a6:3c:2d:66:ee:47:3e:e1:55:
46:ab:3f:92:18:a5:97:7b:85:9c:a8:58:b7:8a:db:5e:2b:fc:
c1:0d:31:c2:e3:ed:d7:4f:5d:d4:e6:3d:bd:e1:9f:f0:b8:6d:
30:dc:a9:ab:1b:15:d4:43:d1:d2:d1:c2:11:2f:54:1f:af:5a:
0d:a8:94:0e:20:48:ea:50:b4:19:8d:15:fc:82:57:d0:bc:c2:
a6:d6:5e:5d:07:2c:3d:89:1a:44:5c:ae:5a:9b:4b:9b:28:b7:
69:ce:e9:6c:2c:98:89:cc:4e:03:8b:d6:95:bf:b0:f3:b7:d3:
01:80:88:04:99:ff:d2:b8:7b:0c:a0:72:39:a7:0b:8e:3c:68:
7f:0c:05:09:ce:3b:d9:5b:33:a4:f8:e4:a6:9d:7e:ec:5e:b1:
d9:da:99:ce:dc:e1:41:1d:f1:d3:72:fd:c5:57:c1:e2:23:a1:
b9:f8:b8:ad:65:bc:db:56:55:66:df:52:c0:89:c9:03:48:95:
9e:de:fb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:25 2025 by rpki-client