Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: zlJPruD8CSqq2scCZfyfzmZBdz1CXi/n+L5wjL4Ip3A=
Subject key identifier: 7D:1D:1A:90:4B:90:D9:93:89:3A:D6:9A:E4:F4:5B:9D:45:B6:6F:34
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 0197B7B351A6EF9704B6F2D5E21091504023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 056E
Signing time: Sat 28 Jun 2025 18:01:11 +0000
Manifest this update: Sat 28 Jun 2025 18:01:11 +0000
Manifest next update: Sun 29 Jun 2025 18:01:11 +0000
Files and hashes: 1: BvxwicsH1ZVfBk6Q4DoBq1qq_Cg.roa (hash: 4jEtLdDvLytqaDFqVfLMjurgO3/mhXlRnfALOClKcPM=)
2: IaQkr4wJmPFX7MlGIC068T5SLas.roa (hash: LZsKSu9vsLm4Oqz5UZoGBpM3ebW0TaSiuaWmenP7SS0=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: JbtKiOX8YvmKD3JftEEoaGlwDtdYVqXHB4TUelAcT8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:51:a6:ef:97:04:b6:f2:d5:e2:10:91:50:40:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Jun 28 18:01:11 2025 GMT
Not After : Jun 29 18:01:11 2025 GMT
Subject: CN=7d1d1a904b90d993893ad69ae4f45b9d45b66f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:d7:f0:91:33:f6:d8:55:1d:ac:c6:c1:75:
44:ef:8a:60:1a:b0:1c:6b:26:8c:d9:53:d7:6d:05:
f9:26:15:7e:31:d6:d6:ec:ca:b4:8b:8c:c6:11:87:
1d:8b:a1:63:cb:7d:c7:eb:79:fd:a4:03:4d:44:94:
b4:75:32:1b:9b:b4:2d:a1:74:35:6d:4b:69:1c:33:
c9:21:0d:ad:ac:90:8c:df:84:d0:97:a0:29:9b:72:
65:34:28:88:ff:cb:4d:11:56:73:ce:7e:da:06:2c:
5c:5e:b8:9d:ba:fd:db:bc:3d:c0:b6:90:0e:a0:c8:
3f:2a:49:93:e1:2c:44:d2:c8:5d:33:1b:f0:1f:7f:
de:96:1d:62:d9:8d:be:49:92:c8:21:e4:85:89:ee:
5a:c9:27:d3:65:e1:8a:9c:e5:22:66:50:68:17:9d:
6c:08:7b:3d:fa:d4:41:93:97:e5:5f:a1:23:0b:61:
4d:49:2d:c0:48:58:a6:24:42:47:8b:ab:0f:fb:25:
a9:fa:9b:90:a9:8b:98:19:3e:d2:b8:85:27:a4:73:
73:ae:0a:fd:50:54:3d:41:ba:79:71:83:0c:4d:26:
f8:0d:77:4a:07:81:cf:14:13:f4:28:e2:20:c7:e9:
21:3a:d7:67:95:32:b5:4b:06:15:13:1c:6a:91:f1:
9b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1D:1A:90:4B:90:D9:93:89:3A:D6:9A:E4:F4:5B:9D:45:B6:6F:34
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:e1:10:be:11:26:8c:1f:ef:77:04:9f:8f:8c:27:97:2d:37:
58:ac:96:29:f2:ac:26:6a:79:56:c6:d8:92:cc:e7:3c:6e:4f:
0f:f2:1e:df:e1:82:a4:b6:fd:71:a8:5a:da:ad:f0:71:89:7b:
16:b6:b3:3f:2a:f9:07:5b:6b:73:6c:de:98:7b:bc:24:2c:14:
62:0f:ba:d1:d5:d3:81:ce:d3:7d:ea:38:78:53:af:ef:92:1b:
3e:83:de:98:32:90:69:2a:db:68:4d:00:33:a4:6c:75:ae:57:
3b:45:a2:1e:dd:be:d8:2c:db:ab:62:f0:c0:c2:4e:66:18:3c:
82:78:4b:c7:47:df:fb:16:d8:3a:44:ff:55:39:c3:cf:cf:7c:
d2:d6:4f:f6:0b:1e:23:5d:eb:b5:85:2a:58:ea:b8:95:76:69:
26:14:41:9b:77:e9:ca:bc:b6:68:5e:c7:0d:03:39:1b:6b:c0:
8a:8c:dc:01:f5:9b:b8:1c:70:27:3f:38:b9:91:91:70:87:ab:
d6:ac:20:f2:25:d8:84:31:a4:dd:c0:57:5b:b7:43:36:ac:ec:
4f:37:d9:3d:a5:47:a0:05:0d:03:44:87:5d:82:d0:64:f1:5d:
e2:ee:3c:a2:d9:9c:72:a3:c3:7e:be:a2:76:e1:db:9f:e3:52:
a1:ab:67:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:03 2025 by rpki-client