Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: 8AlmUBL6qsJvj/O2mdurujjv8NpV3p0JAN3PSx30GX0=
Subject key identifier: 42:2D:31:A9:FA:BB:15:86:0A:86:5C:8B:F5:0D:FB:A6:FB:71:81:33
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 0197B77C069593D16D6294BFDDF56EF6D2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 030C
Signing time: Sat 28 Jun 2025 17:00:48 +0000
Manifest this update: Sat 28 Jun 2025 17:00:48 +0000
Manifest next update: Sun 29 Jun 2025 17:00:48 +0000
Files and hashes: 1: 9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa (hash: yFMJTSvXNN5G3iWxcUQycJKuWi+/CwtiHhA9xSKG2JY=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: aznJY3GsPZ1rS4yuuc8RSgZqcpDzM18eyPS0BK9Gg+Y=)
3: uJJnjUiM_NZxiukKj0SMAuEZu9s.roa (hash: rKuDWrBp0PYOBRz7NFxaGHHnL+VoADNHakfLXL6TQaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:06:95:93:d1:6d:62:94:bf:dd:f5:6e:f6:d2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Jun 28 17:00:48 2025 GMT
Not After : Jun 29 17:00:48 2025 GMT
Subject: CN=422d31a9fabb15860a865c8bf50dfba6fb718133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:56:e6:e7:3c:4a:ef:76:3e:1a:5e:fc:ca:
b0:d2:fb:9d:7b:7a:46:31:0c:6a:5d:d7:08:d2:05:
c3:84:21:1a:96:6a:a0:d1:69:b1:4d:0d:e2:ab:65:
23:d0:d1:94:a1:11:9f:49:2e:79:d9:c4:9c:11:4f:
34:c4:ef:b7:94:94:9c:5c:04:34:ad:29:65:7f:5c:
00:7d:31:b8:83:58:15:46:b4:5a:9e:0d:99:83:80:
10:3a:8b:d0:8d:27:a9:2e:1b:c4:f8:74:1b:fe:37:
0a:3a:fe:52:4e:10:ea:24:8b:fb:78:64:1c:6f:3e:
2d:9c:21:32:27:fa:c2:fa:2d:19:9b:44:58:b4:53:
b8:c8:00:0c:81:51:e2:e5:76:be:9b:78:d6:2a:ed:
ea:90:bd:a5:1b:c1:a3:24:59:43:02:d9:e0:36:e0:
08:17:5b:68:ad:6b:d6:53:81:8c:70:3e:95:d2:98:
38:28:2b:83:02:a8:00:1c:ca:e2:79:f1:a6:62:23:
64:11:8c:d0:72:56:85:e5:f5:dc:cc:a8:eb:6a:84:
1b:45:f5:93:cd:7c:bb:92:60:23:d9:65:2e:b0:5d:
1f:94:d9:76:a0:06:2b:23:4e:87:33:b8:cd:bf:bc:
56:e9:72:b6:7f:67:6c:f3:cb:b5:cf:51:c4:30:8e:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2D:31:A9:FA:BB:15:86:0A:86:5C:8B:F5:0D:FB:A6:FB:71:81:33
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:70:16:c8:3f:0c:32:b8:ee:14:2c:6c:fe:b7:7d:ec:da:eb:
2c:ac:54:02:6d:45:11:45:79:74:6c:f3:c9:44:d5:34:c1:4e:
d4:0b:8e:8f:df:8d:b6:5e:28:96:c1:dd:be:3e:8d:1d:b6:96:
b0:50:97:c0:48:4d:e2:75:e0:e1:90:01:a2:0e:b6:48:f5:af:
84:a8:8a:99:81:e6:9d:20:e4:8c:f1:ba:ea:8a:8a:fd:e3:eb:
61:db:49:48:03:00:b2:b6:cd:14:4d:9e:0d:e4:cd:7b:bd:9c:
c8:b5:45:d8:5b:e7:1f:bd:12:93:6a:e3:6d:5a:f3:be:50:62:
bc:10:50:49:ff:86:0e:fb:9c:bc:77:ce:9b:b5:b3:48:07:5e:
b2:02:67:89:c2:cc:ae:e4:7c:21:49:fc:0b:56:7a:95:c3:19:
48:95:a0:76:6f:f5:84:67:07:08:8f:f6:03:c5:e6:14:5e:b7:
47:06:62:8c:59:34:20:bf:4d:a6:45:b6:03:17:82:01:48:c3:
65:14:79:93:b9:1f:d0:b6:bd:48:ee:0b:bf:0d:18:2c:e9:36:
b2:8f:a7:15:a7:60:82:36:86:d1:a0:f0:27:71:8e:b1:50:b2:
65:67:24:82:f7:eb:10:b9:ec:65:44:01:6c:5d:4c:f5:df:05:
84:3a:1f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:52 2025 by rpki-client