Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
File: zPFCMN6e_sYQ_90zngxEgLaLrUU.mft (raw, json)
Hash identifier: NSAevA/ImEq2/INmMWkZLe8rvwXdRieXsuDIj61jMY4=
Subject key identifier: A4:89:0F:3F:53:29:A2:2C:3C:74:15:BA:0B:D4:39:E8:9A:75:05:68
Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
Certificate issuer: /CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Certificate serial: 0197C6148996A3900190163EE9C29A2DBB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
Manifest number: 02C8
Signing time: Tue 01 Jul 2025 13:02:04 +0000
Manifest this update: Tue 01 Jul 2025 13:02:04 +0000
Manifest next update: Wed 02 Jul 2025 13:02:04 +0000
Files and hashes: 1: Jy9w65ZubGm0SY_59Wq1tFlq7gA.roa (hash: GAWYOmgt7SjOR4XrYGICCDsdlImXuLIEXBRuDs31QjI=)
2: zPFCMN6e_sYQ_90zngxEgLaLrUU.crl (hash: oR2RyOo3BYKmSdJ5WweZ06FdT8cOZovWDNM9b9PD4iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:89:96:a3:90:01:90:16:3e:e9:c2:9a:2d:bb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Validity
Not Before: Jul 1 13:02:04 2025 GMT
Not After : Jul 2 13:02:04 2025 GMT
Subject: CN=a4890f3f5329a22c3c7415ba0bd439e89a750568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:c1:57:1e:22:52:f2:1f:7e:4f:5c:6e:06:
ca:62:d1:40:f0:0f:98:94:18:71:ae:07:83:1a:f0:
43:83:16:7f:be:d1:17:a2:4a:ce:e7:26:8d:93:65:
48:52:92:7a:b5:6f:ec:71:d9:45:a1:cf:c4:14:d4:
e3:4c:80:d7:76:41:0e:32:33:02:47:2e:43:cf:0d:
e4:33:eb:e7:98:65:4f:5e:04:99:cf:ae:c0:d8:5d:
8a:e6:62:83:8b:e6:c5:2c:4f:21:2b:1a:1c:eb:c9:
25:7f:1a:f3:92:4b:2e:d9:24:e9:b3:a2:9d:0e:44:
3d:c8:d7:25:e9:6a:92:95:65:24:e0:67:1d:bb:8b:
67:03:c2:f5:79:70:5e:c2:da:76:d2:96:a2:6b:70:
76:03:aa:30:ac:83:11:39:50:c4:3e:e5:29:48:dc:
bd:85:e3:c9:2a:5f:cd:6d:a8:a8:d1:e9:a2:94:ae:
23:7e:90:69:98:e4:2f:26:62:cb:cf:38:cb:31:90:
88:64:44:5d:ff:44:f0:f2:1b:73:a8:6a:bf:b6:09:
4a:b6:8e:0a:38:47:af:9d:8c:60:66:cf:d0:46:c6:
a6:f5:21:84:ab:76:ae:28:48:2b:94:b4:af:3d:3f:
dc:7d:f0:fc:95:8d:8d:84:10:d4:a5:b2:1e:cd:a5:
d8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:89:0F:3F:53:29:A2:2C:3C:74:15:BA:0B:D4:39:E8:9A:75:05:68
X509v3 Authority Key Identifier:
keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d9:c1:4a:7e:c2:f8:b0:ff:3a:3d:3c:4b:bd:54:04:d7:e3:
d0:4c:f1:d3:91:77:fb:dd:b9:4e:c9:69:b1:e0:cd:b1:19:16:
64:db:54:16:5e:f1:05:44:5f:5a:88:90:b1:de:ce:50:ed:1b:
e0:07:d5:c0:fb:51:ef:b1:5a:59:31:cc:44:12:8c:57:b7:48:
31:04:cb:64:55:6b:2b:36:36:1b:66:34:c5:fa:e4:e2:8b:a5:
2a:09:31:9e:55:16:27:eb:b7:bf:c2:d1:8d:92:98:be:d2:fb:
e3:50:c0:f1:16:c6:4b:b6:42:d2:9c:44:20:00:29:98:69:e5:
44:be:c3:ae:58:fd:e0:8f:ee:95:7a:b9:ff:20:cb:ba:3a:b0:
0c:a0:20:93:15:ae:a4:b9:35:30:a4:9e:9b:68:99:3c:b7:6d:
cf:17:55:7b:b1:8a:47:61:60:be:2f:f3:53:27:dc:cc:4e:52:
78:5a:40:3a:08:3c:2e:6b:3d:ba:01:5d:1c:cd:c6:1f:19:3f:
ac:b6:87:f9:97:37:b5:c5:46:8a:52:ff:16:8c:a7:c9:b0:e5:
74:28:32:72:0e:19:6e:01:82:ef:0d:e3:15:6d:7c:7c:e3:e8:
b3:b8:4e:1c:8c:a8:22:eb:b4:f6:f3:5d:78:07:e7:5b:bb:94:
51:fa:c7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:32:51 2025 by rpki-client