Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier: G45/TXKZ1nIeTbyTTrt1t9RfXdhEAkd22bXtr2ypJjI=
Subject key identifier: 3F:40:BE:41:44:BE:2D:32:79:CE:1B:E5:C9:18:FC:D4:57:84:31:9F
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial: 0197BA7DD93ACD37A753A41C6D002E999F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number: 07B4
Signing time: Sun 29 Jun 2025 07:01:38 +0000
Manifest this update: Sun 29 Jun 2025 07:01:38 +0000
Manifest next update: Mon 30 Jun 2025 07:01:38 +0000
Files and hashes: 1: cGaM1pqwI_iREeyFYU4bDaF6huI.roa (hash: ZX5FkbfvKLABufYmP9T9sbDn4rTGZcGZ9RNRwuV4C4s=)
2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: 1wZ4th26iYefItJXQM+giK/un3QjKPa54rBy5ueKA5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:d9:3a:cd:37:a7:53:a4:1c:6d:00:2e:99:9f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Validity
Not Before: Jun 29 07:01:38 2025 GMT
Not After : Jun 30 07:01:38 2025 GMT
Subject: CN=3f40be4144be2d3279ce1be5c918fcd45784319f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:99:e4:cb:4f:da:ca:17:56:92:e5:a3:40:
f1:f0:b9:eb:6f:a7:fa:44:2a:d2:0d:e3:44:10:70:
c1:7a:f0:6e:06:cc:e4:9f:a1:f5:ed:56:76:40:f4:
be:43:cf:cc:b7:44:c5:34:ea:cf:70:c4:a2:42:15:
33:0c:c3:da:57:d5:16:e1:9f:f7:c1:5f:d4:f5:dd:
51:4b:9b:7a:63:0d:5f:77:e0:a2:91:14:8c:c6:32:
72:87:ad:8d:e8:b5:99:8a:18:55:71:91:f9:8d:81:
7f:80:4b:d9:06:ed:72:39:32:22:78:cf:6d:4c:e5:
78:fc:b0:d6:60:e5:58:4c:dd:6c:26:6f:f8:de:3a:
0f:63:32:64:46:3d:6e:2a:25:6a:73:0e:27:59:28:
88:17:3c:61:22:4a:8b:b2:16:f8:41:d7:60:ee:3a:
b5:20:b7:10:b4:be:73:dc:98:a9:06:a9:08:43:60:
72:f7:07:4e:0a:7c:f0:7f:fe:da:44:99:26:8a:9a:
27:45:34:9e:9c:69:c2:4b:c6:ed:9a:be:8a:90:06:
95:80:b9:4e:60:90:91:02:7c:c9:4f:34:56:5d:57:
be:26:52:ef:8b:54:8b:69:55:c5:4b:a6:6f:99:9f:
76:9b:f4:bd:4e:89:3e:dc:fe:63:75:7a:b2:a8:53:
2c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:40:BE:41:44:BE:2D:32:79:CE:1B:E5:C9:18:FC:D4:57:84:31:9F
X509v3 Authority Key Identifier:
keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:95:0f:d0:42:88:40:c6:b4:9c:7e:aa:e3:b1:34:03:de:ce:
5e:db:9e:b1:50:6c:e9:3d:05:48:1d:da:60:43:db:ff:31:b4:
08:18:05:9a:21:56:e8:7b:88:ad:d9:97:4c:bd:53:78:73:5e:
ad:88:e5:ea:fc:7d:ed:fa:aa:34:6d:b1:d0:1f:8f:a2:4c:31:
8d:fe:2d:2d:a8:ac:ba:63:45:92:50:9b:0f:38:bd:45:36:4f:
2b:98:1e:67:93:aa:69:60:9d:a0:5a:9f:b0:13:b1:b2:ed:67:
c7:05:fc:c3:49:db:9a:17:06:3a:96:c6:f6:eb:1e:c1:90:97:
ef:38:b6:99:59:fe:d9:30:9d:f0:0b:13:c5:f9:42:73:32:34:
64:ba:8c:af:62:13:7b:7e:38:12:da:6a:95:9e:a2:68:6a:f4:
91:4a:f4:93:2a:52:5d:02:36:f2:76:3d:29:a6:71:0c:33:36:
59:97:eb:36:68:8a:98:e2:76:61:ea:81:51:b2:17:cc:38:b6:
00:de:94:89:8a:3e:ea:20:53:6a:ef:86:17:b0:ad:b0:a3:ba:
c5:f9:c1:2f:b2:49:ca:78:03:f7:6e:05:a3:8f:29:5d:01:76:
c8:51:75:dc:82:ca:5b:d1:30:f4:3b:ec:ca:46:de:5a:14:20:
54:c6:b2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:48:47 2025 by rpki-client