Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
File: zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft (raw, json)
Hash identifier: 6XC2nsNULlNYYcF0kWNez+T+UFwdCe7gRuvwaSmzUiA=
Subject key identifier: 02:C9:4A:40:58:30:1B:52:E5:E3:E9:9E:C1:9D:99:51:D2:47:58:9B
Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Certificate serial: 0197B745A13BB51F3764C8ED80D478470EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
Manifest number: 1275
Signing time: Sat 28 Jun 2025 16:01:23 +0000
Manifest this update: Sat 28 Jun 2025 16:01:23 +0000
Manifest next update: Sun 29 Jun 2025 16:01:23 +0000
Files and hashes: 1: AalZ3RZGPmVBPL8EbkB-YzwV1bA.roa (hash: xQN6NagFLnVfkOh0FRJ47TszfhI1OJXGBTnKGRr5AuM=)
2: zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl (hash: HBK0W/oYnYCn7I8ZSNpJViLTh8lFH+PN7UbmUOF7Q24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a1:3b:b5:1f:37:64:c8:ed:80:d4:78:47:0e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Validity
Not Before: Jun 28 16:01:23 2025 GMT
Not After : Jun 29 16:01:23 2025 GMT
Subject: CN=02c94a4058301b52e5e3e99ec19d9951d247589b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f9:56:2e:4d:24:f2:72:b9:db:2d:e7:ac:42:
a7:61:c1:94:47:41:64:0b:3e:55:48:b0:fa:24:c0:
73:39:79:7b:48:86:9e:8a:d3:57:a5:0e:1a:af:f6:
09:aa:97:d3:0a:53:cb:95:ea:f2:62:ad:e6:d8:b0:
54:e4:5f:ad:07:04:86:96:49:6f:32:c8:02:b5:bd:
63:82:60:34:28:67:02:3a:33:d2:6f:64:30:03:13:
31:b6:ae:fd:52:58:00:a2:e5:45:67:64:bf:46:c6:
1b:48:14:05:79:5b:10:ce:d8:17:a9:e9:5e:2f:05:
0c:3a:54:9e:9a:f4:a6:af:a9:28:21:63:64:95:71:
b4:36:21:7a:1f:d0:60:f2:1b:24:fb:7a:43:1f:81:
b2:a4:02:28:40:21:37:9d:e1:e6:9b:be:50:72:aa:
e9:ed:6f:ae:91:d0:a1:1c:1f:04:08:6b:46:77:0d:
a8:07:32:40:9a:e4:75:34:47:92:c3:ec:f7:cc:a1:
ea:ba:03:0e:bb:25:54:49:1b:c3:8c:a4:08:c9:06:
7e:47:12:51:7a:29:d8:31:1f:92:8b:97:d8:c3:14:
47:06:d5:17:6a:98:a2:8a:81:d6:00:23:1a:3f:73:
e3:e5:40:a6:bf:64:e4:d9:24:6f:79:38:ab:50:7d:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C9:4A:40:58:30:1B:52:E5:E3:E9:9E:C1:9D:99:51:D2:47:58:9B
X509v3 Authority Key Identifier:
keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c6:09:9d:1d:06:f9:18:c9:74:6c:74:66:3c:98:ca:3e:97:
98:d6:84:e6:2c:27:84:18:3e:2f:d4:cb:33:a0:1e:d4:15:8f:
8c:27:7f:61:af:77:ba:a0:a8:ad:1b:bb:e6:ef:bf:69:d8:65:
18:d7:06:93:84:a5:99:fd:02:f3:c1:4f:86:96:5a:c7:1a:6a:
d0:d4:6f:83:f4:5d:6f:73:1a:76:26:8e:dc:22:8d:b8:0e:9d:
63:5b:f6:e4:1e:83:19:b2:df:28:fb:24:8a:7e:bc:ff:e2:8f:
e6:9e:42:cc:13:8e:f2:ba:8f:8e:9c:8e:ae:db:02:5a:9c:0e:
a0:b7:56:0a:e8:ad:2d:69:25:13:e3:73:8e:12:47:fa:5e:73:
ec:f8:de:b5:a6:36:b6:18:d1:24:a7:0e:8f:ae:55:08:b6:e7:
32:01:91:95:bd:0b:37:9c:e5:17:22:34:fb:5c:54:43:2c:98:
eb:4a:5e:1e:19:00:68:ad:ab:f0:2c:12:12:fd:75:f5:8a:3a:
2c:c8:1e:bc:89:88:43:bf:9a:71:0b:43:01:31:23:c7:db:3c:
40:b1:b2:60:12:d7:00:55:02:d9:6b:f6:11:1e:f5:04:fa:93:
e1:a9:0e:96:46:7a:6b:29:0f:f4:13:23:c3:e2:15:66:a2:3a:
d4:ea:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:30 2025 by rpki-client