Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: qoqQb2jyBMeEOqmpjjQTva5Qbngyyzk/BjS5qL6152A=
Subject key identifier: 11:C2:1B:7D:C3:86:84:46:1F:65:DC:72:04:D3:B3:3B:81:38:7A:6B
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 0197B6D7985C1D21179ACA99B23E1CADA138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 0C02
Signing time: Sat 28 Jun 2025 14:01:11 +0000
Manifest this update: Sat 28 Jun 2025 14:01:11 +0000
Manifest next update: Sun 29 Jun 2025 14:01:11 +0000
Files and hashes: 1: 6uraY0RUo083dp6VRDIhaMr-XOw.roa (hash: 84hQ/Wr95yt1TasjhyzEMQBsJDQIG0TsCg+7NafRezY=)
2: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: gublxwgY8NP2JpaKPkxmXL3PihjZB2raJw+GtcLB0EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:98:5c:1d:21:17:9a:ca:99:b2:3e:1c:ad:a1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Jun 28 14:01:11 2025 GMT
Not After : Jun 29 14:01:11 2025 GMT
Subject: CN=11c21b7dc38684461f65dc7204d3b33b81387a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:24:aa:09:67:e9:36:69:d8:f9:65:1e:d3:
63:43:5c:ad:59:7d:cb:04:e9:31:e8:33:a7:59:11:
08:77:e2:c7:cd:1c:5f:66:57:1d:05:21:5c:f6:7b:
43:ae:27:32:3a:d6:da:1a:76:22:b3:08:40:35:0f:
f3:d0:85:7a:99:a2:9b:40:99:55:0a:cf:06:fe:22:
08:25:c7:db:79:24:45:a7:78:13:fd:18:76:fa:e0:
d3:fb:94:7f:1e:e4:9a:06:19:1d:39:dd:42:97:9f:
4b:27:67:43:e4:7e:65:1c:3f:a6:ec:45:80:b7:2e:
1b:64:7a:30:db:52:a8:52:13:c1:a5:3e:c9:e6:11:
86:3f:5c:1b:8b:51:a4:50:f0:75:ff:06:34:67:b2:
37:53:02:0a:18:bb:b1:4c:f0:06:80:0d:60:48:20:
64:1b:9d:ce:4b:0d:63:e8:ce:16:bf:f6:b2:b6:79:
bb:10:9c:68:d6:fe:e9:75:55:87:e8:90:17:63:83:
19:bc:d1:f5:51:49:07:b6:24:f7:bb:34:b3:ac:69:
95:2f:15:73:15:7d:dd:e4:03:ab:48:ac:c5:28:fd:
af:e8:9b:a8:77:9a:1f:f0:50:c3:3c:8b:64:8e:fb:
6d:00:be:d6:0d:e4:3f:a7:69:3e:b1:a3:0f:61:a6:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C2:1B:7D:C3:86:84:46:1F:65:DC:72:04:D3:B3:3B:81:38:7A:6B
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:75:c5:8a:e9:be:ae:08:82:1b:aa:87:45:77:60:9e:a8:fe:
60:8a:96:6a:41:f9:c8:60:be:43:35:36:c9:23:62:67:87:62:
67:b0:ee:fc:44:3c:6d:f2:05:69:3f:45:30:2b:22:08:cb:e4:
9a:48:44:73:0c:8f:03:39:d4:f2:9a:53:87:3b:66:31:d4:fa:
23:c5:51:89:28:87:f3:b1:3a:aa:3c:72:e0:8f:a2:27:19:7e:
35:de:48:49:4f:86:76:22:e0:36:ff:73:72:7a:be:a8:bd:fc:
51:a9:b8:8a:f7:1f:b6:44:4b:b7:12:50:49:5e:2c:a5:d2:47:
e8:8f:2f:83:12:00:b0:79:bb:b7:8b:ba:fe:92:76:06:e4:b4:
fe:4f:80:92:1d:5b:48:c2:93:ff:fe:c0:fd:a0:52:fe:80:11:
ad:9e:f0:77:d7:60:d4:8c:d3:4d:0c:85:83:4b:bf:b2:66:7b:
86:38:e8:fa:7a:74:50:a9:5e:53:7a:f0:cd:72:3a:4a:c6:de:
ea:2d:48:ea:da:e4:b9:75:16:62:a5:6d:f7:9f:26:bc:b0:e5:
90:4a:2c:d2:23:77:bd:d2:5b:de:41:df:38:37:7a:b5:58:02:
d8:a4:28:cb:57:e7:bf:3b:4f:36:78:af:e5:b5:18:cc:cb:2d:
1e:95:56:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:31:27 2025 by rpki-client