Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: 8FNK+xpbJvgq/OVqct2OPQQ4+iybqRVRtQSi4FEdfX4=
Subject key identifier: F0:2F:3E:C4:E7:CE:64:FD:27:AE:78:8B:2F:85:B6:D2:C4:7D:3D:F4
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 0197C425317C0965C6D25473F5F0F438726F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 04:01:00 +0000
Manifest this update: Tue 01 Jul 2025 04:01:00 +0000
Manifest next update: Wed 02 Jul 2025 04:01:00 +0000
Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: HJoRQvF9SeVwnty6JLNbzWeD8/Td7uTeCDWDcQbdBsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:25:31:7c:09:65:c6:d2:54:73:f5:f0:f4:38:72:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Jul 1 04:01:00 2025 GMT
Not After : Jul 2 04:01:00 2025 GMT
Subject: CN=f02f3ec4e7ce64fd27ae788b2f85b6d2c47d3df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:37:28:28:c7:5c:2c:cd:4b:52:15:0f:b3:
f9:9f:65:56:2c:e3:31:41:f3:bd:aa:a8:c0:fe:09:
54:10:47:3d:bf:cd:0e:af:22:23:80:62:5c:83:c2:
c3:9b:c6:ba:d1:88:ba:6f:83:d5:8d:66:1a:26:07:
38:8b:34:a3:e8:9d:31:a8:64:7d:de:ea:68:48:2f:
da:de:11:34:a2:8e:1b:ed:5d:23:e9:33:58:db:33:
02:6c:58:67:de:21:81:2a:57:ba:fe:61:ef:cb:dc:
02:79:56:aa:c5:d1:63:5a:41:9c:5d:76:47:0c:2a:
c6:d9:64:da:9f:88:69:a0:d9:c0:7f:c9:f0:23:73:
d3:d9:7a:59:8b:c5:95:30:83:05:45:f1:d3:bd:4b:
42:f1:0f:d8:73:0d:33:b7:d9:f8:22:21:89:2b:c6:
a9:dc:a9:36:62:36:9b:10:f8:75:a8:f7:8d:0b:58:
37:af:ea:ab:42:fd:34:6a:cd:2a:b8:20:f7:e3:42:
ae:0f:36:5b:94:56:77:08:e5:1a:1e:a4:6d:9c:d4:
e7:ae:9f:ea:5e:7e:ca:05:6b:86:d6:fe:11:78:c3:
74:c2:1d:e7:c5:28:66:d1:48:31:ca:ad:fd:08:0d:
8a:41:91:5b:cb:fc:94:81:df:ed:81:64:d4:38:c0:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2F:3E:C4:E7:CE:64:FD:27:AE:78:8B:2F:85:B6:D2:C4:7D:3D:F4
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:34:86:b5:96:fe:4f:f3:f8:a1:78:60:97:66:f6:3c:8b:7b:
0a:93:89:78:9f:85:ef:f9:3f:32:a6:35:69:07:91:56:1a:e3:
50:5a:f7:c6:4e:6b:31:c4:e1:26:e1:38:aa:69:a5:b9:7e:80:
7f:9c:64:c2:9b:65:1f:a4:b3:99:cf:77:6a:dc:b2:95:52:b0:
66:ae:ad:66:ed:f2:e0:3c:a7:23:45:db:13:09:e5:fb:62:07:
6a:82:67:a9:21:8b:69:6c:8a:85:7a:60:07:c1:c6:86:8b:ea:
a6:27:5b:47:dc:a0:cd:c5:d2:da:ca:cb:67:6f:d6:2b:11:72:
83:3e:9a:67:78:e3:3c:61:e5:c2:9e:0e:ac:b4:64:10:a9:24:
e2:67:0a:82:d2:02:1d:e9:57:70:e8:42:b1:7b:e0:32:6c:25:
6d:cc:ee:c7:49:e1:4e:32:1b:fc:cc:b0:15:2f:34:64:01:eb:
5c:69:5f:dc:5d:d1:fe:74:a2:6a:dc:24:92:68:71:22:84:b7:
14:c3:c1:30:47:37:b0:66:b7:03:56:fc:c7:95:ae:27:46:df:
db:c5:d4:9c:da:b5:12:90:b9:42:a7:ec:79:80:01:5f:ea:40:
90:cc:ce:d0:06:16:84:59:73:89:1f:3e:66:16:17:f4:77:9e:
56:f2:d5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:12:11 2025 by rpki-client