Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
File: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft (raw, json)
Hash identifier: bVJHz0dAWlESszrZO9Eprm6oWh9A+kriuzqZA0txdOc=
Subject key identifier: 4E:CF:FB:FE:16:36:1D:2E:FA:98:2F:61:24:F5:1C:94:2D:0E:CF:61
Authority key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
Certificate issuer: /CN=646836c9214faaa16798a93e8773e599534b29d7
Certificate serial: 0197B70EA330D764DB3076E179FCB6A3060A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
Manifest number: 0722
Signing time: Sat 28 Jun 2025 15:01:19 +0000
Manifest this update: Sat 28 Jun 2025 15:01:19 +0000
Manifest next update: Sun 29 Jun 2025 15:01:19 +0000
Files and hashes: 1: 61Gq7F9HDY76tR6eiEQWqVAvCDc.roa (hash: UnYiE/hrC17fToVR4tEZHFP7UPTNmsiE/lDxvNs6zSU=)
2: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl (hash: 2n9YmPG3szD6jcqQuBIjN0dnZEUP+jOyw/AtsSdZqt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a3:30:d7:64:db:30:76:e1:79:fc:b6:a3:06:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646836c9214faaa16798a93e8773e599534b29d7
Validity
Not Before: Jun 28 15:01:19 2025 GMT
Not After : Jun 29 15:01:19 2025 GMT
Subject: CN=4ecffbfe16361d2efa982f6124f51c942d0ecf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:46:aa:ea:0e:a2:ed:7e:a0:3e:78:d4:90:
c5:9b:c4:81:57:5b:47:7a:cd:d7:2e:d6:f1:f3:e8:
da:51:2b:4a:7c:b2:da:8f:82:d0:2e:aa:77:84:dd:
35:63:c0:bc:5f:4f:83:3f:53:60:74:87:95:ae:9e:
6c:95:92:c5:9d:1f:08:10:8c:84:01:52:3f:f0:86:
75:ae:db:61:da:b7:88:c8:59:47:00:3a:ba:96:65:
e5:77:dc:5c:ca:b3:8c:4b:27:67:a4:be:f4:ac:1f:
68:f7:07:f4:d2:a2:f7:08:62:fc:3b:bd:27:e5:0d:
b1:2f:09:51:6a:d6:27:90:74:19:e7:58:f1:54:1a:
38:22:88:ea:1a:f0:8c:03:ee:38:2e:c9:79:2e:19:
6a:52:c7:31:ac:de:72:1f:fe:0a:a7:dc:b7:21:6f:
50:49:cb:c9:15:24:5d:b7:b2:c0:26:e5:37:45:67:
47:4f:9e:7b:36:9a:f5:47:18:5a:a4:ac:9a:86:c6:
39:cf:68:28:d8:76:7f:7c:31:6c:2b:ad:e7:ba:a7:
3b:cd:df:af:53:6c:22:55:d1:09:f0:0d:56:a4:ee:
81:d4:51:e2:8a:dd:55:98:a3:f7:a3:68:6a:8b:d9:
9f:1b:8b:57:66:94:70:18:ee:08:f8:b9:66:0d:94:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CF:FB:FE:16:36:1D:2E:FA:98:2F:61:24:F5:1C:94:2D:0E:CF:61
X509v3 Authority Key Identifier:
keyid:64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cd:9b:a3:53:17:1f:69:2d:68:fa:54:10:e4:05:09:62:08:
ec:d4:13:91:cb:c9:74:b6:37:8f:d0:0b:a7:1f:f8:70:7f:cd:
8b:58:16:3b:f6:bb:49:5c:b3:0a:a9:0c:a6:66:fa:f4:65:4a:
9b:9f:6a:3e:7e:2b:9a:d2:4d:9d:a9:de:06:e0:61:7e:47:3f:
d4:d6:57:bf:c2:50:94:25:2b:07:29:34:04:26:e2:a5:03:32:
75:97:b2:9d:0b:81:22:0f:4a:36:f2:cd:23:14:72:26:08:8c:
ff:17:d1:73:75:6f:a9:23:f7:fb:f8:f2:1e:0c:9d:11:63:69:
9b:27:41:ea:cf:0f:cd:e7:66:00:87:5e:e5:0e:86:6f:cf:e1:
78:0a:7f:8c:a1:be:a6:d5:42:8c:43:8c:1b:28:e6:f8:05:c6:
bd:ae:ab:71:d3:2c:e8:77:75:4b:ab:83:76:5d:3f:8c:47:5d:
ec:04:f5:a0:d4:d9:99:91:4a:f4:dd:78:9c:44:d6:87:4b:f7:
1e:08:aa:5a:d8:70:23:dc:ac:e1:cd:6f:11:fc:9c:05:54:82:
e3:79:ed:d1:63:e8:63:73:3e:d6:e9:50:80:29:51:fe:22:03:
5d:0a:fd:51:3a:d1:dd:62:68:ae:19:50:6f:48:ce:c5:4f:20:
38:65:a6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:58 2025 by rpki-client