Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File: ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier: yge5Qc1GOwsA7/bgDgZEYmcDE9blV95uJI+Z2Mdqn2g=
Subject key identifier: 38:96:FA:79:E3:6F:4E:42:94:AC:38:43:61:6E:72:06:B8:40:E4:EA
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 0197B8909195C50444BCC9E4FD289DA5A4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number: 0A6D
Signing time: Sat 28 Jun 2025 22:02:51 +0000
Manifest this update: Sat 28 Jun 2025 22:02:51 +0000
Manifest next update: Sun 29 Jun 2025 22:02:51 +0000
Files and hashes: 1: 7Z7IzpBHNDRFWYLe_OokcTNbBnw.roa (hash: 24No6BP2DTZdRjBSm6KFYcGax0GtKenfx9uqKb2W2tw=)
2: OAC5V3ngkZFG4cbcfwTqgC0RbUw.roa (hash: amgbjuIRYLpnsd8z61aY9wLmq9odfVbwcJCZF+luhjo=)
3: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: JuAZsygOixujHlNHqxbsBin4St4Kc8iUHd66lS1lDM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:91:95:c5:04:44:bc:c9:e4:fd:28:9d:a5:a4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Jun 28 22:02:51 2025 GMT
Not After : Jun 29 22:02:51 2025 GMT
Subject: CN=3896fa79e36f4e4294ac3843616e7206b840e4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8c:42:63:c9:3e:f5:88:5a:65:ce:c8:22:ef:
2c:d6:82:8d:ba:f3:e9:be:a5:9a:df:40:a0:9f:cf:
ff:64:e2:6c:31:f4:ba:ac:ce:01:17:80:42:ca:e5:
42:4e:4a:de:dd:7a:ba:50:5a:64:be:17:65:98:93:
33:0e:55:bf:e6:a0:2c:a5:94:ea:b6:b7:9a:46:ef:
ce:81:47:9b:ea:96:80:e5:5e:d1:28:af:f2:98:70:
06:33:d3:67:a7:c9:ba:91:57:2c:3c:da:73:bc:56:
f3:d1:a7:b0:67:92:8c:b2:55:94:09:99:34:0c:94:
c1:5f:b8:eb:8b:a6:5c:35:d6:b1:f9:bb:81:35:56:
9f:50:08:71:9a:4a:d5:f9:15:93:21:9e:4d:8e:69:
ee:06:c5:ea:77:ab:37:7b:02:57:bc:ca:c0:7d:5f:
18:bd:50:52:fc:eb:4c:ee:0e:ee:15:14:75:a8:c1:
9d:34:51:b0:fa:9e:ae:92:65:eb:27:bb:c7:b3:d1:
6d:54:1b:67:18:8c:56:3e:5c:2e:38:b1:77:c9:a9:
8f:c4:ba:11:a1:82:46:f0:5a:d2:3f:64:97:7e:b5:
25:73:a2:6e:fe:68:8f:c3:51:48:cf:14:ab:c8:67:
31:87:90:7a:7c:53:d1:5a:61:72:66:bb:69:13:35:
92:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:96:FA:79:E3:6F:4E:42:94:AC:38:43:61:6E:72:06:B8:40:E4:EA
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:53:01:e8:e1:2a:d6:d9:e6:16:29:05:e6:f2:72:89:b6:a0:
d8:83:93:7c:56:1d:d8:c5:20:44:a9:c3:98:c4:62:79:94:aa:
a9:25:c2:9e:18:27:a7:4b:23:26:ff:a4:5e:10:4c:05:17:43:
da:0f:ca:09:11:10:4d:e3:df:02:e5:3c:06:ac:e6:73:c2:10:
0e:b1:5e:20:b1:14:fe:0a:29:d7:67:b9:34:78:a0:fa:bc:c5:
bb:ea:be:e7:78:2e:55:7b:e0:c8:06:f6:4e:03:fe:2b:f8:c5:
64:3c:0b:18:64:95:93:b6:35:97:bc:f8:2f:9f:7d:c7:8f:49:
70:60:b8:d8:4b:7c:ba:f3:37:8c:d2:36:d7:43:4a:1a:44:f0:
a4:27:8c:58:de:cd:4c:8c:fc:0b:7e:fa:02:d2:82:a3:c8:08:
02:47:7b:52:d3:4c:b0:dd:35:32:1f:fb:08:69:4b:d7:0f:c0:
75:c8:94:7a:dd:25:fe:15:3a:31:be:f6:93:b7:25:b5:10:d8:
5f:5e:a4:cb:4c:e2:c7:2f:9a:6a:f2:69:0e:74:91:30:40:23:
53:41:bd:a5:bf:12:be:dc:ef:10:12:00:f9:53:96:3c:6d:68:
58:40:ae:c1:c0:1f:01:3e:d6:b8:f6:39:b6:95:75:86:6f:24:
3d:7c:c3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:38 2025 by rpki-client