Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: Z6LH6XWn0XUn+2HQ21+8vY9XOM/jZNw4aHt2exo3DBk=
Subject key identifier: 71:7A:C0:E4:F0:44:1A:C0:7B:24:EB:E0:06:DB:36:DF:17:2C:12:E7
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 0197B745A191B783B86EB95DA3D837EDF275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 05ED
Signing time: Sat 28 Jun 2025 16:01:23 +0000
Manifest this update: Sat 28 Jun 2025 16:01:23 +0000
Manifest next update: Sun 29 Jun 2025 16:01:23 +0000
Files and hashes: 1: 0QIFKfV7XQ0j_NX645lYUUtY2-o.roa (hash: 7LNZ2ckLWt9kDraFIFwQN/kugVtMuC1qB6bNkP46hLY=)
2: tkPBYkbqHBQBIn0BHV-X-SO1suM.roa (hash: UbAqMwZmfegZ1hqELkSkDP8x8h7o/IponAOjYN5W65Y=)
3: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: dZ0/2SJ1Nav1XlQLWal+x3Za+02/8GCxtguCTTs56eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a1:91:b7:83:b8:6e:b9:5d:a3:d8:37:ed:f2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Jun 28 16:01:23 2025 GMT
Not After : Jun 29 16:01:23 2025 GMT
Subject: CN=717ac0e4f0441ac07b24ebe006db36df172c12e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e9:7c:bc:61:bb:11:55:be:50:a4:fd:1a:af:
24:6f:72:b3:75:2f:c6:61:01:b2:74:16:86:cd:dd:
67:45:a7:eb:47:21:5c:05:2d:53:55:06:1a:fb:15:
5f:cd:3d:e3:1d:2a:d3:0c:e0:be:c2:56:db:1a:45:
89:2d:82:a2:fe:5c:8d:21:0d:16:3c:9a:af:0c:dd:
c8:5d:22:42:e6:d2:66:2f:54:99:ed:28:0f:0c:03:
61:bc:3d:4a:a9:19:d3:e0:56:e1:2a:08:58:a1:22:
23:31:7b:84:28:4e:5e:36:9f:dd:28:85:1c:e0:72:
08:ea:0e:32:5b:54:90:0b:ca:36:67:f8:71:e8:18:
55:c9:28:93:34:90:af:f3:7b:08:5b:3c:b0:3b:13:
7e:ca:aa:4f:3f:a8:e9:c5:6e:a7:49:1e:9c:da:18:
7d:88:68:93:ab:53:a3:d1:47:4a:09:0e:7d:5f:73:
8d:e6:ed:89:07:5b:5d:f2:93:1f:b9:98:83:38:81:
15:c3:98:6d:2d:70:19:29:f6:ec:76:23:0c:8b:6f:
1b:02:62:5e:af:ae:21:65:de:c8:a4:b3:17:bb:6c:
4b:5e:3a:18:78:ac:36:91:5a:aa:09:f3:b0:98:1c:
04:be:d2:af:33:a8:0a:ad:eb:6b:cb:50:86:67:10:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7A:C0:E4:F0:44:1A:C0:7B:24:EB:E0:06:DB:36:DF:17:2C:12:E7
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b7:a4:1d:02:9a:79:7d:5c:98:21:3e:b8:ef:37:c9:74:30:
c2:9d:25:d3:ac:75:2a:5a:44:cc:75:bb:91:24:37:fe:c0:d9:
22:03:d6:f0:0e:28:cd:ec:6e:a4:de:ba:ad:ce:1c:34:c6:c4:
f6:fc:a3:30:71:64:ce:8d:b8:93:97:31:1e:46:dc:9b:2c:fd:
bf:d8:12:eb:e9:92:3d:dd:21:d3:55:f6:d2:fc:3b:d2:cf:76:
1b:7e:94:6e:05:b4:99:79:59:81:a5:b2:9d:19:4e:82:fc:7a:
cb:12:81:79:b5:8b:85:00:eb:db:04:75:fa:8f:03:44:6c:8c:
e7:b7:cb:c5:b2:29:d9:93:2b:24:e1:30:b6:53:7f:03:93:50:
c0:2f:54:32:be:37:c2:53:f9:0e:b1:82:a0:fd:72:a0:0b:37:
8b:c6:fd:51:b9:5c:11:81:5a:89:28:be:fe:ca:5c:36:32:f9:
66:cd:d0:e9:6b:f7:c9:9d:82:d9:fd:0c:65:81:2e:64:3f:44:
81:4c:09:74:4b:33:de:ee:f3:cd:7b:91:09:cc:ed:1d:51:31:
d6:9c:bf:fe:a4:bc:fa:71:e4:48:e7:fe:15:03:c7:3f:04:ba:
61:28:9f:50:50:ab:3a:99:35:5c:89:70:d8:23:02:6c:8a:ac:
8a:ad:2c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:27 2025 by rpki-client