Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: le3Jbq/Lq46RuCrD2BhXxx3/SQN5wKbwLpawKlit4e4=
Subject key identifier: E6:72:7A:E7:33:E4:37:F7:DC:38:9A:B4:B9:7E:9B:31:E6:57:2C:F7
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 0197B6A1AE114126DAEA862540FEC2FC7D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 01AB
Signing time: Sat 28 Jun 2025 13:02:18 +0000
Manifest this update: Sat 28 Jun 2025 13:02:18 +0000
Manifest next update: Sun 29 Jun 2025 13:02:18 +0000
Files and hashes: 1: 1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa (hash: tYb6X8EoEPBIOpcCtjg5jZ8qmmvQ3HaHzxmvyPy77Pw=)
2: VzQqyrs-uqIcVAV9Qkei6a34wwc.roa (hash: fyOWws5YA8x0adXdJbC1gsHmLihm5Um5wk56YNm2GDk=)
3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: b3xoED+kEHlsZrom/zLHDXC5a13AR8crCTYkFvQisJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ae:11:41:26:da:ea:86:25:40:fe:c2:fc:7d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Jun 28 13:02:18 2025 GMT
Not After : Jun 29 13:02:18 2025 GMT
Subject: CN=e6727ae733e437f7dc389ab4b97e9b31e6572cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:52:85:89:db:b8:1f:a7:f0:a0:25:1a:92:8a:
35:72:b6:c3:5e:56:a5:16:eb:b2:cd:b6:89:26:71:
5a:b6:8a:d7:c3:94:0a:6e:37:b7:10:c8:24:65:1e:
e4:67:f7:2d:80:b6:89:a5:ea:37:72:3e:36:68:dc:
85:06:81:41:dc:20:d1:5e:18:73:e3:8d:54:25:2d:
25:ed:4f:58:50:c7:26:62:12:1c:ad:87:ba:d5:b8:
49:7d:e2:c4:4a:a2:13:5c:e7:00:f2:b8:7b:54:ba:
8b:f2:fa:17:07:f4:cb:79:cb:41:f1:db:11:15:c9:
5d:58:13:0a:59:9f:35:8e:28:dc:9b:42:0b:01:f9:
80:fc:a2:b5:93:b1:95:e5:e4:5a:10:19:45:ad:c1:
b9:f1:a0:84:c5:e1:cb:9e:c5:b8:4d:97:62:03:c6:
11:6c:75:0c:b4:ae:9d:9d:0b:a8:fa:cb:4d:0f:c1:
61:1e:80:16:df:f1:cc:30:b5:70:17:e3:8b:ee:67:
2a:28:5a:fb:ea:0b:12:67:76:a7:62:69:4b:67:9d:
6e:bf:21:c0:e5:4b:c9:00:8b:0c:8c:a7:14:16:ad:
bb:6e:1a:94:cd:87:2e:1a:cd:5b:dd:16:0d:10:fb:
47:54:91:3c:18:cd:d5:50:22:21:27:ce:84:c1:07:
94:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:72:7A:E7:33:E4:37:F7:DC:38:9A:B4:B9:7E:9B:31:E6:57:2C:F7
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1a:b8:1a:92:fc:c2:9f:78:db:20:d0:f1:53:14:cc:20:ff:
18:3c:b2:9c:1b:4c:e3:a1:41:08:9f:f8:95:af:3f:92:1d:1b:
4e:a0:aa:3d:5c:82:13:7c:03:4c:9b:56:d3:30:a5:57:5c:1e:
fe:f5:4e:04:c9:e9:e1:02:4a:aa:f9:f9:bd:19:95:1a:cb:08:
6f:02:d4:21:06:49:d9:56:c9:1d:64:a6:f6:14:87:4d:93:b3:
db:54:b3:ce:67:7b:54:86:0c:ff:5e:ab:26:fd:cf:11:98:a7:
f6:bc:9d:db:d0:13:26:5c:e5:d9:35:30:06:5f:a1:b0:8b:17:
71:0c:69:06:18:4e:ef:44:6f:4c:d1:5f:05:05:78:b4:56:a9:
aa:49:13:ee:08:55:d9:4d:21:f3:8e:e7:fb:f4:fc:6d:0c:2c:
77:c6:d0:6b:fa:45:95:16:a6:43:02:aa:92:84:a0:73:3d:89:
3f:bf:13:c9:b5:65:db:f3:bf:6c:18:e4:5b:7b:5d:74:61:35:
f8:77:cf:1a:de:da:44:78:9c:4f:8c:a8:a8:4f:a5:d7:0c:0c:
77:8a:fd:b3:14:5b:d1:98:7c:d6:54:b2:e7:0c:98:b7:1e:77:
62:fe:95:96:ee:7a:a5:63:e5:2b:76:24:2b:9e:22:ed:af:87:
e2:0f:a8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:46 2025 by rpki-client