Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: h3iLGY49B7O3DI5hEEEnzKErESloPt4tI28bSDZgqzk=
Subject key identifier: 17:66:FF:FC:68:C5:5A:99:B2:83:3E:1E:07:05:16:92:9F:F3:AB:8C
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 0197B77C0D056FC0611D8D4735291154936A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 17:00:49 +0000
Manifest this update: Sat 28 Jun 2025 17:00:49 +0000
Manifest next update: Sun 29 Jun 2025 17:00:49 +0000
Files and hashes: 1: 8VKbbYixNDCpMWrK8Sk18PBt9UI.roa (hash: Y+EwSEC1feZ0TsmplFocxAWfhhAkFX7OxAfih+EUUq0=)
2: 9iP7WJpaeB_-buLXK8znbS1Ia3M.roa (hash: WfmJ7gmjlOFm1xY2ae1k54FPRmlhbu8yzibRgq+Obrw=)
3: KO1YGIQXzqmCT0PfoP9U_bP8Ik0.roa (hash: snMWMSvb7n+P3ZpH6VNK6nVq04jDlvUE+5CJBun4qik=)
4: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: qUVDjFxs3bANCUB1CkQ8yllcSuBASEtewjPqVjTqt/Q=)
5: cvFT9U6f9q2iEs9qYdY5pICL5uA.roa (hash: rpF3ncfSzctaMA19sRq+0rLTTnT49oldb4WYIOd4jLo=)
6: j97-8Fr-iu2JkstPIny1GyoUCWs.roa (hash: hG141yU64tbNFyVwR3WNdvmuMd8XffVyyIfIeXPsAX8=)
7: tOlreYPe7u67idbXYncHUQK-mIo.roa (hash: KU1u5Wpoy603w8tu9YwxwROqP4UYKqLHuGvfzTsDk/c=)
8: vsJTJNJUt5vULQK53FxCdXmG5wk.roa (hash: Tj8gi+0DcWqm3KQnTu0KBcAKSHrMVabVRmlaSv0QlNQ=)
9: zegOmVW3er1W7JPzrg42o5wEwdQ.roa (hash: 4d7Zk0b0nBk4WIXJdlH8YvyzxungmG127NYOALKCd2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0d:05:6f:c0:61:1d:8d:47:35:29:11:54:93:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jun 28 17:00:49 2025 GMT
Not After : Jun 29 17:00:49 2025 GMT
Subject: CN=1766fffc68c55a99b2833e1e070516929ff3ab8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:be:86:0b:30:b2:d1:52:5c:60:cb:d7:fc:
15:72:e8:7a:00:30:6c:ef:bd:99:86:de:14:f8:dc:
d5:ce:5e:2c:65:29:e1:38:ee:f7:e0:1f:26:b9:b3:
14:27:54:8b:2f:15:58:65:a7:00:1c:b5:a2:b8:fb:
f1:83:76:14:cb:22:53:a2:93:28:61:4c:65:ee:ff:
a6:a8:e4:ff:69:63:0b:eb:8c:c4:1b:e3:e1:a7:44:
24:a1:cd:29:11:54:af:13:7d:9a:22:5e:09:14:f1:
e6:9e:8b:0b:9b:e8:9b:81:de:df:52:aa:33:7d:ef:
55:e0:3e:56:b9:5a:e6:a7:90:aa:fe:ec:81:64:df:
d0:3a:f4:d4:3a:20:27:68:c5:28:06:b3:dc:e5:4d:
32:4c:c4:87:17:61:04:ec:60:fb:bd:4f:ef:db:9a:
3f:9f:8f:f2:b3:42:5c:65:4e:4b:6c:bf:b2:c0:a3:
19:54:be:c6:2d:ce:ca:f2:f6:41:5b:a5:47:2e:66:
2e:1f:4c:0b:41:5d:34:b1:81:b8:50:bb:70:a8:2c:
bd:65:5e:28:89:8c:39:ee:f6:2a:01:11:8e:21:aa:
5e:7b:11:7c:7f:dc:09:d8:2f:1e:f1:76:76:73:e0:
74:d7:38:a3:13:52:75:56:7f:9f:8e:c5:6e:9b:6a:
d7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:66:FF:FC:68:C5:5A:99:B2:83:3E:1E:07:05:16:92:9F:F3:AB:8C
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8d:a2:02:2e:72:98:2e:04:09:55:e8:25:c6:2a:6a:0e:e4:
1b:ad:b9:66:c9:a7:ec:49:6a:b9:87:3f:e0:98:4f:2d:74:f3:
3f:07:a2:6e:2b:45:89:fd:42:05:3b:53:05:59:fb:36:ff:33:
d5:39:5f:d7:ca:fa:2a:00:ad:1c:6a:ba:ef:62:35:11:c4:28:
9e:af:76:03:65:44:69:36:ff:98:63:dc:15:3b:8a:f4:9f:03:
28:5e:de:9c:15:3a:00:56:20:42:09:7e:65:6a:e2:2f:3a:39:
a2:1f:00:40:04:5e:f7:1e:46:05:24:a7:9a:f2:af:b4:75:eb:
06:75:8e:db:9a:92:84:26:17:dc:d9:bd:a3:d8:5a:56:d4:cb:
46:a6:cf:fc:d8:03:a9:31:40:cf:ea:26:7a:61:b8:fb:10:50:
68:99:34:18:2b:6b:92:ef:a1:87:07:d6:3f:04:b7:b0:05:95:
11:91:75:ed:ca:e1:eb:9d:10:04:13:61:25:d4:1e:49:a4:89:
02:5b:c4:b5:33:40:b4:32:4e:9a:01:5a:d3:58:05:e3:a4:c1:
34:f4:f8:93:23:84:31:3c:83:65:1c:2e:2e:5b:f4:4e:af:33:
ac:d9:86:d7:2f:23:99:a5:e0:38:d8:86:78:3a:37:47:35:52:
47:ac:57:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:50 2025 by rpki-client