Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
File: ZLMdzWu1MIApxCcyMFFPcmsbhro.mft (raw, json)
Hash identifier: oLOU/Sr1BboHIbbFsl1LPwM/RLoPEgzlJBEkGIXcVdM=
Subject key identifier: CE:CC:70:02:A0:5A:01:6D:9F:6B:C7:81:05:E3:66:1F:8E:CA:3C:A5
Authority key identifier: 64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
Certificate issuer: /CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Certificate serial: 0197BAEB748C8FBDA79FB1B326847154506E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
Manifest number: 14CD
Signing time: Sun 29 Jun 2025 09:01:22 +0000
Manifest this update: Sun 29 Jun 2025 09:01:22 +0000
Manifest next update: Mon 30 Jun 2025 09:01:22 +0000
Files and hashes: 1: ZLMdzWu1MIApxCcyMFFPcmsbhro.crl (hash: t39570jjbzOkNlGBngo55zrikvkKvxsRKTcl3t8D7ek=)
2: hgdnPYifylvEbRhPG5rcZMHgm-E.roa (hash: kVaA/BoHtOWfVS1UNUVlSYGZdZvXh/V05GtETEpyoE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:74:8c:8f:bd:a7:9f:b1:b3:26:84:71:54:50:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Validity
Not Before: Jun 29 09:01:22 2025 GMT
Not After : Jun 30 09:01:22 2025 GMT
Subject: CN=cecc7002a05a016d9f6bc78105e3661f8eca3ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c1:19:40:24:e1:e6:39:47:33:dc:0f:c2:35:
26:fe:91:13:5f:72:61:2c:66:8e:fe:5d:93:c9:48:
14:15:79:97:38:b3:53:2c:68:2b:70:88:67:7b:37:
be:3c:f0:94:bb:22:12:de:69:82:c2:6a:78:0f:88:
04:f8:15:48:a7:83:f2:86:ea:ae:28:a2:50:88:05:
b1:14:b0:b6:c7:ef:52:dc:b4:68:ce:1c:3d:77:88:
da:24:64:cd:c7:44:30:77:88:c8:06:d1:90:c9:56:
6e:73:c0:7e:50:16:f1:fc:f3:ae:db:c1:8d:fa:8f:
d0:97:6f:d7:33:0b:44:f2:59:72:f8:12:a7:90:2c:
5c:88:1f:af:c9:be:00:03:38:e8:ce:d0:90:80:86:
4b:a7:34:a4:1d:a3:db:eb:92:c5:be:41:81:b0:4c:
2a:39:b6:a8:ce:10:9b:39:33:88:49:28:7f:c5:6c:
f8:6e:a9:bd:09:42:64:10:44:d5:82:6d:b3:de:3d:
e4:d9:63:56:3f:72:a8:e7:29:4e:15:61:dd:4e:3e:
a6:e5:ea:58:77:8c:1c:21:dc:0d:68:ab:92:de:6f:
62:8f:63:ff:04:f8:84:f8:8e:71:63:72:ab:7b:42:
06:0b:63:f5:33:f2:b0:9e:3b:6e:92:c4:46:e6:c9:
cd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CC:70:02:A0:5A:01:6D:9F:6B:C7:81:05:E3:66:1F:8E:CA:3C:A5
X509v3 Authority Key Identifier:
keyid:64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:49:65:3c:d9:63:8c:8b:03:b9:ad:9a:94:85:63:48:97:dd:
3d:aa:c2:3e:bb:50:6d:8c:5e:be:77:06:7e:82:91:fc:eb:e1:
97:2e:6f:c3:19:2f:9b:27:bd:c6:08:bc:9b:b9:71:fe:e7:15:
07:cc:2d:8d:ec:c9:9d:5b:89:50:4f:e9:a8:c4:5e:a1:e1:d4:
d5:32:1e:18:f8:cd:43:91:c4:cc:fa:c9:36:78:d2:57:51:2a:
8b:e5:33:bd:49:66:a1:88:5d:77:24:99:24:b7:c2:67:b1:d1:
6a:2d:8b:7b:c4:0f:e3:98:98:14:fd:22:86:7e:2f:c2:80:06:
eb:e1:91:8d:ee:45:38:a3:67:ee:ae:7e:06:a3:82:31:e8:d9:
40:df:ac:f2:7a:bc:39:ec:11:a4:80:ec:e7:99:da:07:50:07:
c1:76:32:c4:9f:a2:20:fe:49:92:e2:28:c0:d8:a7:21:92:25:
c8:4e:df:d9:2b:63:38:f5:56:c5:6f:64:56:43:7a:87:ca:25:
46:b8:70:f3:8d:96:ef:f2:da:43:48:e5:2e:0b:57:37:40:1d:
53:3f:f8:52:07:f1:db:f1:bb:1e:d9:2a:91:59:76:1e:69:36:
de:bc:9c:36:48:1b:ba:94:b1:9f:19:c4:29:46:90:d2:af:08:
85:bd:1e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:52:29 2025 by rpki-client