Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
File: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft (raw, json)
Hash identifier: Hc71dwZlv1WU8NshIF3iHBQOisDoT9ahLSD24yqhqVU=
Subject key identifier: D6:3C:34:CB:89:1B:D9:89:90:DE:14:25:98:AC:6B:26:18:91:BE:55
Authority key identifier: 66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
Certificate issuer: /CN=66953361ff6c0083fd93d52865033319863fbc46
Certificate serial: 0197B77C17DFD65F676D36287D4FBADF6CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
Manifest number: 07F6
Signing time: Sat 28 Jun 2025 17:00:52 +0000
Manifest this update: Sat 28 Jun 2025 17:00:52 +0000
Manifest next update: Sun 29 Jun 2025 17:00:52 +0000
Files and hashes: 1: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl (hash: 8KFs0KxCdTev2J2S2hINvKAoAcxfbvShumVo+TVmBdY=)
2: x7YKpAfSkOct6Fg0XF9orQA6c8g.roa (hash: TXWS81jR34NiA/SsVNyLTEvMyxNkcObY8WiOh+sls1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:17:df:d6:5f:67:6d:36:28:7d:4f:ba:df:6c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66953361ff6c0083fd93d52865033319863fbc46
Validity
Not Before: Jun 28 17:00:52 2025 GMT
Not After : Jun 29 17:00:52 2025 GMT
Subject: CN=d63c34cb891bd98990de142598ac6b261891be55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:49:d6:25:c1:38:19:06:1b:13:0a:50:62:
a8:12:c9:fe:95:9e:13:69:26:24:fa:ef:d7:d3:e9:
2a:a4:32:99:be:07:b3:5f:9b:55:63:b9:36:8a:6a:
ba:5a:ed:b4:40:f5:85:91:cd:c9:07:17:d1:d5:96:
8f:ea:25:38:07:ed:d6:c0:37:7a:6e:44:ba:40:a5:
5f:8f:9e:b4:1c:2f:1c:13:73:89:fa:ec:68:e2:a7:
c1:bc:62:f7:0d:7e:c0:bc:2a:09:61:98:09:f1:d6:
17:62:df:90:c6:e1:71:15:d1:b3:5e:be:5c:8b:ad:
84:c7:fa:e8:0e:68:c8:04:0a:0c:f4:8e:f8:d9:b7:
46:1c:81:6e:bc:1b:19:f1:c9:94:9a:c5:6f:22:e7:
3d:17:df:49:ce:87:ef:09:9f:2a:14:b6:fb:88:7d:
fb:23:2d:84:bc:4c:22:ad:63:7e:e8:58:c0:13:d0:
de:db:95:1a:90:6c:1f:de:db:e2:e9:b1:44:fb:8c:
cc:a4:4a:b4:79:07:a7:63:3e:1c:c5:1c:6a:c0:9d:
0d:08:47:b4:c1:43:e1:96:ce:db:5d:77:14:f4:30:
06:e4:0a:ec:d5:a0:2d:24:4b:65:a1:71:50:8f:11:
1c:6b:49:19:d6:eb:76:47:7c:51:0e:d6:6b:5c:3b:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3C:34:CB:89:1B:D9:89:90:DE:14:25:98:AC:6B:26:18:91:BE:55
X509v3 Authority Key Identifier:
keyid:66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8a:3d:d5:a7:02:a6:55:36:ef:91:b9:c0:83:40:e7:ce:f4:
16:4d:64:66:18:41:18:0a:76:d2:7a:20:61:3a:07:be:69:d1:
b9:01:1c:b4:95:f8:6a:d0:96:76:29:0b:ff:f4:66:33:5f:e2:
f2:a5:49:56:b5:cc:73:96:2b:8e:f2:2c:1f:97:dc:e3:6d:16:
fe:e5:e6:1c:dd:0c:88:3c:0f:ab:a0:d3:35:35:ff:81:3a:36:
90:59:a3:99:42:70:af:3d:48:1a:f3:01:f5:cb:7e:6c:4e:7e:
c6:47:d1:3e:06:4d:ab:8e:48:b4:33:d5:86:8a:10:fa:fc:a1:
bb:35:54:0e:9a:ed:5a:1f:bd:77:9d:3f:d1:68:ad:f8:16:33:
7f:34:51:fe:52:c0:23:1c:c1:2e:54:d9:10:45:e2:a6:58:f4:
44:0c:43:45:0a:a7:66:7a:aa:9c:2b:f1:4e:70:3f:e6:85:71:
f3:b8:a1:d5:25:2b:8e:7d:81:bf:3b:6c:ab:72:e7:43:45:bd:
6a:18:fc:c0:d3:4b:8e:2b:53:03:76:d0:d4:1f:13:e1:03:5a:
bc:4b:13:11:1a:ea:bf:19:79:42:51:9e:a0:d4:1e:ae:07:60:
d1:22:fd:98:f4:a9:38:79:fa:16:90:f1:60:51:c0:10:32:dc:
64:a1:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:12 2025 by rpki-client