Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: wokCt9bBAtAxzfPpb0kOkBeL9po2U9ylaafjHDSXcGM=
Subject key identifier: 91:88:6A:7F:AC:E1:14:DD:6F:E1:CD:E7:BD:62:26:71:DA:04:CD:B9
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 0197B70E56D99A0E9F37DFF64DE60725A01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 127C
Signing time: Sat 28 Jun 2025 15:00:59 +0000
Manifest this update: Sat 28 Jun 2025 15:00:59 +0000
Manifest next update: Sun 29 Jun 2025 15:00:59 +0000
Files and hashes: 1: I9pCIyNdXwO_UmL0GiE3Cg1yOBE.roa (hash: rgdmg36ZiZKltWGUWVab82/ToqNlhoJ2jQiTOIy/cAU=)
2: svzhNq6qtyn4S4aBADhUvEOECPM.roa (hash: PLCvbbOnyIN6lmj0BVGyyI3TGiwUbgBbXCHrA/CAEUE=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: 8GLHFDzOP9nxKVQQ9xzV9StRuep4PccW66DMA04ghO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:56:d9:9a:0e:9f:37:df:f6:4d:e6:07:25:a0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Jun 28 15:00:59 2025 GMT
Not After : Jun 29 15:00:59 2025 GMT
Subject: CN=91886a7face114dd6fe1cde7bd622671da04cdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:fc:65:e6:e1:3d:65:73:f2:ce:65:8e:db:
e7:b2:ec:a4:4c:1b:07:ef:4d:c4:a2:01:e2:6d:e2:
86:9f:ec:79:54:23:6a:49:a1:c3:7c:97:68:99:fd:
00:63:9e:73:af:f8:2a:87:fa:af:50:d8:16:d8:6f:
94:80:26:19:d3:3e:cb:81:fb:95:83:b0:d8:66:f3:
23:4f:72:e9:c4:db:c6:10:19:63:fb:0b:07:f7:ce:
77:65:2f:f0:d3:12:12:b0:7d:a0:18:db:29:1a:ea:
88:3e:33:1b:c1:24:10:2b:81:c4:dc:f5:56:b9:3b:
68:b0:67:39:08:c1:c8:6d:04:e9:2b:19:65:92:79:
6e:64:2e:52:c7:93:34:38:aa:d2:10:fd:85:a6:9c:
eb:50:c3:5a:68:81:5f:48:c5:2b:87:c0:8e:f4:6a:
f3:55:02:61:80:be:1a:9e:d4:1c:16:b8:e3:84:0e:
bd:2a:01:69:df:3f:00:e5:ce:9a:a0:cc:35:4c:b4:
6e:df:97:f6:06:3c:ee:d1:23:52:a1:3a:98:84:90:
4d:a5:bd:54:ea:63:ad:90:f8:a1:a4:7d:a9:44:5d:
b5:52:6d:24:6d:38:ae:0e:46:ce:0c:56:44:cc:17:
d1:a8:c6:60:f3:12:6c:7a:56:78:34:8c:eb:2a:86:
4c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:88:6A:7F:AC:E1:14:DD:6F:E1:CD:E7:BD:62:26:71:DA:04:CD:B9
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:04:c0:b4:1e:5f:28:12:c6:a7:97:e6:3b:f7:b1:3d:0b:3a:
ac:9c:11:1a:43:42:e5:7c:f3:b2:c0:43:3e:38:1f:0a:fe:65:
94:d8:21:e3:53:69:15:b6:3f:08:ae:2e:87:54:ca:23:f3:e7:
46:55:be:b9:78:74:4e:08:90:b2:ad:79:28:29:39:fe:60:42:
07:29:ea:87:13:91:36:d9:7e:03:f4:8a:4c:39:59:de:52:1d:
a0:81:8e:7e:d3:f3:40:46:1e:76:43:b7:37:d3:70:ee:2f:9a:
ff:fb:c1:03:b0:e5:cd:85:85:f4:80:08:8a:8d:db:1d:23:fd:
46:c8:c7:9d:07:7b:ae:f5:d7:3f:53:ac:bb:91:ea:4e:08:66:
32:8f:9f:51:7e:01:6a:3d:1c:85:ae:d3:52:56:f8:18:d5:f6:
45:81:7c:c6:cd:4f:46:5f:71:ad:f4:42:03:c3:23:96:7b:73:
4a:c7:53:23:41:a4:e7:0e:eb:0e:33:2f:61:3a:56:a9:74:d7:
ff:01:27:07:9b:77:3f:09:f4:a9:77:53:64:fe:81:5c:92:27:
21:29:73:c5:e1:e2:21:b0:08:a2:6c:37:9d:6b:a7:cf:33:d7:
c2:38:76:4e:e3:b6:e1:85:b6:bd:e9:b0:db:3e:c0:7b:d8:23:
73:d9:3f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:36:00 2025 by rpki-client