Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: PF17L6FlP3Ff5UiWI1DSc0kpv/2VQ8ULpish5/fDS8E=
Subject key identifier: 73:67:B8:BF:D1:A3:F0:B4:07:1B:A9:C5:D7:0F:61:5C:81:B2:98:B0
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 0197C26DC0BE4E66536F942D589BE864DD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 0B69
Signing time: Mon 30 Jun 2025 20:01:02 +0000
Manifest this update: Mon 30 Jun 2025 20:01:02 +0000
Manifest next update: Tue 01 Jul 2025 20:01:02 +0000
Files and hashes: 1: KciWQRUUKA8G37qpiXIJOStEILw.roa (hash: YmPZf2aHwh91FO6k/J1ZnsKw+UadvZ5IXF9CJ4jQgGc=)
2: onkr1ceIBIpKPgL3tDwWHACVi7M.roa (hash: EEvxEqVipQPJzVBh5cB6I21KRgxyU4/cw+o/6DWEUyk=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: e7RGtXfScxqh+sxnG7oiFdVzIurPBYlAu+9fHcK9dnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:6d:c0:be:4e:66:53:6f:94:2d:58:9b:e8:64:dd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: Jun 30 20:01:02 2025 GMT
Not After : Jul 1 20:01:02 2025 GMT
Subject: CN=7367b8bfd1a3f0b4071ba9c5d70f615c81b298b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:7c:fb:fa:ae:39:ab:94:58:2b:1a:4b:2f:
4d:6f:76:23:ca:02:00:7f:59:3e:45:18:95:69:51:
4c:9d:4f:d8:16:30:62:af:aa:59:83:2b:eb:ad:18:
0c:5b:1e:d8:51:57:43:fc:74:41:e1:0d:73:47:d9:
81:a5:ea:9e:3a:07:0a:23:b2:d0:ec:4e:82:57:9c:
49:71:be:ea:38:a0:62:a8:6c:fc:7f:0a:4c:7a:06:
77:33:94:c1:49:56:0c:7b:08:23:ba:8a:33:33:e3:
f1:c4:c9:af:30:f6:c0:73:4a:53:a6:78:a9:07:46:
29:2b:ff:0e:d3:c8:82:44:52:1b:16:f4:e0:de:d3:
2b:9a:ca:dc:60:9f:5f:9a:ae:46:49:05:4e:af:05:
8b:f6:54:19:fa:26:1d:54:cc:1f:55:9b:eb:ee:57:
4a:8e:2d:bb:4e:54:d7:a7:5b:f6:38:7a:3f:f5:14:
fa:1c:e4:af:c6:d4:61:bf:3c:f5:c8:ca:4a:64:e6:
9b:74:89:10:2a:09:db:02:96:72:9c:bd:ba:74:3a:
64:7d:a7:86:0d:20:fb:c6:da:3b:9b:95:85:05:d3:
aa:aa:aa:d9:df:bf:3e:84:eb:6f:ec:3e:55:9d:8d:
4e:4c:f0:b4:f4:52:7f:24:a7:b7:d9:09:2b:59:93:
51:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:67:B8:BF:D1:A3:F0:B4:07:1B:A9:C5:D7:0F:61:5C:81:B2:98:B0
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0d:fd:2e:39:7e:1a:5e:00:cd:45:d2:f7:f8:a6:52:89:2b:
34:bd:a2:ba:ee:f8:87:d9:16:1f:db:f0:27:34:ee:5b:6f:25:
c2:f8:66:fe:e2:4f:33:47:0c:cd:75:bf:25:fa:34:f0:c3:4a:
7c:63:1f:0b:53:b0:ac:c5:9b:6b:cf:d1:56:aa:13:18:7b:39:
e5:7e:2a:46:ca:b2:2b:32:ba:b8:4b:8d:21:9c:45:59:52:3f:
2f:60:3e:00:45:da:33:85:ea:60:46:68:17:81:e9:60:a2:77:
78:43:a1:50:f1:7d:80:49:fa:e1:b7:3d:ab:d6:4b:23:c7:18:
91:81:fa:3d:3c:76:54:a4:e5:0e:31:ae:97:6b:08:fa:4a:56:
7c:df:5f:e0:bc:3b:dd:60:c7:4f:44:f9:92:fd:98:11:d8:5d:
bf:9b:21:75:e2:e3:7f:9c:ac:0a:a1:43:c5:cd:7e:89:79:ee:
9d:9b:f2:e7:c8:ce:a0:84:b8:ef:6d:ee:53:3b:99:51:d9:74:
07:d5:c8:ae:4c:50:1a:73:7a:25:40:38:a8:11:d7:f1:2e:a3:
8c:43:02:25:7a:84:b7:59:54:1c:68:20:05:57:52:34:f5:33:
2c:1b:25:8a:e3:ee:77:5e:6a:17:9f:3b:8d:c4:be:91:17:bd:
6b:0e:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:54:10 2025 by rpki-client