Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
File: zpeYqNqZmd31OjyNOPNvF-zUVDI.mft (raw, json)
Hash identifier: Cu5tANvWTycJqqIELE5geLHepBQoPL9thw//kgXsbvo=
Subject key identifier: 43:6E:7A:9C:C0:99:DE:01:F7:0C:F9:4E:29:21:D6:B1:2F:3A:96:F0
Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
Certificate issuer: /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Certificate serial: 0197BD4726C77B2BA62788E7EFF88CD55000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
Manifest number: 0C21
Signing time: Sun 29 Jun 2025 20:00:46 +0000
Manifest this update: Sun 29 Jun 2025 20:00:46 +0000
Manifest next update: Mon 30 Jun 2025 20:00:46 +0000
Files and hashes: 1: pIpJ8fNC27Y24CDWefynJuipkU4.roa (hash: 6TIE6c441FOI06dUbKpONLjnig+SLG5qUyYpphuhQRA=)
2: zpeYqNqZmd31OjyNOPNvF-zUVDI.crl (hash: PAYFtGFsb1FzLoZOjBB8Kh+HcuzzvtacUWD20us7f1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bd:47:26:c7:7b:2b:a6:27:88:e7:ef:f8:8c:d5:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Validity
Not Before: Jun 29 20:00:46 2025 GMT
Not After : Jun 30 20:00:46 2025 GMT
Subject: CN=436e7a9cc099de01f70cf94e2921d6b12f3a96f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:f1:fe:33:6a:c7:5f:b7:54:d7:c9:1e:86:
72:08:3a:c3:73:f9:36:9d:3f:4c:30:d3:ed:07:21:
5d:d6:1c:5e:52:6a:0b:ff:6d:9f:2d:c1:34:c6:b8:
33:39:ec:48:9a:19:1d:92:ef:3c:7d:79:da:9e:5b:
87:c1:0b:a3:30:08:6b:f0:a3:e2:be:ba:15:47:6f:
37:06:04:2c:53:5d:37:e6:22:88:bf:97:32:e3:3c:
8f:5d:f6:05:34:ce:79:71:4c:e7:ab:d5:cf:c5:4d:
91:12:10:f5:c8:95:93:75:2c:fe:ba:b8:70:de:0d:
6d:25:5e:80:8a:df:f4:28:b2:0a:8d:56:5b:9e:56:
f8:c7:a6:ce:71:b6:1a:eb:48:35:dd:4c:48:28:d3:
f4:da:3d:db:46:0b:bd:62:ff:45:76:a0:ac:8e:da:
92:5c:b8:b0:1f:58:d8:6e:e8:26:8b:50:26:d2:1e:
b0:25:de:43:7b:38:7f:bc:1a:13:62:db:d5:1e:b0:
c5:95:eb:57:48:6d:a8:2f:ad:6f:53:6a:e4:e6:bf:
48:6f:c8:14:72:09:11:cc:37:5f:6d:d9:6b:0c:46:
f2:ca:ed:13:a1:47:17:b1:14:b4:1f:50:12:c8:2b:
41:eb:d8:33:69:a0:b3:78:8b:70:2d:c0:13:00:70:
a9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6E:7A:9C:C0:99:DE:01:F7:0C:F9:4E:29:21:D6:B1:2F:3A:96:F0
X509v3 Authority Key Identifier:
keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:1c:6d:67:13:5e:0b:04:83:2c:f4:89:58:f5:df:15:08:83:
6e:df:2d:53:59:47:a4:cf:4a:2d:30:11:d3:a6:5d:91:bd:09:
c3:0a:d4:d3:68:77:ec:88:ff:ce:63:e8:6c:04:a7:61:1c:b3:
9f:c7:a9:59:b8:ae:fc:ba:26:01:85:b3:5e:ed:c8:52:eb:7a:
5f:d1:c4:68:1a:f1:2b:6b:d9:9f:88:21:5d:fa:cb:31:9e:cd:
3b:e7:27:02:e2:87:91:e5:2a:da:1e:46:dc:10:6a:3a:22:56:
d5:2b:b7:ab:a0:92:23:4c:b0:0e:27:1f:bd:d8:7d:d7:3d:68:
b7:a1:37:99:52:dc:5d:a0:12:57:cd:a8:e3:16:48:5e:40:3d:
93:5f:10:d8:12:ab:36:d2:e3:9e:5b:6f:e8:81:ca:88:62:49:
da:c0:0c:4c:0f:e8:d4:db:0c:93:75:6e:a7:e7:d5:81:b3:f8:
b8:10:53:57:12:3d:3e:ea:5a:91:c5:a3:13:58:bb:f0:bb:70:
86:fa:25:3e:29:c1:dd:e5:c1:bd:8a:5e:5a:d0:da:f5:38:b1:
0c:8e:27:f5:46:cc:f4:94:cb:76:6f:78:68:d9:57:e8:63:cf:
8b:2f:04:0e:10:55:6f:74:85:80:50:43:3e:d9:44:80:08:c8:
d4:ef:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:20:46 2025 by rpki-client