Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier: hMWvTQMddBaalpauo/mF3AIUX+r+4uxclKgwNFOJMT4=
Subject key identifier: 03:D9:82:3B:8A:B5:13:2D:DC:37:2B:2E:FE:5D:94:FF:46:F5:AE:F1
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 0197B6327EB7F8D29CE04026DEC0F5BBD75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number: 061E
Signing time: Sat 28 Jun 2025 11:00:51 +0000
Manifest this update: Sat 28 Jun 2025 11:00:51 +0000
Manifest next update: Sun 29 Jun 2025 11:00:51 +0000
Files and hashes: 1: 1c920Ct5rOPHF_34AgNrTQyTHns.roa (hash: 3ha9UyAf61XbEV4U4pqec4b6uB2FvJUFQO9xEs0mMB8=)
2: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: qPHQ5cqw5Iob5pZYWsnZ9R1k3LmjIvj0mq88VV6et1g=)
3: ovafsYtoE7DXZrX76_DbhwiFBFI.roa (hash: B3oTrNBu7iXQWRfAVFRfxlkERw0m92wTQifsPR2uF3I=)
4: uS_eNJttBX5d2bBiNGi8o_-V1qw.roa (hash: 4uBi6d9Ejt3VJlBosKZzOt8ocCYLF07d22+zXDAl+n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:7e:b7:f8:d2:9c:e0:40:26:de:c0:f5:bb:d7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Jun 28 11:00:51 2025 GMT
Not After : Jun 29 11:00:51 2025 GMT
Subject: CN=03d9823b8ab5132ddc372b2efe5d94ff46f5aef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:4a:0b:64:84:33:b6:bc:19:cb:da:2f:c4:
0f:6b:3c:fe:06:d0:fe:64:81:ed:67:cb:96:fe:09:
27:2b:ed:ee:71:07:9f:ed:32:6d:49:82:67:f8:55:
76:08:25:f7:85:f1:ab:32:3b:55:5c:fb:22:d2:4e:
a8:7e:f3:38:d5:b6:0d:4f:76:c5:f8:5a:11:47:b2:
1b:fe:3d:1b:6b:81:ef:89:76:01:8d:41:d4:72:c3:
cc:6b:bd:cb:58:1b:0d:b0:98:2b:e8:7b:0a:d9:8a:
ef:8a:68:33:51:16:66:17:a4:6c:05:cf:5e:5f:1e:
b6:8b:70:9b:1a:d2:f2:66:d9:f5:b0:2e:d2:9e:f5:
1b:77:86:0a:78:e4:84:18:21:ea:a5:15:b1:da:2f:
3a:dd:71:83:47:32:88:4b:a7:f3:a2:66:01:2c:d6:
ae:d3:fd:b8:78:4d:9c:81:f5:74:1f:f1:ba:cc:d4:
79:e4:fe:fa:32:6a:83:3b:7e:d9:8c:ff:62:9d:33:
41:76:31:f8:9e:aa:d3:6a:c0:7c:e2:3e:9e:b0:7b:
1f:05:1e:2c:71:e9:79:94:09:9c:0d:6e:86:87:ff:
7d:e7:f0:19:c4:09:e6:94:22:f0:ff:4b:31:40:b5:
65:31:76:da:11:1f:40:5f:37:ed:5a:10:ca:6d:85:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D9:82:3B:8A:B5:13:2D:DC:37:2B:2E:FE:5D:94:FF:46:F5:AE:F1
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:88:8e:a0:8d:7e:d4:ce:90:21:2e:a8:ed:68:c0:0c:58:15:
6d:10:fe:97:e7:47:af:c5:1f:b1:60:64:29:a3:43:1e:57:68:
11:44:88:19:fa:b9:5b:59:f4:38:88:b8:21:01:8a:f9:03:e0:
3d:4b:08:1e:a9:ff:81:23:97:d6:e2:b9:35:59:fc:0f:dc:e9:
93:ad:8a:ba:f5:20:5e:58:0a:24:42:e6:11:01:94:a7:f8:25:
fc:9c:2b:b3:73:da:3a:be:9d:68:71:cd:ac:91:ab:2d:77:a4:
f1:c2:96:f6:2f:f3:76:bf:76:26:06:91:fc:a0:1b:55:e4:b9:
08:09:10:88:55:87:64:ea:23:fb:3b:fe:c0:14:51:53:78:a3:
1e:cf:89:77:54:16:79:11:f9:9b:44:5d:65:59:ff:e1:56:af:
c3:fc:79:fb:39:a9:f2:11:6f:8e:15:1f:31:78:e7:25:dd:72:
1e:1d:10:eb:75:f1:ba:04:6a:90:13:4a:36:cb:50:cd:6f:b9:
42:55:35:83:47:00:92:71:7e:79:78:3a:ce:87:47:62:3e:18:
bb:f5:db:74:f9:ea:dd:be:30:82:c1:5b:af:c9:92:ce:23:56:
f2:f5:52:e9:76:3e:c7:1c:79:f9:68:75:65:c3:07:cd:b7:2d:
3d:d8:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:40 2025 by rpki-client