Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
File: zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json)
Hash identifier: gK8N78JryYtOVTgNQD8OoM9fXDqJ+dIMXINnGoYCg6U=
Subject key identifier: BB:35:F4:BB:EA:E0:74:B7:04:C6:AB:CB:1F:EA:14:60:9A:6A:2B:AA
Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Certificate issuer: /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Certificate serial: 0197C124245F6F1F8C29D1547DDC888DEB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
Manifest number: 15BA
Signing time: Mon 30 Jun 2025 14:01:00 +0000
Manifest this update: Mon 30 Jun 2025 14:01:00 +0000
Manifest next update: Tue 01 Jul 2025 14:01:00 +0000
Files and hashes: 1: ugeI_SPpOI_az_dGl_P54hP9qpg.roa (hash: HZZ/y/qcvJFbb7qD1Pg6FgrRdOBnE2ywGhjLdlNi6S8=)
2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: dXtHbUqNN6SFE0un2u0qgf5dfnIIqnaTs+O/fGi0HPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:24:5f:6f:1f:8c:29:d1:54:7d:dc:88:8d:eb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Validity
Not Before: Jun 30 14:01:00 2025 GMT
Not After : Jul 1 14:01:00 2025 GMT
Subject: CN=bb35f4bbeae074b704c6abcb1fea14609a6a2baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:d4:41:ef:e5:3a:39:3f:c4:b6:9c:65:e5:
be:52:25:f8:e9:ff:6f:0e:39:01:56:38:30:75:ba:
56:5d:5d:24:64:13:b8:f7:ed:8d:58:d3:ed:f6:a6:
f6:88:27:ab:d4:f6:f6:0f:b4:7d:20:85:17:ce:3f:
0e:2e:e1:3f:2a:e9:bf:78:0e:29:45:4a:e1:dc:9b:
2a:58:c7:6e:48:03:26:dd:e4:97:a6:65:bc:a4:5e:
32:cc:2f:99:9f:66:fb:ea:a4:63:e3:14:72:59:0c:
7f:c4:3c:95:9a:b6:ec:fd:3e:96:05:df:d9:c7:0c:
6b:89:35:39:5f:2f:27:7a:53:f2:12:bc:5d:d1:a0:
3b:ec:1b:dc:27:08:16:11:f6:f2:19:fd:ee:64:6a:
99:f7:28:e3:81:3c:78:58:c2:9a:88:0c:f5:42:32:
95:fd:4c:0d:be:3a:6f:6a:09:05:89:5e:23:10:57:
33:4f:b2:d9:ba:37:18:e5:c7:db:4a:3c:33:96:ee:
72:ff:df:fc:e0:ee:74:67:f7:30:63:3e:cb:eb:f1:
4b:e3:8e:b5:b7:40:22:4f:eb:6b:9b:a9:85:c5:d3:
46:e5:f5:7e:61:90:77:d7:f2:a4:3f:07:40:63:86:
e0:cc:1d:ab:5f:0a:ee:41:90:1a:26:ff:a7:f9:51:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:35:F4:BB:EA:E0:74:B7:04:C6:AB:CB:1F:EA:14:60:9A:6A:2B:AA
X509v3 Authority Key Identifier:
keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:78:06:49:9d:98:5f:0c:a1:c1:ed:47:30:d1:6e:ea:c4:aa:
35:94:6e:4f:5f:e8:b9:94:3f:b4:23:9a:7f:fd:06:9c:5e:61:
06:4d:1b:94:7e:8c:49:83:27:ea:dd:f4:55:bb:d6:e9:be:82:
18:af:52:8c:0b:8c:f7:1f:f4:d8:cf:4e:39:71:ca:59:fe:f3:
ec:a1:1b:ad:1c:7a:ea:46:11:00:19:4a:1d:fe:0e:a7:19:46:
9c:27:53:0d:35:ee:66:42:08:ff:9d:65:3a:84:44:b1:c6:62:
41:6e:f7:25:3c:be:17:17:be:9f:3e:fa:61:23:0b:52:50:1c:
2f:22:31:47:52:32:b9:4a:fc:4a:0d:6b:f0:56:2f:72:7b:25:
3d:67:f6:4d:de:fd:ea:6a:a9:fc:de:0e:a4:86:ed:1c:ff:0c:
53:48:53:ba:f7:63:3e:48:9a:60:f6:15:80:f6:09:6d:5c:af:
d0:5f:c0:79:08:8f:0e:9a:ba:f7:f1:33:10:d2:c2:d1:21:d8:
31:19:3a:cd:83:3f:af:44:6e:6c:48:39:ad:14:7f:25:c5:35:
eb:0c:70:8b:e6:e6:00:f7:16:15:5d:ee:79:bc:d4:86:e9:d8:
a4:4d:0a:b8:d5:8a:4d:5b:4c:55:95:8d:e4:6c:95:f5:97:04:
be:ac:29:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:51:02 2025 by rpki-client