Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
File: zqedzVo97kUOrz-TFS7W2oBrv3E.mft (raw, json)
Hash identifier: bLHMwOxBQYFmGy4Ppk8hieUi5ipsuZ1r7vzCxh/ZjB0=
Subject key identifier: 68:0E:A6:14:7B:E9:9F:07:F4:0E:7B:4A:64:C7:C5:77:F8:13:1F:88
Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
Certificate issuer: /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Certificate serial: 0197B6D75AE5BBE38E52A24B8146B98B4D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
Manifest number: CE
Signing time: Sat 28 Jun 2025 14:00:56 +0000
Manifest this update: Sat 28 Jun 2025 14:00:56 +0000
Manifest next update: Sun 29 Jun 2025 14:00:56 +0000
Files and hashes: 1: I646M_btsSzN2hgU43In8XScCvM.roa (hash: XbiElIXeBAvzCXqiHxg3yiWmZinPZ2P2LAOYB8cFUtk=)
2: VEDYX_cUfJzMWRyMM4Dauca7wqY.roa (hash: emvPGd/BGNmoaOgiTJawr2YtCEYZXYHWYyhS2hE0sKg=)
3: YSMyo0r9Sisa_qEUD5bNOCn6J7k.roa (hash: 2e6jr3gF4oxshJJOD15Mpry9Shp0v5NKkIGpPv8Ct7k=)
4: lSi0kTGzn2fZQ79DDpFPyNvNhWI.roa (hash: F0jv7qe5DmHgW7kJgMByEcK9/LyeESyPvMnKoboRIjc=)
5: zqedzVo97kUOrz-TFS7W2oBrv3E.crl (hash: fcJZ5x8z5sUC2tUozW/tff5gsYlLkkVWSlo3SvkBBYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:5a:e5:bb:e3:8e:52:a2:4b:81:46:b9:8b:4d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Validity
Not Before: Jun 28 14:00:56 2025 GMT
Not After : Jun 29 14:00:56 2025 GMT
Subject: CN=680ea6147be99f07f40e7b4a64c7c577f8131f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:69:ed:6b:8a:cb:ac:f2:11:d7:a5:39:f7:
db:f0:34:88:60:c4:a3:19:81:c5:c6:74:5a:a6:da:
1b:6e:f9:de:38:d1:87:3e:b7:be:7d:92:f8:ff:a5:
cf:4b:c6:25:c7:9e:02:07:ee:0f:80:98:b1:f1:97:
43:ff:56:30:a3:a5:93:b2:fb:16:4d:d8:4a:bf:37:
80:f9:8a:67:66:b8:74:3a:a3:d6:50:95:78:ed:fd:
14:69:3f:91:78:2b:48:51:62:14:61:cd:70:fe:e2:
f6:9a:03:6e:a2:32:1a:25:81:64:f3:aa:c4:f6:1a:
74:d9:7c:de:6d:29:20:75:52:70:51:ca:ad:20:62:
82:12:1e:df:bc:6a:3a:97:85:00:9e:9a:74:4e:88:
62:c9:72:03:3d:57:dd:55:65:5e:18:f3:d1:43:cb:
71:88:18:0b:08:e0:40:25:c9:f0:c9:d7:2b:d5:8d:
9b:5a:67:39:64:2e:d4:31:af:2d:1f:05:9b:77:41:
ce:3e:2e:c2:20:7f:08:51:73:a9:8f:d3:f5:73:ad:
38:13:ca:09:7e:25:2c:44:a4:8b:6a:c3:c7:29:f4:
94:78:af:bc:3a:a9:14:23:93:58:fe:d8:b5:ba:11:
07:c1:b2:9e:7d:1d:23:f4:d1:0d:6d:02:af:90:d4:
69:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0E:A6:14:7B:E9:9F:07:F4:0E:7B:4A:64:C7:C5:77:F8:13:1F:88
X509v3 Authority Key Identifier:
keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:76:3e:5c:c3:3d:27:8b:a5:83:f6:41:b4:e3:34:e6:df:7f:
40:25:af:67:83:0b:96:72:f0:9a:5d:bb:d6:e8:77:f7:c8:8a:
f3:90:85:bc:55:45:1a:25:0b:5a:ad:3a:ff:7a:16:34:f1:e2:
c1:29:76:45:2a:87:91:b4:73:33:56:4d:31:a0:a6:ac:d9:b2:
98:96:4b:f4:a8:2e:f8:72:07:60:83:4b:2d:cd:8d:31:d0:74:
65:67:74:db:73:af:e3:4b:8b:d2:54:d7:3b:8a:37:e3:a2:45:
62:93:85:b2:51:41:f4:f7:49:f1:f9:3b:8c:8b:03:74:36:33:
e8:64:92:91:92:66:7f:14:cd:0a:1d:c6:c7:fa:d9:62:31:92:
d2:20:4a:e3:18:33:ed:be:9d:ce:5b:c6:20:e5:44:18:f0:50:
16:ce:c6:81:a5:be:03:c7:51:d9:a5:45:3b:69:59:c0:ec:78:
be:40:3b:aa:c6:2d:9a:78:64:7e:a6:44:4c:af:aa:4d:37:87:
0d:65:26:bc:64:2a:f4:e7:c5:96:bb:87:76:60:87:df:6a:83:
3c:a0:c2:64:5d:ad:d8:17:fa:9c:4f:81:64:d2:c3:0d:77:35:
fe:7e:83:1d:ae:75:01:05:1f:93:70:a1:bb:2f:9f:d2:05:7c:
6c:95:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:19 2025 by rpki-client