Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: GKuxKaiUBsCW13K4jJpMmLPpA+840jXxvy14clzHGck=
Subject key identifier: 9D:FA:DF:57:9C:C6:C4:CB:36:BC:8E:8A:83:94:C3:44:D1:40:91:05
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 0197B820F9107AA3528D9C90FCD8FC3A7603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 08F8
Signing time: Sat 28 Jun 2025 20:00:58 +0000
Manifest this update: Sat 28 Jun 2025 20:00:58 +0000
Manifest next update: Sun 29 Jun 2025 20:00:58 +0000
Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: 5Rkyh4HUjAm4ZnALmwJJOvfT3NJwZBSjiZVWDFvCGoA=)
2: iZsQcVJmfkhAcYH19cli-30jJSk.roa (hash: 5op4VZIOL+EirxQSg7kSyPAbPkqJzG43PAru2qFB904=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f9:10:7a:a3:52:8d:9c:90:fc:d8:fc:3a:76:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Jun 28 20:00:58 2025 GMT
Not After : Jun 29 20:00:58 2025 GMT
Subject: CN=9dfadf579cc6c4cb36bc8e8a8394c344d1409105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:df:ea:7c:02:f1:46:c9:14:c8:37:14:ac:6f:
00:a8:de:b4:b3:f7:4c:3f:2d:13:b0:11:38:b1:6a:
76:dd:4b:8b:12:bc:24:7c:11:7f:34:90:34:18:64:
52:13:ee:dc:b8:81:d7:2c:b2:8d:00:e2:c6:e8:86:
8b:35:ff:b6:84:43:04:bb:84:43:72:34:20:3f:42:
3b:fa:7f:1c:a7:d1:9e:51:30:b4:56:07:0a:43:72:
58:32:ab:de:25:c2:d1:37:81:0a:f9:68:19:bf:98:
8d:1e:b8:cb:0c:20:6d:72:ad:8f:3b:57:67:a7:fb:
a3:03:00:ea:40:59:ee:80:3d:6b:7f:2a:00:92:9c:
54:21:40:6f:bd:10:b1:dd:d2:94:8b:aa:13:59:f8:
dd:44:b0:f4:76:7e:90:ba:86:9d:75:c7:64:be:47:
69:23:56:88:b3:25:e1:b5:6b:84:26:74:3c:00:c4:
b8:ef:a0:6a:e8:1a:f4:c2:f0:e6:8d:03:4a:cc:0b:
f2:9a:8d:8d:de:47:b2:bd:03:f7:4f:a4:fe:48:28:
00:c3:d2:46:5a:67:af:6f:1f:14:4e:2a:ef:5c:e4:
97:57:f7:80:3e:67:97:87:89:5f:70:f9:41:93:04:
fd:68:1e:38:2e:07:8b:3d:de:90:d1:1e:79:ea:a5:
6a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FA:DF:57:9C:C6:C4:CB:36:BC:8E:8A:83:94:C3:44:D1:40:91:05
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1f:04:8d:fe:27:1f:96:47:35:ff:30:3b:8c:d7:36:8c:4f:
60:d4:6a:c8:83:12:c8:57:66:00:6e:d3:31:fe:ed:c7:06:1e:
9e:2e:f8:08:11:21:db:d3:b1:f9:ac:07:c0:09:a7:38:94:3d:
32:ff:57:b6:5b:17:57:98:58:60:15:e6:b7:f5:b9:9f:ed:12:
b4:da:d5:3e:9c:48:41:0b:63:63:e8:7b:88:ab:0e:48:76:76:
4c:28:ec:98:36:66:5a:8f:12:b4:d1:74:c4:78:bf:29:29:e7:
09:5f:dc:77:11:fa:0e:8f:ec:81:57:82:c6:a1:10:f0:ab:7c:
e5:83:d3:b2:b3:f2:75:73:9e:a2:bc:46:96:e8:a4:4f:bc:b4:
e2:68:d1:b6:ef:2b:ae:63:89:e9:3f:71:6d:d0:a5:a4:b5:15:
bc:79:3f:8b:cd:f8:bb:ce:56:e3:fd:88:cd:5c:9d:f1:da:90:
76:5d:0d:64:1b:ec:96:c3:d7:8f:02:0d:fa:99:4c:7a:f4:3d:
8e:7e:56:ee:ec:9f:f3:37:ed:aa:c1:58:a1:23:14:09:9f:00:
49:da:a8:a4:5b:af:51:05:9e:17:bc:f4:fc:0e:3d:71:87:c7:
48:f5:65:fa:9a:3a:2d:3b:54:c0:1e:fb:e4:37:c4:60:05:13:
6b:15:31:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:44 2025 by rpki-client