Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: lyo4R1QCvfSVypuO8jPuGdRbVDzcb90ZZOEleMTOloU=
Subject key identifier: 80:D2:9E:E6:B6:63:A5:4D:D4:38:A6:42:E9:95:F4:22:46:CB:FB:F8
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 0197B6D75267B837599A9FBC8D4F19FABCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0C9D
Signing time: Sat 28 Jun 2025 14:00:53 +0000
Manifest this update: Sat 28 Jun 2025 14:00:53 +0000
Manifest next update: Sun 29 Jun 2025 14:00:53 +0000
Files and hashes: 1: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (hash: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=)
2: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (hash: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: ksHoWlZ0gDGFom+WZ2/BMP84eY83B+xYthfYGrv6KNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:52:67:b8:37:59:9a:9f:bc:8d:4f:19:fa:bc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Jun 28 14:00:53 2025 GMT
Not After : Jun 29 14:00:53 2025 GMT
Subject: CN=80d29ee6b663a54dd438a642e995f42246cbfbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:2f:62:49:06:5d:80:a1:41:60:a0:11:f5:
9b:ca:1c:ea:bd:d1:6f:17:54:67:03:44:59:4e:7c:
0a:6d:e1:f2:66:af:77:54:ed:29:be:d0:00:90:53:
57:c3:a6:62:16:c3:18:d7:9b:5e:8d:c1:7f:e5:b3:
a3:78:90:b1:56:5b:0f:0a:44:6a:2b:5a:ea:0d:db:
0a:ce:e2:a9:75:bc:1b:73:e0:b1:6e:7e:f8:88:15:
4e:1d:11:4e:7a:57:37:5e:3b:a2:a5:ad:9d:4f:91:
b1:27:5f:e6:fe:e2:ca:bb:d4:2c:3d:b4:3f:0e:61:
6f:b4:1c:eb:1b:b2:15:15:66:59:78:55:22:a4:a6:
52:9b:59:90:56:36:2f:98:22:26:5c:9b:8d:3f:36:
cf:01:47:67:18:db:63:24:71:d4:9e:60:c1:8c:21:
d4:85:55:f1:13:b2:de:87:9d:6f:f2:ed:46:20:c8:
b2:33:d4:09:05:c2:dc:db:80:1d:d0:0f:0c:5f:88:
e0:ea:2b:80:fe:7b:bd:96:89:f1:20:0d:c9:0b:6c:
ea:a6:0d:08:f7:ba:67:e5:4f:96:ec:85:b9:4a:49:
68:b8:4d:98:ed:b8:44:08:52:12:e9:f1:3e:d2:6c:
99:0b:6f:18:cb:fa:e8:1a:da:ce:ee:78:b4:95:c3:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D2:9E:E6:B6:63:A5:4D:D4:38:A6:42:E9:95:F4:22:46:CB:FB:F8
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:da:c3:8d:cc:55:4d:7f:83:ca:b7:7f:09:db:be:2f:c1:98:
c8:4d:c9:d5:cc:95:69:93:3a:92:59:7d:71:e4:a4:58:24:43:
db:67:12:49:1c:18:8e:06:0d:4c:8c:6f:79:47:43:78:10:cf:
44:42:b2:cc:ac:c0:96:8e:5a:89:7b:41:d8:8a:9d:cb:0e:fb:
e8:19:bf:cd:78:10:6c:cc:4a:30:d4:da:34:ce:57:16:25:b9:
e4:ef:fa:70:03:3c:60:69:98:d6:84:47:9f:76:5c:e4:22:f1:
ca:17:99:44:55:1d:a0:e7:89:8f:f0:fc:ea:0b:24:9e:9c:f4:
33:2e:89:13:d5:94:3c:ee:48:ed:68:2b:d6:fa:73:b5:bd:51:
87:33:f4:5f:ca:6c:ea:d1:ad:5a:5e:b4:e0:5f:71:97:a9:89:
ac:f9:74:2f:4e:73:2c:10:45:cf:85:d7:7d:73:7c:88:94:f0:
89:75:56:33:af:25:a7:7c:89:45:d8:3e:fd:ac:04:45:55:d5:
28:e3:49:88:13:c7:22:0e:83:18:e3:d9:aa:86:1d:65:df:83:
2f:54:5d:e5:ba:62:e4:e2:f7:75:93:2f:ba:e0:e2:19:a3:66:
87:b3:09:d0:54:78:cc:ec:85:b7:c8:dc:6c:e9:94:66:7f:fd:
dc:29:0c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:04 2025 by rpki-client