
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: naMOR9lTIy6Vw6oO4+k3kd7aZN6ZhP2DmNiLUOYBB44=
Subject key identifier: 34:D1:1A:E0:FC:65:6B:A3:5A:82:96:87:09:8B:35:BD:A4:5E:88:0D
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 0197B7EA3CB0A998EBE62220D8D03C6CCB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 0EB2
Signing time: Sat 28 Jun 2025 19:01:10 +0000
Manifest this update: Sat 28 Jun 2025 19:01:10 +0000
Manifest next update: Sun 29 Jun 2025 19:01:10 +0000
Files and hashes: 1: iFAQtylr3ZRvM5JOhViQDahNSl8.roa (hash: ziaVf39GfMHlG6F56FK5ey4SYxeBfLmJtFc4nGwT8Lo=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: gJDmwuJSnl5UgbKTcFpN3+4WGPcAreO6BZo91YZ6yZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3c:b0:a9:98:eb:e6:22:20:d8:d0:3c:6c:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Jun 28 19:01:10 2025 GMT
Not After : Jun 29 19:01:10 2025 GMT
Subject: CN=34d11ae0fc656ba35a829687098b35bda45e880d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:09:2e:e0:8f:55:49:b2:eb:4e:fa:88:53:
67:58:8d:78:e6:c4:7c:98:3c:a3:83:4a:ea:14:29:
4f:3e:a9:e8:93:eb:e5:d5:9c:43:e4:96:4f:5f:7c:
53:d8:1a:8c:15:c5:55:a2:4a:df:0b:65:ff:35:ad:
2c:31:b6:26:f7:be:bb:40:f9:e0:b5:4d:fb:66:2d:
5c:f4:bc:b0:1e:a6:33:40:2d:45:39:c3:b7:5e:3d:
49:87:b3:78:84:9a:5a:ed:d3:e6:d7:ee:90:c4:4a:
91:fb:2f:9f:9c:0d:71:60:fb:7b:b0:51:e0:5f:3f:
82:18:b1:95:6b:96:f8:55:be:72:76:45:27:c1:d1:
6b:72:83:a3:a1:bb:63:08:8b:33:b6:b6:71:d0:5e:
f6:5c:6c:39:b8:7d:62:31:e5:37:9a:af:27:8c:24:
66:3f:c1:60:74:62:40:f1:08:d2:7c:73:1c:de:f6:
86:bf:88:db:96:9c:ee:75:3a:a8:d0:68:cb:25:46:
d7:93:51:f7:42:7e:ab:cb:8e:9d:56:ba:b0:60:79:
4f:d2:dd:44:07:72:35:6f:ad:e9:28:3e:89:a4:77:
3e:42:fc:6b:27:3d:91:b4:3b:39:1f:fb:b2:73:c5:
06:f5:08:30:d9:0d:76:a0:0b:e1:1c:57:e6:b9:6c:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D1:1A:E0:FC:65:6B:A3:5A:82:96:87:09:8B:35:BD:A4:5E:88:0D
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:92:ba:98:eb:cd:d4:5f:84:81:a8:2f:30:4e:77:4c:48:52:
f2:c6:fc:b5:34:43:53:74:b3:33:a6:54:e1:7c:d8:64:1c:a0:
4a:92:0e:72:64:f9:cb:bd:91:73:bc:93:60:3f:87:7d:6c:c5:
26:98:38:18:cf:5c:02:0c:53:0c:06:6a:e8:49:81:50:33:26:
45:04:22:0f:9a:3d:0f:d6:6d:00:86:4e:71:8f:d4:d0:9a:51:
0c:a0:72:f5:62:bd:bf:78:5f:d2:36:8a:a8:f8:66:c5:ca:cc:
a5:fb:8c:29:88:e3:f5:0e:c0:59:42:8a:05:f7:b5:50:c4:1a:
6e:ae:0c:f5:25:f7:eb:91:2e:bc:50:ca:8c:43:8b:ec:5e:76:
0a:63:e2:2e:be:9b:fc:cf:a2:fa:e8:e7:7b:b7:6b:0a:6a:bc:
db:7b:f0:39:37:c2:11:3e:15:c6:39:d4:3a:08:0b:08:61:29:
7f:b3:63:45:be:cc:23:0f:74:fe:c5:09:04:df:e0:91:39:1f:
65:52:bd:e3:6e:15:32:63:1a:ce:1e:e3:c4:82:5a:9b:c1:13:
66:56:be:c0:fb:cd:b6:e6:dd:2c:d7:49:f0:55:9a:eb:65:5c:
e1:c1:d7:e2:7f:cb:a0:b2:33:83:d2:e7:0e:5f:7c:2a:65:5c:
c1:8d:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:09 2025 by rpki-client