Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
File: zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json)
Hash identifier: Dj/pezA7EBJ2I2z5B0bHoKfi4f3/QP4LI/OZrLCpBMs=
Subject key identifier: B7:66:D1:E9:B4:77:E0:8C:80:E6:82:7A:7D:81:84:08:9C:7C:09:37
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial: 0197C191DDFE21F91DA582D88E84ADF7F33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
Manifest number: 0842
Signing time: Mon 30 Jun 2025 16:00:51 +0000
Manifest this update: Mon 30 Jun 2025 16:00:51 +0000
Manifest next update: Tue 01 Jul 2025 16:00:51 +0000
Files and hashes: 1: ECAqPGx51Z00QIK2nsNsbPmpugU.roa (hash: HZJH2KP+4GUjxS9EOgilXL7MO2BjwBbNTgaJKakCYf0=)
2: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: RPttmc8BqnvNYkECFnKDcwDJowudz8ykpVO4IxNpRrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:91:dd:fe:21:f9:1d:a5:82:d8:8e:84:ad:f7:f3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Validity
Not Before: Jun 30 16:00:51 2025 GMT
Not After : Jul 1 16:00:51 2025 GMT
Subject: CN=b766d1e9b477e08c80e6827a7d8184089c7c0937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:95:78:a6:de:23:37:44:9e:15:25:50:5e:
6f:69:81:b7:38:cb:21:38:2a:61:45:56:f2:f1:6f:
db:3e:a6:c1:0a:d6:25:2d:cc:02:17:4a:33:ec:57:
6c:7f:45:a4:b7:4f:5a:24:8f:d6:4c:0a:f8:ad:e9:
81:52:fa:92:eb:dd:7c:17:0e:bd:3b:a2:0d:6d:67:
78:e6:d2:bc:0a:41:7b:7a:df:ec:c5:5e:15:6f:59:
e9:62:6a:5a:d1:d2:7d:5a:3e:d5:2d:79:86:7f:7f:
da:20:93:ab:ae:de:9e:8e:2e:24:2f:66:d4:7d:9b:
3c:18:0a:0f:3d:43:86:8f:60:9e:28:ee:64:4b:ab:
26:8c:36:f6:5b:68:d6:ee:71:0a:ae:bb:c2:41:62:
ae:4f:62:0d:a2:4f:a6:1a:a7:10:04:43:23:c5:10:
e3:1a:28:7b:71:6f:88:56:ef:a1:dc:c5:03:1e:40:
c8:11:76:83:68:62:7c:27:a1:80:fe:e7:da:99:4a:
b1:5c:ba:f2:6d:e6:e6:a8:4e:ee:da:eb:9e:f3:04:
33:b5:89:b7:45:12:65:61:28:70:38:67:f6:c4:e1:
01:f7:b0:2a:c0:cd:c3:42:bc:9a:a8:e1:67:04:81:
18:00:2e:db:25:de:a6:de:b0:81:83:08:bb:25:b6:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:66:D1:E9:B4:77:E0:8C:80:E6:82:7A:7D:81:84:08:9C:7C:09:37
X509v3 Authority Key Identifier:
keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4f:d3:64:df:30:99:6d:13:6e:61:37:bd:69:13:e9:39:42:
d8:36:e8:68:ea:42:1d:65:d6:a3:09:85:82:6b:94:6f:dd:71:
a3:0b:fd:3d:f4:52:c5:44:22:d5:6e:34:90:69:93:ce:a9:db:
bf:f9:3e:42:a3:55:92:ef:80:e8:c6:99:e5:f6:43:8d:00:95:
0c:d7:c5:5c:c5:6e:36:e1:3a:8b:0d:04:7d:3d:ef:43:ad:61:
28:c0:bb:6c:ae:9e:cb:0e:f8:51:99:51:29:88:93:68:fe:f3:
de:72:60:84:ca:bd:20:2b:2c:40:4a:ea:97:78:11:28:22:8f:
1d:c8:89:37:f2:a6:55:76:42:88:c6:db:5f:6b:23:b9:7c:36:
a4:27:f1:18:0c:9a:6c:a2:ce:df:b9:65:76:c0:fc:2a:3e:e2:
bf:e3:bc:86:50:16:ac:b9:7f:e9:6f:1a:83:44:4c:72:68:0c:
17:53:0a:a1:de:77:7e:73:91:f6:d1:e8:df:54:1c:3e:31:27:
ba:d6:84:67:ec:3d:40:13:5c:bb:84:ab:96:c7:38:a1:f0:59:
dc:48:0d:05:78:8c:38:55:fd:4a:ea:1f:f3:21:93:2b:64:76:
38:09:9f:53:66:9f:e7:82:52:ed:8f:e1:3c:a1:ef:46:b0:1a:
a6:37:f4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:12:31 2025 by rpki-client