Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: MSy4T65lyAasCn+hhAQpwkWq2ePbKIgvP3yNAbZ9ZBc=
Subject key identifier: 4D:AF:82:50:AA:24:18:0C:26:A7:15:D7:DE:E2:BA:25:21:49:DB:F8
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 0197D5189250122A10E50EF4F1E5168980F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 0FE3
Signing time: Fri 04 Jul 2025 11:00:46 +0000
Manifest this update: Fri 04 Jul 2025 11:00:46 +0000
Manifest next update: Sat 05 Jul 2025 11:00:46 +0000
Files and hashes: 1: l0ahmTF7VU-jM66pydmyaaFWBpI.roa (hash: kRKJwUHD3kMQk4tSNCj0K9HqnVNFjpJ2azvHqDtCdr0=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: v+/17tmHBxX8S/bdk3Qqo1bg50nD2ysVrPwxLkgTG/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:18:92:50:12:2a:10:e5:0e:f4:f1:e5:16:89:80:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Jul 4 11:00:46 2025 GMT
Not After : Jul 5 11:00:46 2025 GMT
Subject: CN=4daf8250aa24180c26a715d7dee2ba252149dbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:cc:5a:12:6f:eb:b1:2b:40:07:a8:32:e5:
33:76:e6:cb:5b:b6:26:3b:c2:00:a5:34:a6:7b:f6:
b1:c8:e5:19:07:bd:43:c2:27:e0:15:9e:42:60:46:
b7:b2:a8:8e:d8:07:54:25:e2:15:4f:e3:45:51:2b:
10:7f:41:4c:f5:2b:71:5e:3f:24:26:0b:b9:c0:dc:
fe:29:e5:3e:f8:e0:4f:34:9c:9c:f0:c8:bf:ba:89:
29:b4:c1:d1:22:12:c4:73:75:d7:85:9e:3f:58:4f:
e9:ca:d5:22:94:bb:7c:9b:1a:65:63:0f:7f:db:95:
8d:f9:50:28:9c:18:c0:66:87:24:90:fd:e5:09:cc:
b8:3a:5b:e4:14:07:78:47:03:42:3b:b8:89:ed:83:
0a:90:3d:20:11:a0:9d:6a:d4:6e:7a:60:f2:96:68:
3a:fb:a2:fe:75:f3:65:10:1d:38:d9:ba:a4:b3:03:
7c:cc:e1:de:72:0c:45:a4:52:b6:e2:1f:eb:88:3e:
0b:a0:83:42:88:a3:ae:da:ea:65:b8:1b:b5:8f:41:
98:0a:6d:8f:e7:09:cf:1c:31:2b:1c:65:8d:ca:f9:
5e:c0:aa:4c:30:db:f5:9e:d7:21:05:69:b3:7c:b0:
e7:43:70:e2:b4:9f:db:21:a6:00:72:ff:14:dc:fb:
72:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AF:82:50:AA:24:18:0C:26:A7:15:D7:DE:E2:BA:25:21:49:DB:F8
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:80:76:1e:c1:2d:72:c3:1c:d5:43:ed:d3:8a:39:cd:94:6f:
ca:5d:09:e9:b0:94:af:39:34:1f:75:7b:d9:b9:75:cf:a0:e1:
05:2f:d2:ee:b7:6f:70:ed:0d:5f:91:49:05:5e:aa:4d:9b:33:
b1:d0:b5:1f:2d:aa:c5:06:99:12:5e:75:b4:05:04:ae:63:03:
eb:90:ea:20:4b:64:ab:19:fb:c6:32:36:87:3d:2f:15:61:b2:
3f:c9:f3:fc:da:98:5e:38:a7:07:89:cb:d1:ac:6a:f2:48:b5:
20:94:ba:21:51:f9:0e:95:81:77:68:79:47:ff:26:7c:4e:c4:
41:b4:d4:8d:a2:bb:db:d2:00:9f:8b:b6:ac:c8:6f:c9:71:b0:
c9:5b:f8:58:67:ed:1d:04:47:a2:62:31:9d:bf:e3:f7:e5:bd:
6b:7c:b7:2d:39:da:38:2f:83:68:27:6c:99:f8:56:db:4d:f1:
15:25:b6:44:ae:03:b2:9c:ae:88:5a:3e:97:ff:87:96:5e:fb:
b5:72:ac:d5:55:15:bf:28:8c:9e:ec:52:dc:b8:f7:1e:0f:90:
f4:ab:96:52:41:58:b6:de:f4:76:19:2a:50:34:39:8f:94:c9:
c8:7a:e9:12:ab:4e:6e:59:5f:0b:15:aa:14:31:bc:52:8a:f1:
e5:e3:ac:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:45:32 2025 by rpki-client