Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft
File: ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft (raw, json)
Hash identifier: ipP17S7UJQN91MKLb1aF/i9GANXnW4Qzb43CvGSDyLA=
Subject key identifier: 20:1E:0A:7D:E6:2F:B9:B1:32:E4:80:CA:EC:8D:38:13:01:48:88:46
Authority key identifier: 64:C2:49:3E:4C:2E:EA:93:0B:1E:C2:C8:36:3D:2D:1F:FA:E6:E1:7E
Certificate issuer: /CN=64c2493e4c2eea930b1ec2c8363d2d1ffae6e17e
Certificate serial: 0197B77C40E778629C4EF9189A3E3C8222FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMJJPkwu6pMLHsLINj0tH_rm4X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft
Manifest number: 25
Signing time: Sat 28 Jun 2025 17:01:02 +0000
Manifest this update: Sat 28 Jun 2025 17:01:02 +0000
Manifest next update: Sun 29 Jun 2025 17:01:02 +0000
Files and hashes: 1: MckCG4y-wri8O-rhV1d-4APvk7Q.roa (hash: t6aCmEdp+Iv6iGvY/88GuOgzU150j1sRRJp3dvFtQRo=)
2: ZMJJPkwu6pMLHsLINj0tH_rm4X4.crl (hash: QIFLl13PiYy1UwhzIWi6Je+OtB7Z5ATr3/tAFNAP2kA=)
3: wZYr5pA49UEOjk728OoUqLp-LgE.roa (hash: x0qHAy3trHy7B4i8jS/LA3sJJ8rnNp07je101ERYGWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMJJPkwu6pMLHsLINj0tH_rm4X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:40:e7:78:62:9c:4e:f9:18:9a:3e:3c:82:22:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c2493e4c2eea930b1ec2c8363d2d1ffae6e17e
Validity
Not Before: Jun 28 17:01:02 2025 GMT
Not After : Jun 29 17:01:02 2025 GMT
Subject: CN=201e0a7de62fb9b132e480caec8d381301488846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:3e:bd:a9:b6:05:bc:8c:7f:25:f3:f6:f5:
f9:aa:d9:92:d5:07:29:6a:b4:2f:13:6c:09:bc:c4:
3c:68:0f:20:ea:0f:1b:68:ea:2b:e7:1e:6b:a6:80:
87:35:3b:be:aa:47:d1:cc:28:e3:dc:5f:91:64:37:
2d:ca:bf:92:af:70:3c:c7:85:5f:a7:12:60:ce:2e:
71:1d:21:86:d0:d9:06:b1:d7:67:c8:dc:20:fb:01:
f0:97:de:dc:d1:e8:19:b5:ca:1d:34:00:21:0d:25:
84:7c:e4:b7:e7:ab:e0:bf:6a:87:17:54:88:5c:6b:
30:a8:9d:e3:0a:53:c4:f4:32:86:c0:c9:f2:a1:67:
3b:13:af:86:ae:4d:55:d8:d0:60:52:ea:8c:23:09:
e6:fd:21:2c:3b:c2:66:4f:2f:1c:ca:cc:af:b5:3b:
c8:bd:fa:9a:81:a2:38:54:5f:ef:35:85:c2:22:f0:
9b:84:e8:89:e3:04:e0:dc:01:0b:35:c8:7f:e0:54:
90:8a:15:c7:17:db:a2:6f:ab:85:7f:a9:cd:92:9c:
b1:23:17:c5:08:2b:1b:de:e4:53:8c:fa:f6:2d:8f:
10:13:eb:0b:23:41:91:d4:7d:9c:b4:6f:77:75:5d:
37:db:1b:05:77:d6:1b:9e:b5:a8:10:ab:f8:93:82:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1E:0A:7D:E6:2F:B9:B1:32:E4:80:CA:EC:8D:38:13:01:48:88:46
X509v3 Authority Key Identifier:
keyid:64:C2:49:3E:4C:2E:EA:93:0B:1E:C2:C8:36:3D:2D:1F:FA:E6:E1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMJJPkwu6pMLHsLINj0tH_rm4X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2b:fd:1b:3a:1b:a8:e6:88:55:3f:2d:0b:47:6e:16:2a:1c:
86:be:68:97:22:9e:2a:21:44:82:60:f6:c5:9a:3c:4d:2c:89:
ee:10:f8:ea:9b:ec:25:29:fd:62:13:e2:9e:09:e7:bd:92:70:
2b:89:91:d8:b7:df:7f:6e:39:91:80:9d:c4:66:97:c9:b4:28:
5a:3c:b3:b2:96:3d:c3:ac:67:07:a1:af:cd:70:9f:a2:11:a4:
3c:83:f7:2d:b8:6a:33:9b:b1:05:b1:2f:f2:1e:85:0c:65:4a:
b9:96:82:4a:a7:fa:48:d2:3b:68:83:15:9b:a4:e3:f2:bd:2a:
23:55:67:3c:40:3b:e9:09:b6:4f:54:29:02:20:e3:4d:73:58:
e4:65:a8:26:ef:d7:53:ec:cb:d4:f8:42:48:32:67:1e:42:7d:
2d:3e:8c:22:3b:c5:b5:e2:f3:78:dd:6a:fc:8a:99:e5:e6:6c:
c0:a6:d3:b5:bb:80:e6:0c:0a:15:b3:71:a3:a1:d6:1b:a8:55:
d2:b9:1a:a8:e4:df:a2:53:07:06:d2:e2:13:57:5b:e9:b0:d8:
ca:be:34:61:6a:35:8f:5e:e2:9a:f3:00:49:ba:84:f8:46:72:
c9:53:e2:19:39:5c:c2:30:ba:23:1c:b7:23:67:27:e0:ad:25:
47:b0:a4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:56 2025 by rpki-client