Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
File: zcmBSoLMto9Rw3v4OubPV4JEyho.mft (raw, json)
Hash identifier: Rsr3fNEIBl5YVoYFUpvnGp1+R1gJoHOeX/oyxEur0N0=
Subject key identifier: 6F:34:64:82:F3:96:DC:00:37:51:4A:08:D2:76:3C:0A:A4:73:95:7E
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 0197B6D7AAB3BED142095FE058C65DF291A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
Manifest number: 14BA
Signing time: Sat 28 Jun 2025 14:01:16 +0000
Manifest this update: Sat 28 Jun 2025 14:01:16 +0000
Manifest next update: Sun 29 Jun 2025 14:01:16 +0000
Files and hashes: 1: LenxSXNvYUG0PNAIsxLHW6t8Gig.roa (hash: 2tRf/A4+PlvxT/fJxe1ZYsaChcE92rdvTlPk4uzM12k=)
2: RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa (hash: Pc/AiM+TyshIYca3WAF87A9bUXB/n7CNYqhspT/vd/c=)
3: zcmBSoLMto9Rw3v4OubPV4JEyho.crl (hash: XqiCLZ38d7ojel0c0gbPQiO4bGy49hJOEM962xgnXKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:aa:b3:be:d1:42:09:5f:e0:58:c6:5d:f2:91:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Jun 28 14:01:16 2025 GMT
Not After : Jun 29 14:01:16 2025 GMT
Subject: CN=6f346482f396dc0037514a08d2763c0aa473957e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:69:2a:e1:71:02:fd:f5:f5:7f:73:65:b8:
3c:cb:f8:9b:f8:60:0a:55:22:e9:12:07:b0:c0:f7:
d6:1b:a5:4c:bf:bd:45:f8:65:ff:30:ce:b8:c8:c7:
9b:a7:fc:ed:f7:91:01:8f:85:00:30:d5:00:94:9c:
78:df:d1:a2:a6:30:d0:dc:44:f5:7f:b6:12:9d:4f:
96:fb:a1:c7:c6:06:5a:6e:a9:bf:2d:b7:57:c2:0c:
cf:dc:f5:d1:90:26:c7:2e:39:74:35:72:26:ef:85:
ef:ac:6f:3e:31:15:91:e4:f5:ed:2a:40:be:95:97:
8a:7c:2e:f9:2d:30:82:78:8f:7a:54:0d:93:dc:1a:
5a:59:44:75:d6:66:c0:eb:32:9d:8c:51:39:cd:3b:
76:2b:e3:90:40:1b:4a:f3:c6:b7:bf:fd:6d:bf:0e:
94:b6:02:d5:aa:4c:1b:2a:fa:69:4a:b6:63:05:a0:
b3:d7:ba:c2:61:b7:e9:d7:ce:cd:76:d7:d4:b1:fd:
f9:b8:04:2b:43:41:7d:87:21:89:f0:ad:cc:1b:dd:
d5:f6:05:13:8a:2a:c6:c6:1e:73:3f:96:a5:f4:72:
fa:d7:ee:c8:49:05:e3:78:b5:61:7d:4d:f3:3d:5e:
04:ca:0d:76:2b:55:ef:f0:10:7d:04:89:b6:03:ea:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:34:64:82:F3:96:DC:00:37:51:4A:08:D2:76:3C:0A:A4:73:95:7E
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:00:b2:fd:bb:70:7a:dd:f7:21:b7:13:61:c1:ea:59:1e:10:
19:5f:2f:66:3f:d4:97:f4:e7:03:76:2e:76:8e:01:22:f6:f1:
ca:ee:f8:0a:ab:72:f3:a0:b0:f2:0a:67:6c:71:48:e0:39:a1:
d7:71:14:04:0e:58:e6:97:9b:9b:fa:96:ac:3c:2b:a7:f1:b5:
d8:75:fd:44:9b:fe:c2:74:c2:d2:f7:cf:dc:68:4d:a2:86:85:
64:e7:28:d1:e1:9a:37:f3:48:66:2f:e4:88:a5:5e:c6:79:ac:
28:20:08:c2:21:70:af:a3:a6:7d:54:a2:59:fb:5c:30:23:e5:
3a:02:a8:18:fa:7b:90:35:a1:03:05:f0:03:68:68:1f:a0:71:
84:54:ea:fe:96:cd:4c:37:20:c6:eb:ed:7b:a3:93:16:ca:3b:
57:6a:80:bc:0b:39:bb:fa:1e:f7:e5:bc:15:95:e1:c0:1d:0c:
87:1f:09:29:b7:bf:2b:cc:06:0b:9d:0b:96:4f:da:1e:95:a8:
e1:b8:10:b3:f4:7d:a7:73:18:26:fe:77:c7:72:79:9e:cf:f7:
8a:dc:22:25:2b:ac:5a:35:6e:52:dd:bb:69:90:2b:2e:bb:a3:
19:1e:50:bb:ff:71:b6:51:ab:60:e2:30:70:61:92:e0:4b:57:
8a:51:6b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:08 2025 by rpki-client