Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
File: zzaFkhY6Sa04_60dQZp3UrMz2nc.mft (raw, json)
Hash identifier: PD7N2uR0Sudz0KXTwrR5VeWDFUscki+9mn2MN3Ohrgc=
Subject key identifier: 04:3E:AF:5D:DF:D9:23:87:DA:5C:0B:FD:20:32:6A:65:E2:D0:17:FD
Authority key identifier: CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
Certificate issuer: /CN=cf368592163a49ad38ffad1d419a7752b333da77
Certificate serial: 0197B7EAC894175822E23C44FF22A50B9926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
Manifest number: 08EB
Signing time: Sat 28 Jun 2025 19:01:46 +0000
Manifest this update: Sat 28 Jun 2025 19:01:46 +0000
Manifest next update: Sun 29 Jun 2025 19:01:46 +0000
Files and hashes: 1: slxq6aORhvR8ox82bJzLl-kYQrU.roa (hash: ZHj8y1bs7bZjE7NP/f98Eczzt5W05lwyMtCauXhXnlo=)
2: zzaFkhY6Sa04_60dQZp3UrMz2nc.crl (hash: 9mwCG75XBK3pItzlKFDcmclXU0upnxb4ozCWwD04Cvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c8:94:17:58:22:e2:3c:44:ff:22:a5:0b:99:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf368592163a49ad38ffad1d419a7752b333da77
Validity
Not Before: Jun 28 19:01:46 2025 GMT
Not After : Jun 29 19:01:46 2025 GMT
Subject: CN=043eaf5ddfd92387da5c0bfd20326a65e2d017fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:17:7a:29:6e:8d:00:86:f3:a7:c9:97:01:f0:
c1:e1:5b:18:a5:ef:f8:7a:5a:8d:57:6e:1c:87:f4:
a5:77:85:2a:fa:07:25:8c:16:be:49:0e:9f:f2:3e:
d7:a0:bd:a2:5e:7a:3a:e1:70:4f:6b:60:16:cc:7c:
92:c0:b2:4e:d0:89:bf:54:79:7e:55:8f:84:85:0d:
31:54:e2:74:76:64:ac:07:cf:be:8d:13:71:86:c6:
7f:e6:26:36:c3:50:29:32:a2:f6:c7:a9:19:d1:9c:
3c:ef:fc:e8:fc:33:bb:ea:17:17:25:fd:07:9a:db:
7e:d0:db:01:50:b9:15:6d:8a:f2:6d:69:52:21:fb:
ef:dc:3e:81:7e:4d:23:f2:f5:8f:69:f1:9a:bf:a5:
59:df:6e:0a:3f:5a:4f:31:f1:b2:d2:89:74:39:5d:
90:83:4e:55:c9:44:47:3b:9e:c2:a0:a3:c4:19:a4:
fa:60:d3:d7:4f:bc:07:d6:74:ee:ea:9c:17:3b:90:
70:a5:d2:c5:aa:33:bc:37:8c:45:63:ae:3b:e1:e2:
51:dc:ce:a7:2b:9d:95:c1:87:e9:23:6b:a4:db:a7:
74:5f:cb:44:82:2e:d0:d3:2b:f9:d1:da:35:d2:bc:
4a:94:19:e9:bd:7b:da:f3:61:9a:6c:25:70:22:db:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3E:AF:5D:DF:D9:23:87:DA:5C:0B:FD:20:32:6A:65:E2:D0:17:FD
X509v3 Authority Key Identifier:
keyid:CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:26:7e:a6:98:78:44:19:d2:8a:43:93:4f:04:17:de:6f:f8:
6c:6b:d0:20:96:3c:0b:15:43:fa:78:fd:55:95:5a:0d:b8:11:
ee:82:f8:1b:cc:55:eb:34:ad:f3:23:9f:c9:48:bd:0f:b3:bb:
82:41:df:18:a7:e9:25:5b:d9:03:10:21:65:5d:0e:2c:2e:13:
3d:f5:dd:7c:90:93:84:75:48:ca:c9:38:20:9f:d6:1f:4d:65:
fe:4c:1c:36:30:ae:ce:1f:ad:ba:19:de:3a:fc:c6:11:a4:cf:
4e:b8:82:cb:b3:bc:ea:b3:9f:e3:94:03:df:85:2f:9d:04:af:
0d:95:0e:08:fc:e9:f7:6c:ba:10:cb:f2:20:40:81:c5:4d:1b:
d3:5b:d0:47:6a:a7:ce:0a:7a:6a:74:b6:1a:4a:e8:b1:a2:0d:
2c:42:ce:f6:75:14:cd:7f:4f:ca:2f:62:4a:d8:27:0b:2b:2f:
45:43:59:cc:5c:ea:1f:5c:2f:b6:83:3f:b7:49:3a:47:63:7f:
d3:da:4f:49:20:ea:4d:3d:d2:b9:0d:a6:39:ff:5c:b3:c4:36:
e6:11:d3:c9:7c:7d:f7:3f:f8:38:66:c8:85:3d:28:2b:59:a1:
2e:52:31:f6:46:56:b5:ae:e7:41:b9:c6:78:66:27:71:3f:ad:
b9:62:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:51 2025 by rpki-client