Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
File: zsY7h6iuwJPb5H3MqShg6oQSKOA.mft (raw, json)
Hash identifier: 3ZbXPc7uWi/iAMGFZizXCfLb6hRIyZeWtjetcJflTNU=
Subject key identifier: 3C:FB:A9:11:55:12:7B:6E:93:76:69:95:D3:0D:7D:AA:28:CE:47:02
Authority key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
Certificate issuer: /CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Certificate serial: 0197B9D88B5C83293A4224F8F2EA897F8EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
Manifest number: 0ABF
Signing time: Sun 29 Jun 2025 04:01:05 +0000
Manifest this update: Sun 29 Jun 2025 04:01:05 +0000
Manifest next update: Mon 30 Jun 2025 04:01:05 +0000
Files and hashes: 1: oDVjxYPm7vPq-9FQVAv-wdPcmhE.roa (hash: SVNTWU/SFE8BeAZ7Bb0M+S0ysWhdx0WLLM1QECYtWDg=)
2: zsY7h6iuwJPb5H3MqShg6oQSKOA.crl (hash: 1aIeOOKE83WFpKCjv66sZ0AzbqAYfl+eL8fJiHV9pQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:8b:5c:83:29:3a:42:24:f8:f2:ea:89:7f:8e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Validity
Not Before: Jun 29 04:01:05 2025 GMT
Not After : Jun 30 04:01:05 2025 GMT
Subject: CN=3cfba91155127b6e93766995d30d7daa28ce4702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:30:5d:3c:97:c6:2d:a4:b6:74:7e:4e:b0:
2c:a3:1f:cf:44:f2:2e:91:77:7c:f2:81:d3:86:af:
35:c6:1b:a2:61:41:96:4c:74:ee:41:78:65:99:1f:
c8:51:36:17:f5:2a:2a:c4:88:f5:66:f2:43:60:c2:
da:9f:dc:29:63:9c:82:af:53:d1:86:44:1c:af:47:
53:28:58:b0:2c:8f:ab:e8:1a:46:f6:87:88:b0:4f:
1e:69:b1:cd:48:c1:bd:fc:4b:a6:49:f3:84:1d:3a:
fd:b5:b1:e1:60:8c:c2:38:97:6e:72:22:64:d7:2b:
4a:89:32:6c:e1:2d:4e:11:1b:3b:2f:83:a7:1e:fb:
ce:16:48:d0:e8:c8:48:71:2d:fd:92:e7:c4:34:66:
c3:ee:57:ee:b2:56:ad:bd:48:9d:19:1a:68:9c:ea:
83:5c:4f:1f:02:51:1e:09:11:ce:11:fa:19:dd:7f:
1b:33:79:51:7a:56:39:cc:88:a3:5f:a3:2e:a0:d6:
40:76:91:99:ca:80:d4:c5:80:ff:51:db:6c:f0:0f:
a8:4e:fd:f3:f4:b3:21:bb:76:c5:9a:97:78:af:e1:
c2:a2:e8:a8:96:65:dc:4d:e6:ed:06:f9:08:26:fc:
90:b3:e3:d8:73:41:2b:3d:21:b1:a5:2c:6d:38:f3:
e2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FB:A9:11:55:12:7B:6E:93:76:69:95:D3:0D:7D:AA:28:CE:47:02
X509v3 Authority Key Identifier:
keyid:CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a1:fc:80:e6:81:81:0d:99:79:a0:18:54:2d:96:e4:06:f9:
92:8a:8f:e5:84:2d:ce:9e:6c:86:e2:10:a5:24:90:4f:a3:e4:
a4:9e:1a:47:47:34:99:81:d0:83:fb:cb:b5:53:e5:e5:e8:2d:
ad:a2:83:71:3f:fb:54:8a:08:bb:aa:db:bd:73:9e:b5:28:24:
e7:5b:de:2d:40:3e:f4:96:ad:60:4d:cd:98:9d:b6:55:0a:4c:
fe:5c:fc:22:60:17:f4:e5:ce:9c:10:a2:09:f8:7b:9b:8b:93:
c0:f1:db:1b:17:85:17:18:a2:e0:2a:7c:32:42:3b:f2:78:3e:
6c:49:50:9b:32:f1:ce:8c:a2:29:d5:26:94:c3:c0:2e:ff:14:
c2:fa:9d:f6:8c:c8:e8:55:27:1e:78:cf:49:4e:2a:42:67:78:
ff:54:25:2a:96:3b:2b:62:07:db:fe:5d:f4:08:31:ec:06:5b:
fc:01:65:1d:03:e0:1c:45:30:15:6a:25:b6:fa:e3:11:95:7e:
07:72:01:48:29:02:b4:c0:86:0d:64:11:14:39:0b:f5:2c:b7:
0c:68:b7:1c:45:ec:05:05:42:da:6d:1a:75:66:83:02:36:4b:
00:c1:77:3b:85:bd:ad:a1:3c:d2:32:58:c9:02:0c:0f:a6:a9:
ef:a3:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:12:06 2025 by rpki-client