Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
File: ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json)
Hash identifier: oh50klpCbnZQFjxzXAxMDrpVMxxr5VIBAxiO+XpITN0=
Subject key identifier: 29:30:04:E1:02:31:64:5E:97:64:B5:24:81:0E:3E:E2:8E:B6:89:11
Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Certificate serial: 0197B70E80646DA864D256A64D96FE30DB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
Manifest number: 0E64
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: WmCvFXCeg0oTa1TckRvrs8RNar8.roa (hash: Mzv2Vj1XxZUvLysQKOIpSBENViQwEO98u/fFHAl/Wq0=)
2: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: l4ZFwDSXGcZAipbgbTCJ0V8zhHckO8/N2HDGxznkDsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:80:64:6d:a8:64:d2:56:a6:4d:96:fe:30:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=293004e10231645e9764b524810e3ee28eb68911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:88:c2:9a:32:b0:eb:e5:52:24:5e:7d:ab:
db:e5:50:2b:99:94:83:91:8c:ac:87:4e:22:41:a8:
cc:23:ef:38:b9:54:a8:da:5d:37:bc:74:ab:47:21:
62:d1:e3:db:7a:e4:7f:48:f7:4b:20:29:e0:14:7a:
6e:fc:a3:5c:14:1d:5a:7a:13:20:cb:a7:fc:1a:ec:
78:d7:b5:46:22:9d:e8:c1:34:6f:78:23:83:71:4a:
96:48:99:d5:14:6c:26:9d:6e:4e:3d:d5:71:81:a3:
ba:19:b0:9a:6d:17:0d:93:40:7c:5d:21:c6:ff:50:
41:fe:36:f7:05:6e:e0:bc:c6:b9:87:2f:8f:1f:ed:
70:7f:ae:72:e1:72:c3:83:86:45:bd:38:04:7a:1a:
e5:2b:c6:3e:08:1a:e6:47:67:5a:db:2b:6f:b4:5f:
a0:31:08:1e:05:a9:55:f3:81:78:04:75:92:24:d2:
5e:50:06:fa:67:13:52:01:d6:94:15:a4:bf:a6:8d:
f7:56:27:95:81:ba:e8:2e:03:75:05:8d:4e:77:65:
03:7b:4a:6d:7a:8c:03:75:25:71:b5:18:4f:7c:40:
18:2f:c0:e3:33:16:23:74:b0:37:41:31:7f:0a:59:
bb:1a:64:c7:31:d5:a9:fe:4f:a2:9e:2b:2b:25:b1:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:30:04:E1:02:31:64:5E:97:64:B5:24:81:0E:3E:E2:8E:B6:89:11
X509v3 Authority Key Identifier:
keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d6:dd:da:8f:86:2b:af:26:cc:cc:32:c4:ad:d9:a6:dd:ad:
12:a8:dd:8f:3e:01:67:db:35:4d:d5:f8:78:54:2d:05:a7:bd:
16:1b:66:e5:f2:f3:46:0b:b5:d8:61:f1:28:b0:17:12:6d:68:
12:d4:87:d7:55:c7:51:c9:2f:8d:66:1b:29:ae:f1:6a:78:f7:
42:ca:6a:50:ed:57:51:b2:01:65:b7:cc:f4:5c:4f:8b:33:b6:
51:0b:c2:a2:1a:68:6c:bb:2d:ff:02:10:50:04:5e:f2:a5:b9:
d5:01:ed:f8:9a:94:6d:ee:42:83:a4:be:2d:64:5c:4c:92:c6:
75:c2:24:c4:c0:b1:b0:5c:cb:27:5c:2a:0d:3d:ab:2b:49:c3:
34:79:3f:59:1c:ec:30:d2:c4:fe:f3:7b:b0:70:26:be:06:54:
5f:75:10:da:03:76:c3:6a:1e:5b:e0:f4:ef:19:f4:58:a4:88:
f7:49:21:41:b3:3e:3d:6d:f6:67:6f:4d:91:21:cf:75:b8:aa:
ad:8c:81:50:47:1b:09:18:31:af:ca:05:37:71:78:e4:a3:de:
58:31:17:c9:01:6b:22:2e:e8:dc:72:fa:69:5a:d8:fa:93:92:
04:9b:f3:d4:ec:42:f5:e4:2a:4d:d6:63:41:b5:21:75:6d:49:
da:21:cf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:31 2025 by rpki-client