Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier: 77c35NsW1jMvO8eXDc1Xes6Fk33NiJr4OfR2CL3S2pQ=
Subject key identifier: 46:79:A4:A9:BB:02:FF:28:19:BC:7F:33:F5:87:0C:F8:81:06:12:45
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 0197B6A05B363C59B5AB221EFAE3D178C007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:00:51 +0000
Manifest this update: Sat 28 Jun 2025 13:00:51 +0000
Manifest next update: Sun 29 Jun 2025 13:00:51 +0000
Files and hashes: 1: P2xLD0kn7OL7p2q913Y9a8RAM_8.roa (hash: DQ5vYJ7ltkuV9kkBJCqGKszNfulwSwCWnXFITIg1caY=)
2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: Q49zeKXNEIVeu9mKIMqNN+vZ1t/6giAQYHbSNYd8R3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5b:36:3c:59:b5:ab:22:1e:fa:e3:d1:78:c0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Jun 28 13:00:51 2025 GMT
Not After : Jun 29 13:00:51 2025 GMT
Subject: CN=4679a4a9bb02ff2819bc7f33f5870cf881061245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:e2:89:6d:48:fd:a8:bb:97:10:3d:a7:c2:
53:ae:17:09:88:03:30:e3:26:d8:08:30:a6:59:aa:
1d:0e:e7:65:6d:45:af:34:01:9e:35:30:fb:16:04:
87:09:7f:f2:08:03:84:46:a0:2e:79:ff:83:99:91:
40:95:18:71:a2:60:19:9e:a4:18:dc:ec:2d:df:6b:
f2:61:fc:99:a1:4e:57:db:6d:42:b2:14:2f:c0:9c:
7e:12:10:f0:0d:70:05:8a:59:37:1f:ad:be:15:00:
8c:3d:8f:0d:2c:3c:43:b0:4c:e6:70:23:7f:a4:a3:
ef:d2:da:f5:6b:00:02:a6:85:a2:fc:05:e2:54:90:
7e:57:7f:57:7d:66:e5:57:1b:c8:07:93:f6:57:92:
62:ac:33:59:27:64:5e:5a:4d:f6:1a:be:91:9d:a6:
13:30:0e:70:e9:4e:c1:07:7a:40:2d:59:c9:89:d7:
16:04:e6:fb:54:ad:57:9a:4b:5c:14:6e:c2:42:80:
41:3b:6e:e6:6c:53:ec:89:fa:5d:9a:b2:18:47:8f:
f8:e8:84:1a:2d:d0:b3:f6:2e:2e:79:78:9b:cd:6f:
5e:eb:91:8c:7c:4f:d3:98:ea:91:ea:ae:54:6a:74:
e0:1c:0d:50:aa:cd:d4:61:a7:f2:1c:27:6b:39:8a:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:79:A4:A9:BB:02:FF:28:19:BC:7F:33:F5:87:0C:F8:81:06:12:45
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1a:5e:16:69:c7:ab:77:27:36:38:0c:74:e3:37:15:cb:4e:
91:95:81:07:b5:ca:a3:94:bc:c3:bc:97:8e:05:d9:3e:f1:fb:
9b:8a:c7:c0:1f:19:63:d6:f6:4d:42:a1:f9:a6:8f:e4:ce:e1:
c2:62:6a:74:c6:28:b5:bf:21:15:97:b8:0b:4e:19:35:ce:dd:
67:fd:ca:86:34:f2:9a:b8:9a:b0:38:a2:69:7c:25:9a:b2:b2:
40:99:aa:fa:52:3d:10:80:ac:e2:14:f1:64:66:43:59:d4:e1:
37:fe:e1:60:27:2b:cd:99:18:11:97:58:52:56:bf:51:bb:1b:
74:6b:d5:c3:c6:11:a8:0c:29:c2:af:6e:91:ba:9a:ab:a6:12:
ff:17:89:27:d0:8e:e1:5a:0a:58:42:db:c5:d5:ac:9e:26:57:
6a:e4:ed:9f:48:c9:e6:e0:aa:c4:12:9c:93:ef:ad:3e:11:30:
80:11:c1:81:59:c6:1e:f2:8b:66:d5:e8:e1:d4:c4:31:c1:73:
ec:cf:9c:65:ac:b8:66:9b:de:a4:11:10:21:0c:40:41:87:dc:
25:69:fd:49:2f:66:e4:6e:a1:a3:db:e9:fb:de:df:c1:f8:12:
b8:4c:ad:ce:9c:4e:05:b7:da:ce:94:4c:94:1c:7e:3b:8d:5d:
70:da:bb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:46 2025 by rpki-client