Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
File: zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json)
Hash identifier: RdNyp9FU31DNosGXGgSJmALuZ1QCWqQDNOcGiVQAOUI=
Subject key identifier: 50:60:01:4A:BD:BE:DD:3D:FE:15:76:26:15:53:E9:88:BD:C1:34:8D
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial: 0197B8C616E86B7AFBA8C55613DAE4B302EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
Manifest number: 0B05
Signing time: Sat 28 Jun 2025 23:01:19 +0000
Manifest this update: Sat 28 Jun 2025 23:01:19 +0000
Manifest next update: Sun 29 Jun 2025 23:01:19 +0000
Files and hashes: 1: 0CX7t2odLe1-aKNEQm4nhIdzG64.roa (hash: uGt7n5BK6nTit2QXoLjymR88j/L4jwCXMbpw123vP/Q=)
2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: z/osZLejdtClVq+dJuqx/5J2NfK/NhE4+SjEOEyNk6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:16:e8:6b:7a:fb:a8:c5:56:13:da:e4:b3:02:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Validity
Not Before: Jun 28 23:01:19 2025 GMT
Not After : Jun 29 23:01:19 2025 GMT
Subject: CN=5060014abdbedd3dfe1576261553e988bdc1348d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:7d:33:5c:98:8f:c7:81:9f:e9:eb:f9:86:
20:1c:74:a1:4c:a9:13:78:7b:78:f7:0a:ff:cb:ae:
a1:c9:13:fb:eb:29:04:51:95:af:d8:16:11:b8:fe:
9a:af:45:ca:23:38:9e:26:66:0b:4f:c6:a3:a7:d4:
44:7d:7b:42:54:ab:02:93:d1:4d:8a:eb:74:fe:d5:
9f:e8:7a:6a:51:2e:40:61:66:0c:9e:85:30:2a:ea:
7d:51:91:f3:54:e7:32:cc:7b:7f:06:e0:12:cf:82:
f1:78:7f:8a:8d:cb:92:fa:b8:ed:7a:78:5e:11:a2:
50:10:5c:b6:d3:fc:9d:f7:3b:00:7c:c3:34:f4:9a:
9e:53:1c:b7:f8:fb:72:44:3b:46:37:1d:ad:6c:f6:
f9:f1:d0:d7:13:ec:91:fe:4e:27:6b:6e:85:8e:8d:
3c:e5:c6:30:46:d4:e1:44:65:fc:43:f3:cc:ac:a5:
83:eb:8d:38:01:37:4b:69:2b:77:27:2a:3e:2a:cb:
d6:42:31:90:a8:53:87:bf:4d:37:30:df:d5:d4:4a:
74:fd:8f:be:b4:7f:5f:25:45:62:15:d3:66:7d:3f:
3d:7e:15:76:85:f8:ce:6e:c6:14:c8:b6:ee:af:78:
cc:83:3d:77:ee:c7:4a:8c:eb:eb:2c:ec:06:db:a8:
3f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:60:01:4A:BD:BE:DD:3D:FE:15:76:26:15:53:E9:88:BD:C1:34:8D
X509v3 Authority Key Identifier:
keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:86:b0:14:fe:e4:c7:8b:99:80:be:84:a2:41:81:fa:2a:8f:
21:3f:3b:7d:95:8c:a2:8c:2f:1f:7b:4d:cb:82:15:f3:96:51:
c3:b6:c3:3d:4d:8a:37:21:23:23:2c:5e:1a:04:c9:b6:20:1c:
96:7c:32:a8:84:29:b4:4a:c3:60:44:23:c7:60:82:ef:8b:2b:
a4:eb:b6:49:c8:ef:6c:f8:7a:83:f4:d6:2f:a4:14:23:f0:07:
a2:18:82:f2:72:96:8b:e0:e0:b4:3a:78:8b:7f:85:ed:b8:dd:
01:89:c4:9a:73:f5:07:75:85:ff:73:51:2b:da:52:f7:0d:dc:
0f:68:7f:ab:d2:00:44:2c:a1:10:19:b3:08:29:78:ab:96:1b:
93:c2:9f:66:cb:e3:c2:2e:e2:2d:77:98:51:51:ea:b4:89:b0:
23:c2:33:be:0d:6c:85:93:d1:6a:2d:29:8d:6b:37:99:c4:b6:
13:8e:34:89:26:da:5d:74:e6:84:e1:22:3c:dc:4f:c6:8e:29:
29:c0:c0:db:55:59:75:89:cb:94:dd:7a:4d:5c:9e:91:e4:c5:
68:71:23:cd:60:e1:fa:75:26:c9:ab:9c:57:e2:03:2d:24:1c:
46:d6:40:75:1a:19:c6:a0:1b:42:56:fd:52:d1:c3:0d:1f:81:
64:b3:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:36:21 2025 by rpki-client