Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
File: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json)
Hash identifier: c/AnJtc9maQGnlRedY7f/d3tbVsu7wPfLyjrxKMnZM0=
Subject key identifier: EB:DF:68:B6:FA:07:33:5F:97:C8:B0:D4:FE:D9:19:69:5E:12:CE:8F
Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
Certificate issuer: /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Certificate serial: 0197B70E927614DDEE5813EE16EE60B670F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
Manifest number: 0F32
Signing time: Sat 28 Jun 2025 15:01:14 +0000
Manifest this update: Sat 28 Jun 2025 15:01:14 +0000
Manifest next update: Sun 29 Jun 2025 15:01:14 +0000
Files and hashes: 1: rsGdnGFpgH2iITobH0zZzM2Hibw.roa (hash: pbnlIU03Otl/z/Rf4EwmC3o03jvLSqloWpA+ITG+uik=)
2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: RhlOVIvWEA+x6rOqdVNGoZHovBiQjc2wAuSH23YM3Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:92:76:14:dd:ee:58:13:ee:16:ee:60:b6:70:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Validity
Not Before: Jun 28 15:01:14 2025 GMT
Not After : Jun 29 15:01:14 2025 GMT
Subject: CN=ebdf68b6fa07335f97c8b0d4fed919695e12ce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:22:38:2b:39:37:8e:a4:a7:12:22:7e:c9:
85:03:e8:9d:73:d4:96:59:bc:5f:30:df:fa:7c:dd:
4a:74:2d:91:97:e8:a2:dd:32:0a:b4:f5:38:90:7a:
1d:9a:ef:52:d6:79:25:b9:c9:57:5c:3f:50:a7:ec:
02:4b:ad:fb:8f:02:3d:a2:73:6e:13:5b:a4:c6:00:
f8:74:c8:80:d6:a6:e9:a7:fd:06:08:b3:92:b9:dd:
19:2f:10:36:e7:e2:9f:7a:6b:70:90:e5:e1:a1:bf:
2a:ee:c3:5a:11:85:c4:43:5d:d8:bd:48:f6:41:e4:
0d:8d:b6:10:75:74:18:3b:48:4d:2c:68:38:9d:01:
ec:11:40:ec:b9:0d:90:f6:43:4f:43:4b:41:72:5e:
24:a9:07:ff:02:39:1e:26:87:84:ba:b3:1f:5d:21:
69:d4:c5:95:16:12:c6:8e:7c:e4:a3:91:37:68:59:
2f:65:7a:53:d4:ca:fb:8b:e9:3e:60:49:d6:36:c7:
d7:9b:44:8f:55:6c:6d:01:64:5e:47:1b:de:7f:74:
aa:20:fc:00:36:3e:e3:7d:50:29:a7:4b:e8:ed:f2:
2f:b9:84:83:d7:ae:bf:bf:4d:6b:6d:47:c7:af:36:
dd:de:8b:4c:03:e7:18:09:17:80:46:5f:f6:aa:8f:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DF:68:B6:FA:07:33:5F:97:C8:B0:D4:FE:D9:19:69:5E:12:CE:8F
X509v3 Authority Key Identifier:
keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3f:d8:95:cd:20:f5:3e:e7:71:84:11:4c:f0:43:b1:cb:c9:
5f:63:2f:26:3b:a1:a6:7f:02:67:75:2f:62:1b:af:19:cf:a3:
a3:7e:f6:51:42:7d:d0:2a:8f:85:a3:c6:76:bc:be:7a:4c:00:
3d:36:bf:75:e9:08:76:35:83:48:71:13:e1:f6:9c:77:1c:52:
87:55:97:df:a1:72:22:a8:fc:60:5a:b2:db:78:44:79:e2:1c:
03:52:4c:5c:3f:47:c4:04:67:19:2b:a7:b0:c3:49:f7:9c:ff:
9d:4f:05:eb:01:79:a5:51:e7:88:1a:02:91:25:74:a7:d6:5b:
b4:ef:5d:43:5e:b6:a8:81:12:d0:20:6b:bb:a5:22:05:fd:cc:
a2:22:2f:e2:2e:1a:fc:2b:c6:5a:17:ed:16:f5:d1:3d:bb:89:
1e:c2:c2:30:d1:49:d6:54:37:08:c2:53:5d:1e:b3:bd:5c:e4:
49:09:ae:b6:9a:f5:8f:f4:b9:a6:34:61:1d:c0:0d:a7:77:53:
cf:11:66:29:69:4b:92:b1:ed:05:1f:08:31:ad:37:5a:0e:eb:
c4:96:15:9c:d3:03:7d:15:14:39:c1:2b:2c:72:5f:a1:5a:4b:
14:4d:04:f9:3e:48:e8:65:78:5c:37:ad:7e:b5:54:37:bd:23:
f5:f3:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:45 2025 by rpki-client