Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: Fm+hgjw2kQwpaO5OJeBmG25J4COldaC1aKROBxNy/ZQ=
Subject key identifier: 99:1A:B4:B6:37:57:1D:8A:01:CD:06:53:EB:34:6E:0F:7B:8A:AA:02
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 0197B6A1AFFBAB67F2DA69AD4CA984CFBECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0A1C
Signing time: Sat 28 Jun 2025 13:02:18 +0000
Manifest this update: Sat 28 Jun 2025 13:02:18 +0000
Manifest next update: Sun 29 Jun 2025 13:02:18 +0000
Files and hashes: 1: JZLfCpTMSe09vK_TLbLQFlxw2Ds.roa (hash: oEwUEmn9BEj5nCyDqmNSjb0S6HVplNaKnZXZP0H/66Q=)
2: UojdXawnx16jHvQuUPhyRGr9AUA.roa (hash: Hr78TmcOhe37IFpeiMzuuAac0/dugWioMJ66bJbp/E8=)
3: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: /TYXdxg7p9lQMe58pVfb0Sv8xzpI8p5FHoAKufaeKd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:af:fb:ab:67:f2:da:69:ad:4c:a9:84:cf:be:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Jun 28 13:02:18 2025 GMT
Not After : Jun 29 13:02:18 2025 GMT
Subject: CN=991ab4b637571d8a01cd0653eb346e0f7b8aaa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:64:ef:8c:01:67:23:c6:f0:60:36:95:0f:8c:
99:6e:b6:04:31:f2:73:d8:1a:30:be:40:f8:48:1e:
1b:69:dc:8f:a4:02:7a:6c:c0:50:26:aa:eb:76:6c:
d4:56:bc:f2:8d:b0:23:d2:76:5f:0f:de:64:f1:99:
a7:ec:63:83:31:01:97:d3:94:53:39:6e:34:ff:e4:
d6:a3:bf:cc:a1:a1:ed:3e:ad:bb:8a:8c:39:1a:1b:
13:95:f1:5b:93:14:0f:eb:9e:ba:b0:a2:f0:1e:ef:
52:32:a4:3e:3c:33:4e:5b:1e:92:ab:2f:81:7b:58:
32:58:67:95:91:1a:6b:41:d3:ab:9b:a0:cc:16:0c:
84:6a:bd:ea:49:af:33:93:04:bd:40:99:f4:e3:2a:
8a:69:90:f1:20:66:c2:d0:8f:f7:81:a7:7f:b4:df:
50:c6:48:86:e6:65:07:3c:b8:58:f6:a4:f1:d5:1b:
7e:10:2a:e8:8a:ff:42:37:89:99:8d:4f:cf:19:ba:
c4:38:4d:8c:aa:87:18:e9:ed:3b:7f:6d:f7:ff:7b:
d0:96:2d:f5:86:a5:ed:3b:6c:0b:5a:f4:3c:1c:49:
ac:86:ef:27:c1:92:33:f8:a1:41:34:c6:61:c2:ae:
dc:65:4d:d1:08:b0:d7:87:88:11:37:fb:a1:b3:9a:
65:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1A:B4:B6:37:57:1D:8A:01:CD:06:53:EB:34:6E:0F:7B:8A:AA:02
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:db:35:a5:ca:71:03:fc:13:f7:68:6a:20:8b:bf:4d:c6:ed:
d3:30:ca:be:8a:f6:e8:b0:c4:a5:af:bc:59:b6:de:7a:1e:47:
1b:00:41:5a:5a:f4:8c:0d:0f:ad:54:49:c2:45:ba:c5:5c:35:
a0:06:7c:f2:bc:c1:99:a8:a1:27:2f:a6:a1:0d:22:d3:99:5c:
69:0c:09:96:5b:b3:fe:98:60:3c:13:0f:ec:d5:e3:b5:f4:de:
74:de:9e:2a:d8:4c:17:cf:c5:cc:77:c0:de:ae:38:34:3d:c2:
db:7a:95:ff:e0:3a:19:77:aa:02:15:9d:fe:96:5a:25:74:a9:
d1:a9:b4:87:57:9a:a6:54:4c:64:ec:9c:64:56:5f:c6:cf:f0:
85:2f:22:64:69:4c:61:12:57:78:01:60:16:61:93:6e:bf:a7:
5e:5c:0b:1a:4a:3f:04:4a:72:2d:63:53:51:b8:b9:58:03:03:
6c:75:79:6a:0d:63:db:12:ba:ff:41:87:a6:12:e3:4f:ff:dc:
a6:1c:51:1d:a1:bf:a5:3b:9c:13:ce:df:a0:59:12:7d:df:4f:
1a:ba:47:63:c5:9a:42:c2:ba:6f:91:48:59:37:3a:06:36:cb:
ec:5a:eb:b9:45:b6:d1:4b:2a:17:e4:f5:5a:3f:5a:44:1d:16:
71:7f:f7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:37 2025 by rpki-client