Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: lYGEpzWDJ1fs7HLyG78paSSqPygcGRfvZu5qOPZW/q8=
Subject key identifier: 8E:6E:F8:AD:C6:A7:8D:62:F6:53:C4:74:5E:53:09:80:1D:1C:76:36
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 0197B6D740114AE43E2FE34D82981CCD36AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 14:00:49 +0000
Manifest this update: Sat 28 Jun 2025 14:00:49 +0000
Manifest next update: Sun 29 Jun 2025 14:00:49 +0000
Files and hashes: 1: 45oepcPp24ddD7U9F9fgcfRE2_A.roa (hash: JFFqkItzCIGw3eiTO4eyZ8lxk2ns3Bweomn6UBCbaB0=)
2: 6NfPgvm2R-DEhD59RilUaEstXMs.roa (hash: nHYetpjWCpzfXvmA5NqKKNkZO4+XknrY7xhjpxJgzio=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: tuFpuvScOm0qIQTQS+YOjb/agAMUYYimkdeqq+gVa/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:40:11:4a:e4:3e:2f:e3:4d:82:98:1c:cd:36:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Jun 28 14:00:49 2025 GMT
Not After : Jun 29 14:00:49 2025 GMT
Subject: CN=8e6ef8adc6a78d62f653c4745e5309801d1c7636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:22:e4:52:6a:25:7a:4e:fb:a0:18:54:7b:
7f:95:13:56:5c:cb:08:75:12:1f:77:d2:7e:fc:0e:
9e:89:95:7b:77:76:b3:c7:3c:71:12:29:6c:4a:01:
1b:b5:dd:98:01:ee:5c:14:86:4b:62:c6:84:f8:cc:
ba:f8:89:18:c1:48:88:5e:9e:07:2d:31:13:15:cc:
ba:2d:78:09:17:21:c0:cc:dc:19:53:9f:e5:92:5d:
6a:17:3a:c4:78:56:a2:b5:25:55:47:93:8f:bb:3f:
cb:e0:f5:a0:72:82:74:af:22:05:36:41:6f:dd:f0:
71:d5:dc:de:23:25:3f:3d:b0:d5:b5:c3:54:7a:05:
25:d8:f0:26:ed:c6:16:22:34:72:ba:44:9d:3f:67:
45:18:9b:24:7a:89:2e:31:f1:b2:d0:7d:f7:33:74:
e3:dd:3e:39:40:2e:f5:d3:89:e0:f1:cf:e2:8e:6a:
1a:9f:42:7e:57:56:4f:7c:9d:04:9e:20:2d:a4:c0:
c3:49:da:e6:e8:7c:de:91:2b:c1:ac:9b:d9:d4:96:
c6:09:9f:c7:ff:67:1c:c1:a1:cd:5b:50:bd:c7:3c:
56:44:cb:91:a3:3c:54:04:64:7a:a7:24:b2:e3:bc:
8f:3e:06:da:88:1d:d7:28:67:a6:e9:cd:c6:9a:82:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6E:F8:AD:C6:A7:8D:62:F6:53:C4:74:5E:53:09:80:1D:1C:76:36
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a7:09:9d:61:b3:d4:cc:2e:ca:27:9e:92:37:4b:b5:5d:6e:
20:f3:6f:fe:bb:03:43:72:b4:df:d6:74:e5:f4:23:92:73:e8:
4c:16:a8:b3:eb:ec:92:4f:c0:ae:72:c8:69:99:8e:27:21:50:
47:1a:69:c9:0c:00:46:e5:b7:c8:32:e5:01:6e:1a:3e:0b:2b:
4e:0a:d5:9a:a5:cf:aa:74:e8:a4:80:f9:91:1e:09:85:22:b1:
8a:72:69:36:ba:39:d3:7c:bf:af:3c:e7:86:ff:a6:c0:07:8e:
b4:eb:3e:81:82:eb:38:e1:3e:85:60:54:e9:9a:af:99:7f:30:
50:e0:87:78:1a:1a:b7:a4:b7:a9:f6:8c:c3:a0:03:25:68:df:
fc:96:dc:2a:29:84:64:04:23:fb:a8:93:6a:90:6c:44:93:79:
e0:93:fc:ac:5c:3c:92:ed:e3:7a:2c:86:5f:d4:18:a3:52:80:
9d:b7:90:e2:25:9f:a8:25:6c:b1:95:61:20:86:35:8b:3c:91:
f9:b1:95:8d:b5:48:74:1f:fc:9b:c2:80:18:14:00:fe:e1:d0:
1a:ce:7b:f4:e7:80:1d:00:22:20:f3:4e:8b:56:a7:3a:06:c5:
59:75:d2:7a:3d:1b:e9:82:84:03:42:38:5e:93:25:a6:cf:26:
67:92:86:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:27 2025 by rpki-client