Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
File: zyww80STxFKhc-TeDEYsg6cRwzg.mft (raw, json)
Hash identifier: /58yiKv+/uYiKUsrA8EhvMDm4EHpvwHirjGJChPc2dE=
Subject key identifier: 4A:55:27:95:90:FF:07:BB:BD:DC:F3:B0:19:75:B3:C5:F1:AA:63:C7
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 0197B74514B12283013D44DA71D66E47B1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
Manifest number: 0A6F
Signing time: Sat 28 Jun 2025 16:00:47 +0000
Manifest this update: Sat 28 Jun 2025 16:00:47 +0000
Manifest next update: Sun 29 Jun 2025 16:00:47 +0000
Files and hashes: 1: Oj0m_8ITZBnb4aEFgYoQp36qZx8.roa (hash: uBJLArWgkSjRK8aGJtgjmrvAPeBkh4zJ1gBYT+tPHh4=)
2: SoEVRIqaPwIGQBCw5SCqT_ArGX0.roa (hash: xcx1cSlLCFDJBjd8JSFFyykHeM6rd2VPa9v4P9cRUKQ=)
3: zyww80STxFKhc-TeDEYsg6cRwzg.crl (hash: uOwAe5q2MAbhMawIJiPCyF57w4kdwV+OBQf55++j+HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:14:b1:22:83:01:3d:44:da:71:d6:6e:47:b1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Jun 28 16:00:47 2025 GMT
Not After : Jun 29 16:00:47 2025 GMT
Subject: CN=4a55279590ff07bbbddcf3b01975b3c5f1aa63c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:20:cb:5b:83:af:1d:d1:c4:61:e9:64:87:64:
e4:c9:93:77:6e:3d:93:3a:f8:2b:47:5c:b2:6c:e8:
8b:36:58:f3:d9:30:3a:d4:45:53:02:6d:e7:7f:c1:
e0:b8:f8:c4:4b:bd:16:86:9a:52:fb:52:19:83:59:
4c:13:16:a2:1f:d6:1a:64:ac:6e:18:d6:9d:29:81:
af:55:e3:bb:8c:d0:6d:1d:34:f0:75:61:af:6b:c0:
43:f5:61:53:83:6d:c5:0c:90:76:3e:c3:ee:70:d5:
c8:d1:0a:bd:2e:ca:2f:e3:3b:b1:fc:19:23:f2:6a:
18:51:1d:04:14:10:22:4c:16:a3:9b:3e:a1:60:f6:
d4:e7:d0:55:13:6e:45:2a:a2:b8:84:56:33:62:da:
e0:5b:cf:e2:2f:6f:5f:b3:5a:0a:38:ac:03:3c:9e:
5d:40:56:68:77:49:7c:5a:ec:58:3e:70:aa:13:18:
70:4f:f4:e2:c6:c5:02:ac:8c:67:61:1b:2e:97:be:
53:dd:a2:ae:49:b3:89:06:89:c1:d5:77:1a:07:07:
22:22:73:40:2d:05:45:b4:0f:42:6d:19:9c:5a:2f:
26:58:81:15:2d:54:a4:d3:48:73:df:19:cd:99:44:
69:f0:48:fa:73:ad:60:e7:76:b1:0b:91:c5:2a:2d:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:55:27:95:90:FF:07:BB:BD:DC:F3:B0:19:75:B3:C5:F1:AA:63:C7
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:24:89:e1:0c:da:54:9e:65:3a:85:1b:25:b8:90:64:66:a6:
a8:b1:30:0a:bf:df:77:8a:a1:24:6f:4c:97:62:13:04:75:8b:
09:40:3b:eb:a8:61:e6:8e:81:1e:af:e5:b0:3c:7b:20:64:bb:
88:98:6d:a5:41:ee:e2:64:f3:dd:17:4c:0d:97:5f:db:5e:f8:
8d:e5:4a:c5:08:0a:ec:ca:44:0d:10:90:ec:5b:24:90:eb:02:
8f:38:09:d2:45:e0:f2:4b:b8:74:8c:9b:9e:ec:b2:ca:d8:c3:
50:ec:27:7b:ad:ce:7b:85:a9:72:2c:c9:8d:1e:a3:66:98:4f:
34:eb:b5:8e:16:c4:97:41:36:4a:26:3b:2d:2e:90:f3:75:db:
b0:a6:f5:ce:06:1a:2f:b8:45:ff:80:59:15:b4:e9:49:7d:30:
e7:92:b9:02:d0:74:39:d2:1c:ed:64:ad:dd:d7:84:01:54:14:
34:76:b2:bf:35:c6:3d:cb:cc:fe:41:cc:9c:b9:c8:ef:68:61:
4f:b3:af:d1:a0:9d:81:2c:87:1a:d9:6b:85:3e:df:e4:5c:1f:
b8:79:83:cf:89:84:0b:28:8d:49:59:87:78:08:fe:92:13:1e:
bb:81:22:7f:25:d0:26:d2:cc:6d:79:a5:54:57:6f:7c:f2:35:
b2:cd:c2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:00 2025 by rpki-client