Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier: jEwWKwbwmL4DjyEmPJ8Po2bYLYpsb5ZKcXgcw9KrgWE=
Subject key identifier: A9:5C:88:F7:7A:88:2A:AF:8F:98:5B:3C:9B:D6:C7:B0:25:73:63:CC
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial: 0197B6A0C1B93797CD989B0EB279A2A47D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number: 0FB0
Signing time: Sat 28 Jun 2025 13:01:18 +0000
Manifest this update: Sat 28 Jun 2025 13:01:18 +0000
Manifest next update: Sun 29 Jun 2025 13:01:18 +0000
Files and hashes: 1: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: RPXKaouBuKpjoAplpCwwVPF9UOpP/8b6wQHXlBfP2CA=)
2: zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa (hash: EgP68fSUBBXlJuUGr4bTlwk3uiBoJBQFQ6/v7VJHcgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c1:b9:37:97:cd:98:9b:0e:b2:79:a2:a4:7d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Validity
Not Before: Jun 28 13:01:18 2025 GMT
Not After : Jun 29 13:01:18 2025 GMT
Subject: CN=a95c88f77a882aaf8f985b3c9bd6c7b0257363cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:5d:62:68:ab:51:f9:f2:35:29:71:85:61:
db:8f:fc:d1:6a:eb:5d:26:20:93:c2:44:26:34:59:
ac:2f:81:fa:27:54:f0:92:55:63:ec:49:16:aa:9b:
a3:0c:30:17:2e:8c:51:86:fd:32:b1:0c:e7:0a:c6:
91:a4:ae:1b:01:ca:4d:30:b1:71:eb:5a:a6:f0:14:
ed:47:6b:bd:b2:5c:56:bb:97:25:14:7f:f5:23:a4:
fa:58:93:08:df:3e:63:6c:b8:d8:57:6a:70:84:6c:
67:20:4f:71:a8:76:ed:c3:aa:7e:ed:f2:c5:a5:a1:
69:2a:77:b1:97:db:5d:76:3a:9b:55:81:f1:14:9e:
f5:56:12:62:43:c2:26:3c:bb:71:6f:f1:39:fd:cf:
59:a1:7f:16:e7:4a:dd:e3:a1:87:ae:10:9b:78:94:
1d:f3:83:92:d2:f4:c0:f7:13:95:cf:b5:7e:e3:43:
31:8a:d3:78:76:2f:d1:6a:64:81:25:47:95:b5:20:
bf:40:ad:c0:ee:b3:d6:f8:15:c0:2a:f5:0f:89:66:
a2:08:90:6f:f7:b0:e5:41:e8:7b:d7:f2:e1:f5:76:
95:7e:34:31:e1:bd:bc:f6:fc:65:fb:2c:41:02:17:
67:ce:22:32:6d:84:6b:46:fd:cd:76:04:f9:d6:d4:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5C:88:F7:7A:88:2A:AF:8F:98:5B:3C:9B:D6:C7:B0:25:73:63:CC
X509v3 Authority Key Identifier:
keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f4:50:62:84:c0:8a:f6:35:c4:98:1d:e1:69:8c:33:55:50:
39:68:b1:1f:f4:5e:0a:62:e3:31:80:3f:b1:14:2e:78:d4:9c:
f5:3c:dc:bf:19:b3:2e:4d:94:88:e9:41:d4:06:95:83:7d:5f:
f1:89:52:65:3b:70:c4:93:e4:2f:32:9a:51:9a:37:b6:bb:64:
31:ff:2b:b2:8a:f4:96:20:d5:65:66:47:8c:67:5c:43:2b:41:
f5:36:9f:7b:7e:51:78:eb:50:9d:4c:27:78:92:df:61:60:0c:
58:24:a6:04:1d:a7:17:28:2e:95:77:2f:ef:7f:71:42:8f:af:
c5:4d:2c:b8:b7:3d:b3:79:f0:7c:dc:e0:82:ec:4c:9d:e1:85:
9f:16:b9:4d:fc:ab:57:98:c9:c7:f9:d9:2c:a0:5f:5c:b2:c3:
4d:94:b4:0b:ec:b9:a3:69:66:27:46:f8:3a:d1:3b:24:5d:75:
90:1d:bb:a4:9c:68:56:73:84:04:d6:8a:a1:02:70:b6:8b:10:
3d:33:ed:f2:3d:cd:37:3a:36:9f:3d:95:d8:cc:22:a8:8e:08:
92:e9:ec:8f:fd:98:c8:ca:a7:b6:c0:02:bf:68:89:a1:9e:41:
ad:ad:e4:46:0c:45:66:46:cb:04:8b:32:a7:f8:5e:1c:a1:88:
9d:72:fb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:02:04 2025 by rpki-client