Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
File: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft (raw, json)
Hash identifier: nfxCrbFUdgMjKSt1Y0SO4HJb/xcS0R+OTSzl2oi1qvM=
Subject key identifier: 30:A8:D5:25:5D:70:1F:0C:70:DD:02:96:82:C5:D7:3C:28:6A:0B:6A
Authority key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
Certificate issuer: /CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Certificate serial: 0197B77C19243CB58DAA737E0600903ADF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
Manifest number: 1395
Signing time: Sat 28 Jun 2025 17:00:52 +0000
Manifest this update: Sat 28 Jun 2025 17:00:52 +0000
Manifest next update: Sun 29 Jun 2025 17:00:52 +0000
Files and hashes: 1: CvkJme1LUR6Yylremh6T0ANylCI.roa (hash: 5zy6xol1m9FQbb/9TEgVPc4ZpyQ53XwKiYadQ98VX1U=)
2: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl (hash: UjGmc7CTWfvBzFRINF3uBPeqwRQ9z3OB0XBIccV4J/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:19:24:3c:b5:8d:aa:73:7e:06:00:90:3a:df:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Validity
Not Before: Jun 28 17:00:52 2025 GMT
Not After : Jun 29 17:00:52 2025 GMT
Subject: CN=30a8d5255d701f0c70dd029682c5d73c286a0b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:32:f1:7e:02:5e:20:3b:f6:0b:1e:0a:e2:f9:
20:49:31:9e:5e:ab:7d:e9:b4:4d:4e:cc:fb:a2:53:
ce:83:84:47:27:4e:f1:a2:fd:c5:dd:f3:22:6f:19:
95:2a:fd:e1:fc:58:af:84:b8:54:b1:e0:c9:e3:53:
d5:88:9a:e9:8b:0a:ae:1f:68:de:70:80:c7:a7:8b:
4b:b3:03:26:75:ba:ec:a7:65:d4:36:28:40:82:ba:
fe:55:09:e4:f2:56:f0:be:e7:31:3c:82:e1:34:91:
bd:66:a6:a2:75:b1:2b:cf:ad:69:2c:34:cb:f6:7e:
77:80:96:0a:b4:b8:80:f9:bd:44:c4:28:f5:2d:6c:
02:a4:e1:f6:51:5b:4f:56:24:43:9b:5f:2b:c5:26:
47:de:ab:da:7e:7e:c6:1e:4b:d0:d6:c1:b6:10:6f:
56:a6:9a:7b:c9:0d:ad:cb:9a:5b:50:34:30:6c:f8:
24:8d:46:28:af:f0:38:15:88:77:54:d3:9e:af:06:
ec:32:6c:7b:51:0b:a0:41:b8:a5:0a:6e:12:62:dd:
1e:57:61:11:56:b7:06:d6:1d:54:2d:2f:f3:d0:f3:
3d:c8:e8:bf:55:6f:48:f7:4e:bc:ba:53:b5:8c:55:
af:8a:84:df:49:b2:93:0d:ee:ff:ee:75:79:af:27:
12:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A8:D5:25:5D:70:1F:0C:70:DD:02:96:82:C5:D7:3C:28:6A:0B:6A
X509v3 Authority Key Identifier:
keyid:66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:35:98:80:b6:92:74:6d:0f:30:5d:0a:d3:8f:77:dc:0a:99:
53:01:b8:76:75:4b:0f:17:0f:e2:0e:92:5c:69:45:4b:9f:7a:
5d:64:be:2a:59:16:4b:3d:b4:bf:fd:07:2b:28:19:94:b2:41:
9c:75:43:aa:3e:f9:a7:ab:b9:41:33:a4:ce:5a:af:62:13:20:
8d:1a:1f:5b:98:85:17:c6:85:4b:8c:ae:d7:b5:ee:55:50:58:
2a:ad:df:c4:4c:10:38:1d:5b:24:9d:7f:54:6a:a3:29:32:b6:
f9:c1:67:18:76:4f:2a:ed:69:c9:c3:79:2b:d8:e3:6a:9c:c0:
a2:e0:36:27:27:f0:a9:7c:ad:69:e1:f1:85:b5:98:a9:de:ab:
16:bf:2e:32:d4:18:06:66:41:76:e8:11:1e:aa:8d:e4:5f:56:
62:4a:8b:06:97:34:06:11:c5:15:c9:1c:7a:2d:a9:9a:ff:18:
86:e7:14:b3:31:ec:68:bc:99:07:f5:15:ee:8c:ca:35:19:2d:
ce:b0:4b:7d:d0:cd:48:d4:3b:6e:7b:19:bb:75:2d:46:5c:f1:
0f:6a:95:19:52:d3:83:21:48:ea:38:68:ac:74:75:2d:a0:38:
3a:8f:47:30:f4:c0:09:5c:dc:94:1f:fc:46:ee:5e:03:ef:2b:
f4:b1:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:33 2025 by rpki-client