Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: n+pHPEEt+JqtTioNrZDZnv8gfA+NpzqA+4eYE9wnl8w=
Subject key identifier: 42:81:AB:17:3B:60:40:7E:49:A2:26:DF:C2:63:C9:63:D5:50:9C:C2
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 01974B5631457F67460C985572B3F2AF1B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 0FF5
Signing time: Sat 07 Jun 2025 17:00:29 +0000
Manifest this update: Sat 07 Jun 2025 17:00:29 +0000
Manifest next update: Sun 08 Jun 2025 17:00:29 +0000
Files and hashes: 1: 0yOggjDqNy10C3OKz3C0rIr3a-c.roa (hash: caWl/Q44QQWpPzxLX9RAZwZuiCmuzzxKu+jqUXyZ8ec=)
2: ifcwYHfmty9P7YlJSIwto5Z8mhc.roa (hash: j3Q6hvt9y1dRnxH4mfVL1HI6Z3oaft4npRVPXBxnB5Y=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: edPXjGCv1fMHdnXuFQxlG/NT1Q2RjmzxvxK9c1N7P/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:31:45:7f:67:46:0c:98:55:72:b3:f2:af:1b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Jun 7 17:00:29 2025 GMT
Not After : Jun 8 17:00:29 2025 GMT
Subject: CN=4281ab173b60407e49a226dfc263c963d5509cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:f1:39:07:fc:86:45:64:ca:83:8c:84:22:
d9:7c:fa:13:0f:76:3c:81:3b:91:c9:76:1e:e1:f7:
ad:c9:ec:8c:6b:c8:ee:fd:77:9c:e8:e2:20:3f:95:
49:d5:ad:5d:df:4b:56:fe:f6:6b:e2:46:7d:f1:2a:
65:3d:e7:0a:73:55:39:79:f5:f6:e5:ae:8f:28:2f:
d6:2e:7b:96:79:ee:09:4c:11:34:fd:e2:85:d9:87:
38:c0:ad:64:20:e3:8a:17:54:a1:4a:d2:b9:ef:4c:
f2:70:64:f0:57:4a:f4:60:84:a9:16:0f:7c:76:10:
1d:49:38:1b:17:95:0e:b0:78:9b:79:44:7a:98:66:
07:4c:21:2e:04:67:f9:72:d4:3a:17:55:80:0f:ee:
c2:e4:38:22:31:a6:44:99:bd:9f:88:14:69:7b:cf:
90:1b:18:d5:34:eb:f3:eb:13:d2:75:da:75:a3:83:
00:a9:e4:05:0a:69:8e:28:3a:8d:f0:1c:4f:75:9d:
3b:ab:af:7f:e7:6d:30:4d:9a:5a:03:b1:6f:c8:e2:
f0:ab:4c:12:28:7c:b7:65:e4:84:3b:ee:b4:13:b8:
12:44:a0:79:7a:14:87:37:8c:05:81:cf:7f:fb:b3:
07:f3:c2:eb:8b:39:b1:9a:ab:cf:78:15:5a:a2:c3:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:81:AB:17:3B:60:40:7E:49:A2:26:DF:C2:63:C9:63:D5:50:9C:C2
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5b:36:94:ff:50:f8:19:bc:38:4a:8b:af:e5:c0:a7:81:63:
2c:c6:71:59:10:2b:04:11:e5:11:b6:15:38:57:c0:80:53:07:
c6:9f:65:23:60:f7:22:ea:da:8f:3f:c0:26:84:55:2c:ea:20:
39:5f:48:c3:5e:7c:70:dc:b2:9c:8f:68:a3:63:25:bd:dc:06:
73:21:3c:c5:a1:b1:00:74:53:32:01:85:c4:32:6b:f5:8f:01:
29:6d:a7:03:c7:d1:8d:97:e2:58:df:40:4c:df:d0:3a:75:6d:
5a:d2:14:57:e6:c9:1a:16:18:96:bd:f3:f8:b2:b3:7d:24:a9:
17:2e:34:98:11:9b:bf:4e:de:4a:53:94:49:6c:7c:37:72:92:
d3:b6:6d:a4:53:1f:3f:ec:ef:de:69:cb:4e:22:7c:e8:a3:74:
36:e7:8e:10:7a:f5:79:e7:e8:45:bf:ee:b2:9c:ad:af:57:58:
47:97:43:66:b1:e5:f5:97:06:8f:27:02:2c:25:6e:c2:c8:21:
fd:cc:67:52:46:f1:cf:ce:b5:05:88:9f:dd:a6:cf:4a:61:d7:
b0:ea:72:f5:45:c6:9d:b4:6d:b7:26:1c:4e:84:f9:74:64:7e:
ea:9c:de:5a:a2:75:da:b4:61:b2:29:7b:65:f5:1e:24:0c:a7:
99:5a:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:43:05 2025 by rpki-client