Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier: ejXqTh5UBembIJtl7ZQqNKikAjy0Lss09hDBA8e3Qj8=
Subject key identifier: 79:C5:1A:98:3A:65:65:B2:F8:98:98:54:DF:02:05:34:2A:3D:59:DC
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial: 01974A7B39E1AFA9DC07BB4E023BF8D32E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number: 0607
Signing time: Sat 07 Jun 2025 13:01:19 +0000
Manifest this update: Sat 07 Jun 2025 13:01:19 +0000
Manifest next update: Sun 08 Jun 2025 13:01:19 +0000
Files and hashes: 1: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: 6HYAEBRFhirpIT2PCsZYVu1DiN8XmukX6SbvdNHcC78=)
2: b1zoobQuYRirw6zOe3ZiWtlB_Fs.roa (hash: yoTkr3Ydr4cxPjwyqyjdE6QfCIuZ05Im31loM47LoN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:39:e1:af:a9:dc:07:bb:4e:02:3b:f8:d3:2e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Validity
Not Before: Jun 7 13:01:19 2025 GMT
Not After : Jun 8 13:01:19 2025 GMT
Subject: CN=79c51a983a6565b2f8989854df0205342a3d59dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:3c:d2:04:5e:43:2f:5e:3b:37:72:a3:fc:
f4:2f:47:b0:0b:00:c3:6a:08:b9:f4:1f:ee:c6:a0:
e9:cc:df:97:c0:e9:c1:8e:1b:f7:08:b1:5d:ea:54:
e8:63:87:ea:3b:fa:9f:01:e6:63:22:2e:22:db:f2:
4a:6e:9b:e7:02:e8:2e:6a:a2:63:d1:31:4a:30:bb:
87:28:08:56:76:4a:bf:9b:27:de:ab:e6:b2:c4:48:
78:dc:3c:55:13:91:1e:6e:3a:ee:9f:8e:b9:68:ff:
0a:da:44:a1:00:95:2f:f4:f0:e0:9f:6e:ba:69:10:
52:8c:09:31:db:09:a8:97:a0:8b:96:8b:be:ea:a5:
02:4b:c5:9d:b4:24:ad:89:ba:d3:85:df:b6:68:f3:
e8:6a:1f:c6:9d:88:c3:63:b0:64:23:ac:af:db:f7:
57:6b:04:16:89:24:6c:e9:3c:d8:f7:9c:52:65:5b:
62:6b:6a:01:94:ef:18:c8:00:77:90:1b:23:d2:43:
16:70:10:90:52:d5:24:39:9e:ee:39:c6:41:9a:e6:
2e:93:c3:04:7e:2e:0f:0b:77:cd:4c:ce:78:fe:68:
3f:92:3c:cd:e4:3e:6b:95:67:e1:a3:17:70:cd:ad:
c4:97:21:be:d8:5b:e7:16:9b:db:b5:00:0a:d7:68:
5f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C5:1A:98:3A:65:65:B2:F8:98:98:54:DF:02:05:34:2A:3D:59:DC
X509v3 Authority Key Identifier:
keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:47:e2:e7:ae:93:e5:eb:85:ce:a1:73:c3:e0:98:68:d0:c1:
65:2f:a2:e8:a8:85:dd:5d:42:c9:11:96:51:fd:a5:aa:59:c8:
96:cd:aa:67:f6:38:ce:07:66:88:18:a5:c6:63:72:c7:da:59:
b1:26:46:c1:93:6b:88:c0:8e:c3:a0:9c:5c:71:6c:d4:7d:07:
63:6d:c5:2d:f9:15:70:f2:5b:33:fc:05:32:c1:e6:9a:d0:0c:
1f:2e:aa:5d:f8:c8:92:ab:a5:4f:c0:da:23:61:41:0a:28:c7:
47:c2:73:6b:50:9b:ee:2d:da:92:07:ef:42:01:08:c1:68:09:
68:a8:10:06:d1:b8:34:20:f4:98:d9:f1:5b:cd:59:aa:7b:3b:
e1:eb:65:b8:87:20:00:78:0f:52:78:bd:05:f8:80:0d:74:85:
49:0c:87:b9:cf:e7:fc:f4:9a:2f:58:45:d9:7c:7a:ef:15:b0:
79:d6:ae:82:7b:07:bf:ae:82:72:dc:bf:ce:15:24:8b:b7:23:
f0:51:2f:83:54:06:b7:0a:03:05:e2:8d:1f:50:66:63:3b:16:
ca:1f:3f:03:da:c7:1e:f6:c6:57:f5:1c:24:27:5b:36:04:fa:
f3:21:2e:15:ee:9d:09:db:a0:09:26:f6:86:b4:9f:c7:a4:3e:
f4:c1:89:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:24 2025 by rpki-client