Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: CU1mCsRFwzF7W57h4XCT6b5ZBrTYS2xgaLULvK6C4k4=
Subject key identifier: 11:A1:D0:1E:5B:B3:A1:1A:33:57:5A:7F:F7:AC:9E:11:62:CC:61:3A
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 01974B1F2E923871D615EBC1D8B7865CF62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 03DC
Signing time: Sat 07 Jun 2025 16:00:24 +0000
Manifest this update: Sat 07 Jun 2025 16:00:24 +0000
Manifest next update: Sun 08 Jun 2025 16:00:24 +0000
Files and hashes: 1: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: 6NcDrL9wHanX82KIKtrpq9p6s04JnDSClyEe4W9SPLo=)
2: diLkZSNmSkA_P0E8XAQuJwLRalg.roa (hash: vX3W6kxo/WtwtkGg1PtHgNO/NmZd0a0bM+F9+jjmaok=)
3: hy_b_CLF0gjwTvb480me2nPqxL8.roa (hash: EAu5vgl/03EK2B5mmRo4ew+mHmc1IziDDQ2bL2kVt9M=)
4: uY__ejrV3u-AYFNveYDrJ-C2JUI.roa (hash: emJilGek+vVhrXzYGkdx6N/7HgCKTKlozt7sgU5B478=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:2e:92:38:71:d6:15:eb:c1:d8:b7:86:5c:f6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Jun 7 16:00:24 2025 GMT
Not After : Jun 8 16:00:24 2025 GMT
Subject: CN=11a1d01e5bb3a11a33575a7ff7ac9e1162cc613a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d1:60:c7:b1:08:eb:1d:cc:ac:fb:1f:57:e4:
c1:0d:e9:70:68:b0:21:ee:8f:db:72:24:24:cf:5e:
84:22:8d:c2:b7:17:03:59:10:94:30:37:93:09:78:
54:b1:9d:07:fa:3f:90:fa:d6:7d:8e:20:0b:e8:6b:
a6:25:3e:c0:06:e3:20:ea:d2:af:0a:3f:18:e2:c0:
34:5f:83:f9:8a:be:47:c6:9f:58:a4:2d:14:88:8f:
ba:5f:7c:28:a2:e8:8c:ed:6e:0f:72:d0:3f:e2:3a:
31:33:31:f9:c5:20:8e:61:80:0b:8e:a5:da:9a:7d:
1a:cb:48:12:e2:07:a5:55:5e:91:51:d6:1f:4c:c1:
3c:ce:4a:8b:0f:19:bc:fe:55:80:5f:e5:bb:09:25:
f2:a9:a6:57:09:66:1d:20:4d:a4:ba:86:c8:7a:0c:
16:59:c1:00:e7:36:68:66:2d:c0:7b:86:ec:45:36:
f3:67:29:a4:ac:e8:64:22:a9:ee:19:9d:04:45:d4:
e2:1c:e6:f1:39:24:57:db:66:44:86:41:06:5e:4d:
22:8e:35:c5:5b:90:ad:35:84:5e:bf:53:1f:26:fc:
96:db:97:2c:31:ce:b3:3c:13:3f:94:17:19:77:55:
bb:fb:b5:aa:fe:7e:65:b5:2c:fc:e6:4e:da:b0:49:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A1:D0:1E:5B:B3:A1:1A:33:57:5A:7F:F7:AC:9E:11:62:CC:61:3A
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2e:ae:d6:68:f8:f8:22:5f:d3:2e:bf:f6:5a:b6:ae:96:57:
2d:d8:ab:52:e6:74:11:d8:0d:8e:2c:09:65:f7:40:86:5a:e3:
f0:0f:27:f9:15:15:9d:82:23:05:67:45:ec:18:55:52:ef:c0:
84:61:60:b0:75:56:92:66:64:ba:15:1c:65:45:bf:2f:04:a1:
1e:74:e3:52:98:7e:7e:5e:fa:6a:46:b5:4c:9e:82:b4:a3:93:
17:43:7c:68:47:5e:42:9c:8f:96:e8:ec:8b:da:3f:8c:f2:73:
8f:34:76:cb:07:a1:9d:57:3b:23:f1:ee:d7:5f:4b:bf:da:99:
6d:c9:4f:46:39:df:0a:7f:79:4b:21:d0:6c:c5:4d:b3:72:57:
10:2a:9e:d7:b6:dd:b6:4f:d4:da:1e:76:4d:7b:3c:c5:f0:09:
32:8a:b4:aa:b5:2b:4b:ae:2f:84:0e:8b:5a:45:20:20:b0:20:
0c:42:8e:5f:6e:d0:1f:0c:b7:cd:a8:a9:8e:ea:55:4f:b6:7b:
a7:9f:d2:fb:c2:93:49:6b:86:11:c7:6e:ec:ba:fb:2e:4e:f0:
cc:37:9d:6f:14:a6:e7:83:31:9d:df:00:ff:1b:eb:e2:48:84:
c7:c3:15:2b:8b:48:3c:71:c2:01:10:81:91:b1:d5:2c:71:0a:
44:09:ac:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:03:13 2025 by rpki-client