Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
File: Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft (raw, json)
Hash identifier: Vv5eg5UU568cNQM8/kvnxekOgiW8/TWcH3U3MLhDCVk=
Subject key identifier: 72:F8:99:24:11:7C:B5:D0:0F:73:6C:9B:D9:4A:D5:3F:2C:CC:47:B1
Authority key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
Certificate issuer: /CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Certificate serial: 01974779BE46D8515150DF3292E3E3D2BD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
Manifest number: 03A0
Signing time: Fri 06 Jun 2025 23:00:50 +0000
Manifest this update: Fri 06 Jun 2025 23:00:50 +0000
Manifest next update: Sat 07 Jun 2025 23:00:50 +0000
Files and hashes: 1: Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl (hash: vknrLYXq3oDPSyXOP6kEys+qrOOVBfZaaKLEktqwJi4=)
2: f6tkx1veLJXtyksaflVzc1YMN2w.roa (hash: WlrwpYaQcrfGXKf9ZwidLgROLAib30SWtSAT3qSkZJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:be:46:d8:51:51:50:df:32:92:e3:e3:d2:bd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Validity
Not Before: Jun 6 23:00:50 2025 GMT
Not After : Jun 7 23:00:50 2025 GMT
Subject: CN=72f89924117cb5d00f736c9bd94ad53f2ccc47b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:c9:3f:b9:e3:e2:bd:77:2a:1f:fe:b9:ba:
38:b6:95:93:9e:30:ef:6d:98:a3:c0:31:3f:90:c2:
51:f9:14:8b:d9:a6:20:1d:60:ce:6a:ce:c7:98:c9:
09:1c:bf:f7:9e:02:4a:f7:85:90:eb:cf:4b:6e:83:
aa:ed:66:91:9e:5d:39:01:b5:f2:99:04:71:c6:20:
f9:6c:13:c9:64:fc:ed:af:08:48:c4:2e:1c:5f:4b:
e9:cb:0a:fc:d6:83:fc:6b:fd:ee:6c:5e:c2:61:e9:
32:b7:bf:5c:01:12:dd:d8:06:f5:88:0f:f0:28:47:
ae:60:2f:c2:9b:bf:1c:14:5a:31:a3:81:99:5d:8d:
3d:b5:93:48:60:8b:b2:f5:c0:e7:13:ef:46:8e:f1:
d3:aa:fe:c8:95:39:8c:b7:3e:a4:e6:b3:70:46:9a:
d7:c1:87:03:65:55:7e:52:dc:0f:b3:98:c7:9a:b7:
c6:90:09:fb:e2:1f:d9:a3:2c:69:2e:de:57:98:71:
c7:31:c1:4f:54:4c:de:1d:06:b3:8a:90:84:a3:05:
23:6b:4b:c2:82:84:c0:76:d0:62:ed:05:48:f5:12:
a9:22:ea:0c:98:fc:46:5c:38:85:de:09:3b:e1:21:
94:d3:b3:96:64:e8:44:a3:d3:b6:c0:f4:27:87:ed:
40:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F8:99:24:11:7C:B5:D0:0F:73:6C:9B:D9:4A:D5:3F:2C:CC:47:B1
X509v3 Authority Key Identifier:
keyid:66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a2:1c:af:9d:00:56:f1:2e:c5:ec:78:00:6e:5d:23:15:5a:
43:70:f5:d0:cc:39:ab:2d:ef:71:f3:d6:ed:8e:92:5e:0a:e6:
1e:39:64:7f:ec:01:ae:75:df:2f:a2:80:ba:bd:14:35:a7:b5:
2a:86:1c:35:a9:c1:2e:a4:c6:cc:17:ae:fd:f9:5a:f9:f2:c7:
96:c5:fb:82:5a:af:53:9c:73:dc:68:9d:e2:79:40:f6:23:a9:
04:0e:22:94:f2:e4:96:b4:7f:95:3a:a6:11:32:83:ca:e0:bc:
ac:9f:de:a4:ec:62:0e:59:ca:98:d2:58:5f:50:c0:d2:f0:19:
f4:b3:8d:1b:8f:f1:d7:9e:99:3a:48:c7:35:23:3c:9f:f6:0f:
93:a0:97:c1:33:8a:3a:b0:07:3e:2d:89:61:2c:63:95:39:ad:
af:d3:2d:d6:df:4d:4b:c4:54:49:8a:6e:83:60:9a:6c:ac:6e:
c3:87:8f:85:5a:3b:b5:ee:7a:b2:51:fb:ba:e0:bc:ef:db:d6:
cd:ef:94:14:a1:28:41:bf:25:6f:d5:bb:4a:3c:ea:5d:78:26:
79:5d:d0:6d:5c:ac:5d:97:dd:ac:ec:9e:36:05:ec:fb:b1:c3:
b4:ac:0c:7c:19:37:6a:33:11:2e:5f:30:24:93:51:83:c5:7d:
30:5a:b8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:51 2025 by rpki-client