Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: ssSBQ5yb7Vmd9lZAtLNgNrOAx4AsRClICRJL67/5la8=
Subject key identifier: 06:3D:1B:A8:2F:69:91:63:62:57:85:41:A2:89:60:2D:51:68:C0:2D
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 019747795AD745F41D89FCDD53D9C14A9779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 02D2
Signing time: Fri 06 Jun 2025 23:00:24 +0000
Manifest this update: Fri 06 Jun 2025 23:00:24 +0000
Manifest next update: Sat 07 Jun 2025 23:00:24 +0000
Files and hashes: 1: 9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa (hash: yFMJTSvXNN5G3iWxcUQycJKuWi+/CwtiHhA9xSKG2JY=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: U0Cq0fXbvTHJBI96sgW9dMcMCTntimUmaLTmmJXS8QE=)
3: uJJnjUiM_NZxiukKj0SMAuEZu9s.roa (hash: rKuDWrBp0PYOBRz7NFxaGHHnL+VoADNHakfLXL6TQaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:5a:d7:45:f4:1d:89:fc:dd:53:d9:c1:4a:97:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Jun 6 23:00:24 2025 GMT
Not After : Jun 7 23:00:24 2025 GMT
Subject: CN=063d1ba82f69916362578541a289602d5168c02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:ae:9d:e7:ee:cb:c9:d9:57:b9:2e:e1:76:
0d:97:bd:94:52:b3:bb:b5:77:ad:c4:b2:29:0a:d0:
ce:1a:d8:fb:2f:57:3d:1f:43:0d:54:9b:44:58:24:
56:02:c4:c3:f8:89:7d:95:1b:0e:39:a2:f1:6a:09:
af:1d:ef:56:5d:ba:10:0d:c3:92:90:13:d7:76:b9:
05:f9:94:d4:14:cc:3a:b4:e1:ed:a1:c0:ea:6f:bb:
da:50:a7:2c:cb:58:07:ac:83:b4:2b:59:fb:27:9a:
07:92:6f:86:35:ac:18:3d:bf:ea:f7:18:43:1e:80:
66:29:20:1d:5c:b9:9f:36:dd:ff:03:7e:78:b5:15:
e2:de:ec:a9:6f:45:e2:98:12:4d:5a:66:a2:e8:c0:
8a:73:43:fa:73:89:c1:55:9b:e6:a8:97:6e:f7:4d:
49:75:66:6c:e8:ee:c0:fe:d8:72:2b:57:f8:53:a1:
0d:2b:a3:ba:2b:8f:6f:30:23:55:95:37:93:0e:07:
1a:74:48:85:d3:8f:71:6b:e3:26:30:9e:d3:e4:8a:
79:d8:f0:6e:fc:c9:52:d1:7f:48:2d:b1:ae:9c:a3:
ee:48:50:a3:1d:19:a7:d7:24:c0:f7:93:91:0f:2a:
30:74:6e:95:57:3f:06:90:57:1e:dd:12:88:46:2f:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3D:1B:A8:2F:69:91:63:62:57:85:41:A2:89:60:2D:51:68:C0:2D
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:73:ba:5c:76:62:ba:9d:06:27:c3:2c:b8:70:0e:8a:6d:e3:
a5:56:a5:e8:80:67:9a:52:59:e1:37:eb:61:2d:41:11:2c:78:
9d:89:b0:ff:c8:8a:fd:b8:55:8d:a4:3e:5c:9b:40:11:c0:6d:
c3:81:ae:e1:35:2b:f3:fc:4b:cc:12:9e:b2:d2:14:f9:ac:0d:
89:71:03:1a:45:ad:80:43:06:29:74:39:b1:ad:50:1f:92:36:
fa:c2:98:31:fd:ea:d5:fa:ec:4c:c9:b4:6f:cd:c3:cc:48:78:
d7:80:2d:49:42:d1:8f:1b:45:88:ab:46:4c:ae:cf:82:37:36:
a9:7b:83:9c:08:55:d3:b2:aa:ef:52:dd:82:6b:de:58:47:62:
54:e5:ce:a5:d6:98:61:27:4d:e0:b0:85:bc:57:5a:f8:68:e6:
e3:ef:18:db:27:e5:a8:31:56:ba:fc:88:d6:c6:9a:e6:40:35:
57:a5:22:0c:f6:57:16:31:09:ad:ea:2f:39:fa:1c:eb:f8:b3:
96:53:fd:48:7b:2e:44:48:24:9a:2f:79:70:20:31:83:13:44:
53:aa:3a:25:dd:cc:a5:16:fe:82:f3:09:8d:f4:e5:17:d6:11:
82:48:19:3b:90:ae:21:d3:44:7a:da:b9:02:26:1b:c3:d0:40:
24:78:c6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:12:12 2025 by rpki-client