Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: VGDU+IAZVsBzv5t1Mcfvn3ViaxZmR8mmhSxQO5bmyG4=
Subject key identifier: A0:76:D5:2C:DE:3E:F0:83:85:28:A2:F0:0E:80:DA:B5:EE:5A:9F:3E
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 019747E7CD3E42DF1A9D212533EAB9015D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 0C0B
Signing time: Sat 07 Jun 2025 01:01:03 +0000
Manifest this update: Sat 07 Jun 2025 01:01:03 +0000
Manifest next update: Sun 08 Jun 2025 01:01:03 +0000
Files and hashes: 1: Z8HK86u_Tc2z7y-zidkbMMq2jco.roa (hash: 9ipzU/iNA87vl6CCfbIc4JupJ5JjdKNFibG14Sk7A3Y=)
2: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: Ruqhn8GfoYUDZmQ76B7rSAYLLCBdaqG20MqtJDdJA9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:cd:3e:42:df:1a:9d:21:25:33:ea:b9:01:5d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Jun 7 01:01:03 2025 GMT
Not After : Jun 8 01:01:03 2025 GMT
Subject: CN=a076d52cde3ef0838528a2f00e80dab5ee5a9f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:08:d2:35:20:0d:cf:fa:02:b0:d2:23:d5:45:
bf:b0:37:84:8e:7a:3c:ce:18:db:ed:b7:63:06:31:
1b:04:e4:8e:cc:79:5b:e6:e9:ae:66:bf:e8:9c:b7:
48:9e:7c:e5:7f:3c:a7:bc:01:94:5f:95:19:92:08:
bc:1d:70:c9:e0:73:a7:6a:da:db:0d:cf:f2:ca:b1:
6a:83:c6:6f:39:25:d7:22:01:eb:17:67:11:98:f8:
bf:2c:42:c1:fd:8c:dd:f5:61:cc:09:18:cb:c7:ba:
95:be:38:e0:57:85:1d:ff:c2:49:7c:d2:00:c8:c2:
fd:5d:58:cf:f7:51:a2:e6:2d:4f:4f:49:c0:53:ce:
77:f8:68:47:ac:fa:a5:0d:9b:df:e0:14:a2:06:94:
d5:dc:c0:c6:58:c9:3a:0e:87:a5:0a:f5:eb:b4:7a:
51:f4:3a:28:15:e9:e4:da:de:92:04:5a:c5:0a:0f:
c8:23:33:42:6d:cc:ca:58:f2:fb:3d:2b:26:87:bb:
53:17:ca:b0:05:d4:9e:cf:80:72:87:81:6f:85:a7:
9b:bb:c5:4b:5a:93:e8:2c:09:cd:dc:3a:e5:30:fe:
2b:eb:77:77:75:b4:14:f7:50:6f:25:1a:47:18:87:
24:15:83:a2:4a:bb:7a:96:60:f9:55:64:fc:30:58:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:76:D5:2C:DE:3E:F0:83:85:28:A2:F0:0E:80:DA:B5:EE:5A:9F:3E
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:eb:a2:65:3f:88:b5:72:64:cf:16:a1:ed:e6:a3:f4:b5:fd:
1a:ae:1d:7b:8a:92:20:d0:49:ca:ad:a2:72:22:89:35:f2:37:
9c:c7:83:7c:02:d0:08:ac:90:6b:36:6e:bf:17:60:d9:e5:8a:
37:45:10:40:f9:94:94:bc:8c:3b:af:ee:1d:9e:64:70:75:b8:
57:31:2e:8e:dd:ab:4b:e8:90:3c:cd:aa:dd:a1:dd:a3:46:b3:
0b:a7:cc:85:4e:01:18:b7:09:48:7e:5f:1a:b3:fd:89:83:f8:
15:38:67:ab:f1:cc:f9:33:ff:1e:24:a5:e7:b1:ca:40:2c:3b:
74:e7:f3:70:a0:9e:3d:69:ae:a7:c3:58:c7:69:31:1f:05:c3:
96:6a:af:78:78:96:7a:e6:0c:bd:63:59:d4:f5:af:88:33:e7:
e3:cf:09:6b:9f:e4:99:24:d1:dd:93:49:59:0a:2c:24:16:f6:
0d:11:f2:8b:51:46:b5:6c:0c:42:9d:46:ee:f6:15:46:9f:d7:
84:67:fc:1a:8a:bb:9a:66:c5:1c:6d:a5:84:1c:fd:08:04:2d:
27:a2:75:5e:4a:fc:8c:9f:f6:c7:bb:62:83:56:a2:68:18:13:
6b:1f:74:5a:91:e1:dd:5e:81:92:f2:5b:2b:58:24:43:32:4d:
de:1a:ef:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:08:09 2025 by rpki-client