Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
File: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft (raw, json)
Hash identifier: GX/lwXIA5KwYHGB3QwDUKvWbD5mTpn3xIAyJ3lhhdgg=
Subject key identifier: D5:B3:E2:61:51:BB:67:7F:4A:DB:79:59:91:EA:65:CB:57:17:DF:1E
Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
Certificate issuer: /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Certificate serial: 01974DE9A0E92D42ED018822DB72C3666FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
Manifest number: 0D82
Signing time: Sun 08 Jun 2025 05:00:45 +0000
Manifest this update: Sun 08 Jun 2025 05:00:45 +0000
Manifest next update: Mon 09 Jun 2025 05:00:45 +0000
Files and hashes: 1: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl (hash: uCW8G5ZWHfJV2Rcuh7RNQl+bJRiRSzozqynLIcQ4sBk=)
2: wkjfrbnsCzTaC-aAcjv50o1HMDE.roa (hash: dQtuR5zZvWV7UZVnWgEUEkCk6dSEncyOV819xoZiAcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:a0:e9:2d:42:ed:01:88:22:db:72:c3:66:6f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Validity
Not Before: Jun 8 05:00:45 2025 GMT
Not After : Jun 9 05:00:45 2025 GMT
Subject: CN=d5b3e26151bb677f4adb795991ea65cb5717df1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:86:e9:bf:b4:4e:2c:8d:93:bd:93:9e:ce:
2e:bb:21:7a:10:98:82:54:5e:b8:50:7e:d8:0f:b7:
fd:92:54:5f:69:1e:f7:e0:3c:e8:7e:02:85:b7:fd:
02:cf:10:5a:b2:25:b3:17:cd:42:30:ee:35:fb:b6:
41:ff:28:3d:38:5c:d0:25:81:59:57:0a:82:1d:4d:
4b:1c:68:e1:36:d9:4c:46:54:45:d3:0b:53:cb:51:
1d:dd:11:a6:14:5a:97:30:f7:7c:8b:c1:a9:94:26:
0d:48:99:a7:80:a0:01:18:c1:2f:5b:05:9d:ca:02:
a6:fe:49:7d:4b:48:05:3d:dd:e5:e5:a9:88:bd:e9:
3f:07:e8:9d:e3:b1:63:35:27:82:1c:18:be:53:f7:
24:72:09:65:8d:7f:ec:c2:1f:45:fd:42:6c:27:1d:
e9:41:c9:72:16:16:1d:04:37:aa:d6:e1:57:1c:d9:
0e:49:99:87:f5:a2:6c:45:58:d1:f6:c4:fc:3f:5d:
d9:7a:36:89:26:3e:40:c6:55:c3:f8:7b:d3:b2:45:
47:6e:b3:da:ed:f9:42:b4:4f:ba:b1:ec:93:90:3f:
bc:6f:e7:d5:b2:e9:30:51:b2:c2:ef:a7:8e:36:40:
fa:ad:72:35:12:ef:1c:6e:fb:c3:5f:e8:d4:30:8c:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B3:E2:61:51:BB:67:7F:4A:DB:79:59:91:EA:65:CB:57:17:DF:1E
X509v3 Authority Key Identifier:
keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bc:a7:17:c2:c7:8c:52:0e:4b:8d:c5:e7:70:84:8f:43:7d:
be:a9:24:19:86:d5:6e:13:32:ad:3f:02:cb:34:f4:93:04:9f:
3e:b2:3d:91:70:29:a8:d0:b0:81:b1:e3:a4:5f:94:cf:e5:da:
b8:ad:1f:54:c5:c6:72:e5:f9:fe:d7:44:1b:c2:45:0f:61:2e:
06:54:f1:df:30:0c:a7:a6:dc:2f:e5:4d:7a:73:f8:91:e4:26:
db:dd:38:37:ad:43:66:47:3c:a2:55:16:11:7b:60:a2:af:9a:
55:b0:d3:1d:d0:05:b3:c5:d4:51:65:f7:0f:9d:06:53:5c:66:
88:53:84:5a:ef:12:c8:d9:44:84:63:2f:b7:13:fa:89:94:5a:
3a:9d:ef:74:c3:00:81:1f:68:75:ab:6b:28:47:6f:26:c7:d5:
71:ee:75:97:7a:2d:c7:fe:6f:62:0f:9b:59:54:3f:4f:d4:ff:
4d:0f:86:62:15:86:fb:70:53:67:01:c6:67:b7:a4:9e:04:f3:
9b:bc:cc:69:80:f6:7a:5d:c8:6d:de:68:37:fa:0e:02:99:c4:
dc:52:2a:19:b9:8b:89:15:17:53:35:57:4c:3e:8d:64:ce:ca:
14:f9:b0:2e:80:00:58:0b:f7:5f:8c:f4:cd:48:f5:07:6b:3d:
34:fc:a9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:53:17 2025 by rpki-client