Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: Uy6e/lMjf8DGBJb9V8Z/0e7AMdNeD/f7WxWqCsNy+mc=
Subject key identifier: 43:24:77:CF:F8:E3:F1:9D:28:AC:3D:9A:BA:FE:A6:95:94:42:68:BF
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 0197470B7B08A3BA0EDC4601264FEF637BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 1510
Signing time: Fri 06 Jun 2025 21:00:24 +0000
Manifest this update: Fri 06 Jun 2025 21:00:24 +0000
Manifest next update: Sat 07 Jun 2025 21:00:24 +0000
Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: qJRYOfvMwGxDNI+zQBX2y6xKmRAQgc7Ilcp1gY/S5eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:7b:08:a3:ba:0e:dc:46:01:26:4f:ef:63:7b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Jun 6 21:00:24 2025 GMT
Not After : Jun 7 21:00:24 2025 GMT
Subject: CN=432477cff8e3f19d28ac3d9abafea695944268bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:5d:54:86:1a:be:6e:7e:2a:e0:c3:00:0d:
a6:05:ec:f8:7e:dc:ab:e0:c3:de:86:a5:b7:c6:63:
3f:dc:85:9d:95:c0:4e:52:cf:9f:16:d8:d3:64:f5:
f2:ad:32:6e:e3:75:18:5d:34:93:df:85:4f:4a:d2:
56:ab:c5:13:68:0a:7d:98:21:c6:43:35:3f:dd:8b:
77:1e:ff:6f:1a:07:93:74:75:36:2e:e4:d1:fd:c0:
59:c7:5d:36:e9:c5:0c:1a:7a:9c:cb:1c:f0:84:6b:
71:29:7f:9a:cd:78:6d:cf:a8:9a:7a:a1:fc:2b:77:
2a:af:26:e7:37:1b:24:9c:66:e4:22:e8:e1:42:01:
42:2c:ee:5a:e9:8f:22:f7:45:eb:69:3a:fb:fe:2c:
6e:3b:c6:f6:9b:e1:08:26:8f:46:23:dc:c1:0d:3d:
42:a1:be:93:b3:a4:6f:2c:29:87:ec:69:89:a6:df:
89:c8:33:7e:4c:a3:a9:25:85:5c:8f:d5:28:4a:d7:
bb:7a:c3:a1:1f:c6:8a:51:40:96:74:55:b6:08:66:
a7:5a:ed:33:29:65:72:dd:66:40:ad:a9:ba:dd:95:
eb:2d:e6:2f:f5:6f:a3:4f:b2:3e:6e:36:e3:89:c7:
82:29:12:bf:8c:cc:83:b0:27:fa:18:46:58:34:f2:
e9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:24:77:CF:F8:E3:F1:9D:28:AC:3D:9A:BA:FE:A6:95:94:42:68:BF
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:2b:50:ac:e5:2d:64:66:13:2a:2f:0e:68:86:95:d6:8c:09:
70:75:a4:a3:e4:c0:dd:90:55:f4:e0:34:13:60:d0:6e:d1:7e:
95:6a:48:7d:36:6d:0c:66:fd:71:7e:ea:b3:1d:fc:a6:b8:fa:
08:72:b9:cf:b9:b1:73:e1:56:0a:bb:64:be:db:af:9e:91:4d:
a1:97:20:e0:e1:89:eb:69:59:fc:8b:0e:66:cd:d3:5c:7e:57:
6e:d2:e5:5b:7b:88:61:27:85:ac:8b:e6:53:46:00:69:9a:2e:
b2:49:04:60:59:e4:be:ea:47:c4:57:b1:62:cf:8c:27:7e:78:
f2:59:20:d9:e1:be:b7:0c:2d:ee:1a:82:49:4d:85:da:59:81:
42:66:19:c6:46:36:fb:6b:27:e7:93:a1:27:71:ab:bf:bd:25:
d5:e0:8a:f2:21:73:4b:89:f9:5d:22:3e:15:78:01:27:6e:e3:
f5:c0:5d:c4:a3:ca:07:90:89:e3:e6:ca:a3:a8:74:3e:3f:71:
4a:ba:2b:fd:c6:4a:f9:30:ee:b8:2d:78:9b:f0:d8:e1:26:ea:
e8:94:73:c8:5b:f7:b9:ef:c9:1a:e5:d9:2d:9d:eb:a1:54:0f:
44:a5:a7:51:70:de:12:24:86:b1:eb:cf:e1:46:30:78:ed:50:
2a:d5:ee:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:30 2025 by rpki-client