Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: QYDgXQ2nbBIM2B7hqTvZBrifbG+UzJvCJtO1y3tjVy4=
Subject key identifier: 4A:13:78:FF:89:B0:52:07:2D:3B:1C:9D:00:BC:87:2F:12:7B:B6:D3
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 019748555A5E8463ECE086201927EDA609EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 03:00:42 +0000
Manifest this update: Sat 07 Jun 2025 03:00:42 +0000
Manifest next update: Sun 08 Jun 2025 03:00:42 +0000
Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: yp4KgrjCPbl639FLpgmtbBuHO5aD8+1kYo36jzjJD0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:5a:5e:84:63:ec:e0:86:20:19:27:ed:a6:09:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Jun 7 03:00:42 2025 GMT
Not After : Jun 8 03:00:42 2025 GMT
Subject: CN=4a1378ff89b052072d3b1c9d00bc872f127bb6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:eb:56:82:27:b3:b1:5b:2a:af:40:84:10:
67:83:c4:65:91:8e:44:e1:52:06:d9:11:df:86:9d:
6f:40:c2:c9:a8:e4:c7:38:1a:df:ff:d5:ed:9e:3f:
93:0a:0c:d0:79:96:98:dd:b9:2b:ce:36:07:29:6a:
04:ae:1b:16:d2:a6:b0:78:b6:b0:ff:9f:b9:01:7e:
f6:ca:a6:a2:91:28:15:e1:1b:2e:50:63:00:b1:53:
c2:b7:00:aa:45:11:ca:ae:f6:3c:88:f5:4c:b7:a1:
37:37:bc:ed:cd:4e:c6:01:a0:f3:87:59:d2:6b:b5:
aa:89:d4:d1:b0:fa:16:fe:01:88:70:8b:6f:28:ec:
0f:57:9e:60:bd:1d:75:01:c5:72:66:df:30:47:c8:
21:0e:ee:f9:16:e2:ad:1f:50:a9:0a:f3:e9:c2:bf:
73:a5:93:33:50:7c:55:1f:9d:86:1d:94:f5:bf:5a:
d0:13:dc:e9:6d:6e:41:71:7b:ea:a7:78:13:31:1f:
7f:fb:53:14:98:9b:e4:1b:ab:ff:60:e6:66:7f:b9:
cb:53:2f:84:db:a0:5a:c7:92:5b:81:51:cd:5d:ae:
c4:f2:31:cf:0d:03:91:45:c9:64:b2:31:52:1c:0e:
2a:27:50:b2:9d:a8:6c:55:e1:f5:4f:f0:e3:6e:78:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:78:FF:89:B0:52:07:2D:3B:1C:9D:00:BC:87:2F:12:7B:B6:D3
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:01:53:00:69:ac:3d:d2:63:df:6b:e2:41:59:aa:bf:02:30:
d1:e4:10:df:22:b0:70:93:f2:37:52:60:14:21:29:e8:11:0c:
77:83:e9:a2:0e:04:8b:fe:f5:82:6f:90:f5:77:20:16:9c:6d:
90:32:28:17:f7:e9:90:e0:23:94:69:55:d3:0d:fa:67:a2:50:
67:af:5b:f1:06:1e:a9:29:19:42:c0:11:59:b1:eb:59:b4:65:
5d:d8:3c:a7:7c:12:65:3c:c5:4c:96:10:fe:c4:28:c6:3c:11:
c9:65:74:8a:27:98:9e:d4:b3:2f:0e:d1:7a:d9:17:28:70:f2:
36:5b:a0:35:8e:86:c6:29:44:ff:46:ed:61:6a:a7:34:61:a6:
5a:78:74:49:4f:f1:23:20:38:34:0f:72:19:a2:64:40:79:12:
ec:a7:9c:9a:94:f1:0c:1b:ec:6f:a2:bd:00:8d:63:65:3a:cb:
97:60:ab:b8:e6:ce:f9:8b:78:f5:5f:54:6d:2c:4b:ae:f0:c6:
d4:1e:ed:80:84:47:32:5f:f5:f5:55:21:6b:80:e7:5d:84:e0:
79:c2:04:bd:f2:30:96:5b:c8:30:f0:5f:b5:9a:ec:14:48:2f:
d8:ea:89:52:b7:98:75:2e:b6:68:99:a9:ba:07:8f:4c:6a:29:
f4:26:01:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:27:34 2025 by rpki-client