Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: F0wuRBc1lEP1CiIrmbIZSWV4keDb5o2ofy6d2cNtt4A=
Subject key identifier: F7:76:5B:72:62:17:69:27:F2:14:AE:16:5D:B2:0A:19:77:31:7B:4F
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 01973CBED7A9ABA1C0F9DD12A7E7FAE26A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 016C
Signing time: Wed 04 Jun 2025 21:00:29 +0000
Manifest this update: Wed 04 Jun 2025 21:00:29 +0000
Manifest next update: Thu 05 Jun 2025 21:00:29 +0000
Files and hashes: 1: 1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa (hash: tYb6X8EoEPBIOpcCtjg5jZ8qmmvQ3HaHzxmvyPy77Pw=)
2: VzQqyrs-uqIcVAV9Qkei6a34wwc.roa (hash: fyOWws5YA8x0adXdJbC1gsHmLihm5Um5wk56YNm2GDk=)
3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: 3//G9mVddIbhbBTA7F/bK1gJorHTsRL+c5FY7xtO3cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3c:be:d7:a9:ab:a1:c0:f9:dd:12:a7:e7:fa:e2:6a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Jun 4 21:00:29 2025 GMT
Not After : Jun 5 21:00:29 2025 GMT
Subject: CN=f7765b7262176927f214ae165db20a1977317b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:40:85:e2:7e:19:7b:4e:c3:1d:f8:c6:0e:
6f:96:a2:96:90:a5:b7:8a:d0:9c:40:98:af:4d:3b:
b4:21:48:7f:62:22:94:a6:ff:19:b6:1a:38:27:a4:
a9:79:cc:15:16:67:06:d7:d3:38:fd:76:c3:96:a4:
1d:33:d0:b8:2f:81:53:ad:e8:ff:60:4e:f1:be:aa:
64:ef:7b:ee:41:0c:a2:27:bf:70:f9:ab:e7:00:61:
ce:eb:7f:61:ec:9a:43:94:a6:bc:71:df:48:db:18:
d9:95:df:b8:bd:6c:d3:43:5c:d6:ad:d7:c2:b6:c4:
e5:bc:08:71:46:f9:6e:c8:e8:e5:0d:69:17:c8:57:
cc:e7:09:8d:f3:11:f9:e5:e4:35:62:c9:f7:5e:18:
30:61:04:fd:a7:b3:75:39:fb:2d:81:f1:64:54:b8:
a0:54:37:0d:98:14:51:93:ae:16:4d:94:40:55:45:
d5:21:b5:53:f3:a6:03:5e:05:7e:40:ba:bf:23:40:
5a:ab:c1:a2:7a:fd:be:d4:65:6a:56:40:b9:25:13:
cb:2d:c3:1d:45:3e:c8:b9:64:d3:be:8e:be:12:06:
05:2a:33:0f:1f:bb:a4:24:9c:f3:19:f0:22:c8:8d:
9f:ba:10:75:a3:14:91:a1:13:65:35:b3:53:4d:d2:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:76:5B:72:62:17:69:27:F2:14:AE:16:5D:B2:0A:19:77:31:7B:4F
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b8:b7:12:b4:77:7c:ff:7c:3b:99:6b:d4:39:2e:fe:42:e2:
cf:27:dc:2f:81:ef:88:fc:19:33:06:a7:bc:60:5a:7e:3b:c0:
f0:f7:b8:53:5c:07:36:a7:e7:39:7b:2a:e3:98:ca:0b:a9:43:
36:23:9c:6e:eb:5f:73:26:6c:2e:60:b1:72:e1:23:15:5f:5a:
17:8f:0c:69:44:c3:7c:26:a8:8e:d1:4c:40:36:25:c3:ed:e7:
6a:75:e5:5c:33:c0:6f:73:bf:7e:c3:97:88:1d:d2:9e:5f:3d:
6f:44:0b:59:c1:b4:04:5e:98:93:4a:24:a8:f1:31:33:cd:a8:
ba:8a:06:27:f0:3d:5c:32:c9:14:fc:bd:48:62:86:48:1f:1f:
f7:bd:73:38:75:13:e5:af:45:13:42:f7:4e:9e:60:ae:33:77:
7e:f5:99:fd:7b:f0:e6:2a:d3:6f:0d:49:4f:8d:56:af:59:f5:
80:e7:9c:15:94:1e:12:85:28:a7:e8:6a:fe:9d:a6:cb:da:3d:
39:11:67:f1:1b:75:49:ce:9c:a7:b5:36:33:f9:8a:a5:3d:36:
c0:54:67:98:40:be:8b:07:9f:0e:19:59:5b:1f:25:68:af:cd:
b7:e2:85:11:2e:5b:61:e1:bf:94:f5:0e:05:72:8c:29:3d:8d:
43:48:18:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 07:04:40 2025 by rpki-client