Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier: Y6+AgtGJvLXKtxoH8CmqRkU5kEibXCTN6Kt/Iy8O1N0=
Subject key identifier: 0F:E1:44:03:6D:C7:E7:CA:06:E8:B9:3E:A1:B9:D1:A8:46:67:04:58
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial: 019758365E380682095B5A5EC879A43975C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number: 0EEC
Signing time: Tue 10 Jun 2025 05:00:47 +0000
Manifest this update: Tue 10 Jun 2025 05:00:47 +0000
Manifest next update: Wed 11 Jun 2025 05:00:47 +0000
Files and hashes: 1: DkGvgDnbdtEHDMx7b64dzBjhPco.roa (hash: 8mB0OA1c8Mmrq7iJrmaJaIVGUwLhqVKrizBW/uXLsCE=)
2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: VFlgOZjEgCmDjS+GkrE+GsdTHM/Y/qZqnsCI3UsKl0E=)
3: ZiWYCsD1Dry724z5OmJJ8Oawr6w.roa (hash: pA+krdDNaZYU7n+P4r9c22BIzRTJGvLkmVz3LgTk2aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:36:5e:38:06:82:09:5b:5a:5e:c8:79:a4:39:75:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Validity
Not Before: Jun 10 05:00:47 2025 GMT
Not After : Jun 11 05:00:47 2025 GMT
Subject: CN=0fe144036dc7e7ca06e8b93ea1b9d1a846670458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:99:9d:fb:3e:17:8d:b5:91:08:48:ad:5b:
bc:aa:23:36:d2:c1:d3:83:f1:cc:7d:cb:85:4f:82:
c9:ca:68:3d:40:12:8c:f6:ae:52:02:32:72:5e:11:
67:19:49:28:f9:77:65:2d:b8:03:10:b6:95:ec:36:
31:d9:c7:00:1b:04:58:b9:57:4a:12:bc:59:fe:dc:
a8:2b:7d:7e:71:f2:5b:74:31:47:bb:0d:6d:b8:ac:
81:4d:1f:12:c0:47:a8:60:87:11:76:b5:06:fc:04:
a7:d6:82:06:a6:c3:c3:40:ec:df:e9:af:15:43:8a:
05:52:fe:ea:35:22:20:1c:d5:1c:92:34:03:a1:b7:
a4:71:32:b8:9b:40:9c:c7:15:f1:ae:c1:13:a9:9e:
6a:28:c2:9a:dc:8a:31:6a:60:83:a4:07:dd:d4:a8:
e8:c9:33:4b:c7:54:75:0a:02:5e:e7:8b:c2:54:9c:
3c:cf:23:ed:44:5e:51:e5:a3:bc:60:c4:37:df:1c:
bd:6d:e6:55:b7:7e:b5:be:2d:0e:db:58:30:b3:49:
96:24:8e:7e:a4:dc:03:d0:9c:b2:d6:7a:f7:40:90:
88:98:22:d7:27:6b:02:bb:8a:20:95:f5:4b:33:69:
b3:12:f7:d6:cf:ad:43:1b:4b:a9:58:f6:80:74:1b:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E1:44:03:6D:C7:E7:CA:06:E8:B9:3E:A1:B9:D1:A8:46:67:04:58
X509v3 Authority Key Identifier:
keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:05:cf:04:a4:ed:d5:25:8d:8f:09:f9:36:05:1d:76:f8:c2:
37:55:d9:46:70:48:0e:57:af:5a:68:b7:b3:d8:b9:d7:a8:d3:
19:f5:65:27:d5:d1:bb:a1:0c:a3:30:b8:d2:5d:aa:d3:6b:62:
f0:5d:48:80:a9:0e:a3:70:09:67:af:54:a3:a1:bd:ef:b8:b1:
78:3f:56:db:2e:b6:13:9a:25:68:a9:da:ba:ff:d3:51:c6:17:
ab:c1:5b:28:5d:a3:56:ec:c5:fb:28:e3:50:0c:b7:5b:eb:e0:
5b:34:39:18:42:1b:2e:29:a6:4f:61:be:b3:fb:59:f4:c5:d4:
97:7d:d3:41:ba:02:98:7a:4e:1a:c1:b2:03:e1:1d:9b:66:ac:
65:a4:d9:3f:48:ab:00:41:07:84:2f:ec:af:35:d8:6b:2a:67:
2b:0e:41:4c:1b:6c:ae:33:b6:1d:15:84:06:1d:fc:5e:bd:ea:
03:6e:8b:37:d1:19:5b:3e:c0:17:3a:3e:c4:2b:cc:d5:cb:29:
ba:40:7a:5e:fc:29:e7:8f:4c:20:ed:7f:d7:c2:8b:c6:7c:eb:
3a:32:af:09:55:e3:f7:58:13:80:70:a8:41:95:3a:56:d7:16:
0f:3e:fa:8d:a2:5b:8c:94:fd:9d:c4:48:74:40:0e:2a:6b:ed:
d5:b8:a0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:57:00 2025 by rpki-client