Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier: 4hMOatQw5RNmSnrR535NRggfVKH5ZIfdYw7UkIvT7no=
Subject key identifier: C8:99:8E:FD:82:44:70:FD:FB:51:BE:F2:4D:FC:C2:DD:7A:9A:A5:33
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial: 01976997A66CE5D680E2F1ADA081FAEDBBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number: 0EF5
Signing time: Fri 13 Jun 2025 14:00:35 +0000
Manifest this update: Fri 13 Jun 2025 14:00:35 +0000
Manifest next update: Sat 14 Jun 2025 14:00:35 +0000
Files and hashes: 1: DkGvgDnbdtEHDMx7b64dzBjhPco.roa (hash: 8mB0OA1c8Mmrq7iJrmaJaIVGUwLhqVKrizBW/uXLsCE=)
2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: 5g8UD+W4wIlfM8CRR9snovTgUEog/qSiR+7IH9D7vEU=)
3: ZiWYCsD1Dry724z5OmJJ8Oawr6w.roa (hash: pA+krdDNaZYU7n+P4r9c22BIzRTJGvLkmVz3LgTk2aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:a6:6c:e5:d6:80:e2:f1:ad:a0:81:fa:ed:bb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Validity
Not Before: Jun 13 14:00:35 2025 GMT
Not After : Jun 14 14:00:35 2025 GMT
Subject: CN=c8998efd824470fdfb51bef24dfcc2dd7a9aa533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:41:56:fe:e4:38:64:6d:37:ce:4b:15:a4:
f4:44:b3:eb:cf:77:23:be:48:df:fa:05:eb:f3:5f:
ee:37:d1:38:f9:c8:0a:67:08:db:f5:66:96:a6:bd:
32:a9:d1:69:57:a0:96:0a:07:99:52:a4:68:27:07:
a3:8e:22:fd:84:d5:99:23:a3:53:b7:d4:33:03:2b:
41:27:20:b2:33:b6:f1:30:48:da:c2:e0:c3:03:73:
07:98:8c:ae:d8:c5:b9:de:04:de:e5:cc:87:f9:3b:
45:48:b7:4b:6a:b5:e9:4c:a6:79:50:f4:11:05:0d:
b1:a2:2b:3f:f3:5c:f3:3c:77:1f:67:4b:22:5f:48:
9e:7f:e6:4f:6b:aa:23:09:f4:95:cf:b7:86:74:43:
c4:80:e1:3c:73:6d:8a:c1:8d:0d:79:25:0c:e1:cb:
6f:60:48:a6:5f:36:c8:2c:07:46:62:07:aa:57:15:
81:31:a1:ea:a3:51:88:83:b8:53:10:89:91:07:63:
fc:24:64:ce:22:64:2f:eb:b0:84:27:e4:02:c8:8e:
0c:d7:ce:75:8a:de:01:0a:24:6f:68:b9:ea:0b:df:
f2:d1:62:35:d1:7f:11:45:4d:84:16:d5:4a:1f:e4:
aa:66:03:57:f5:54:36:17:d2:d4:47:4c:f8:53:ee:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:99:8E:FD:82:44:70:FD:FB:51:BE:F2:4D:FC:C2:DD:7A:9A:A5:33
X509v3 Authority Key Identifier:
keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6d:b0:e9:f7:9c:d5:3d:3f:73:84:53:36:84:97:d9:6b:da:
d9:eb:9b:56:78:c7:cf:1b:54:d5:bb:da:c7:91:f8:66:ec:1b:
3e:3e:80:d1:9e:7a:86:2b:64:dc:40:73:d4:96:5f:c3:84:65:
0d:5e:bb:12:d8:91:62:1d:cb:07:dc:93:99:00:8d:64:29:77:
8d:1d:79:8f:93:ca:f2:f2:7d:0c:07:e8:7e:0c:ab:46:85:80:
9b:cd:c5:85:8f:48:2d:9f:46:a9:01:ef:11:1e:69:44:0e:f7:
9b:4c:1b:0e:b1:13:a2:5d:ec:64:67:d2:44:bc:a7:63:3f:23:
5c:e6:f9:0c:61:04:63:0e:af:f4:58:21:2a:ce:1c:52:0e:67:
fb:85:a7:09:1f:42:3a:64:e7:2b:3a:c1:4d:2b:4e:27:e5:8c:
a4:fb:38:41:78:7c:04:79:cd:cf:96:f2:9d:7f:e7:d1:5d:23:
f6:3e:58:03:6b:c7:95:9f:80:5d:ec:fd:86:5f:b0:d2:3b:ef:
31:f1:6d:53:7d:d3:95:54:f2:0b:b6:b8:a1:7e:7c:2d:2c:79:
04:05:d7:d3:9f:54:27:73:2e:3d:bd:ab:97:4c:6e:58:5a:54:
0e:28:53:86:c5:c8:d4:61:92:13:8e:d0:10:1a:82:d0:d8:f0:
84:c3:29:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 23:45:06 2025 by rpki-client