Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: GMKnQfFRjeLDUNtR47I2LXxNyM4qhiVZOk9V42VuLCw=
Subject key identifier: A6:AB:58:FA:C4:B3:50:29:C4:8C:7A:88:92:B3:68:19:7D:7B:6B:67
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 01975E382CA5222B88213DEC2550EB1C3D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 124E
Signing time: Wed 11 Jun 2025 09:00:29 +0000
Manifest this update: Wed 11 Jun 2025 09:00:29 +0000
Manifest next update: Thu 12 Jun 2025 09:00:29 +0000
Files and hashes: 1: I9pCIyNdXwO_UmL0GiE3Cg1yOBE.roa (hash: rgdmg36ZiZKltWGUWVab82/ToqNlhoJ2jQiTOIy/cAU=)
2: svzhNq6qtyn4S4aBADhUvEOECPM.roa (hash: PLCvbbOnyIN6lmj0BVGyyI3TGiwUbgBbXCHrA/CAEUE=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: edSvA0HeJRxeCh6rCcS5OGLqzPvfYwUKcnCP0QIeQZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:2c:a5:22:2b:88:21:3d:ec:25:50:eb:1c:3d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Jun 11 09:00:29 2025 GMT
Not After : Jun 12 09:00:29 2025 GMT
Subject: CN=a6ab58fac4b35029c48c7a8892b368197d7b6b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:2b:68:f6:a2:04:80:68:12:a8:3d:8f:44:
9c:60:24:2f:fe:08:2f:3d:bb:19:72:b8:5c:96:e9:
44:8c:69:33:e9:66:f7:13:23:70:6e:78:74:d4:ce:
96:9f:12:53:36:40:ea:dc:98:4c:f4:76:38:ba:d5:
f5:37:57:f2:81:cf:b1:6d:65:d9:46:5d:59:f5:af:
bf:ad:b9:8d:c6:0e:8d:a3:36:4c:f9:4a:5c:28:01:
9c:a0:68:56:2d:79:b1:44:36:6e:8c:5a:4e:3a:c4:
c1:6c:be:07:a6:f6:0c:1f:98:15:fa:b3:75:89:b1:
06:52:1e:7e:ee:a9:19:f7:84:a9:f3:4d:0a:d2:d3:
46:42:42:b8:4d:84:11:34:86:e3:44:51:02:39:21:
a7:83:54:57:88:89:a9:8c:c7:33:ab:09:d8:0a:29:
f2:48:ba:06:14:f6:f5:68:b9:6b:52:52:bb:7a:7a:
1c:e4:17:16:45:d8:69:51:2b:0a:e4:23:a8:3a:c6:
72:bb:23:34:62:e1:c9:2c:3b:85:fe:51:78:e6:15:
5d:6a:55:b7:ae:4b:11:a7:b8:ba:36:03:55:f6:85:
8e:05:7f:82:00:3f:a3:12:cb:5f:8e:04:21:21:4e:
79:6d:52:22:30:83:8d:98:09:0d:f0:43:41:d6:16:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AB:58:FA:C4:B3:50:29:C4:8C:7A:88:92:B3:68:19:7D:7B:6B:67
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:94:fc:62:dc:85:77:d8:eb:c3:53:1a:ef:15:81:c9:5c:d7:
1a:32:90:24:45:2e:5a:d5:81:e2:20:7c:c5:1a:f0:21:d9:1c:
df:dd:33:f9:23:42:6d:e9:f6:6e:ae:4c:d2:6f:f9:c2:51:95:
d7:b3:ce:41:7b:30:5f:21:ba:fb:ef:8f:73:00:f3:61:f0:ba:
68:03:43:c2:05:86:21:c0:35:e7:cf:bd:04:a7:60:25:d7:62:
4c:67:2d:69:3c:80:db:fd:73:5b:82:11:a7:eb:b4:85:ab:7f:
cd:4f:c3:36:9b:b3:a2:ec:8a:2c:b0:7c:12:65:7e:f3:2a:5f:
ba:e4:45:de:a1:e8:7f:ff:a0:45:63:2c:57:e7:70:1c:da:a8:
0a:f0:3b:f7:48:08:2a:e4:83:01:c4:f3:04:5f:bf:77:38:95:
1b:30:cb:85:0c:bd:39:69:cf:75:ae:31:31:c3:4d:45:e0:60:
30:07:53:c3:ab:25:1a:89:20:5e:f2:c4:26:c8:f9:0a:21:aa:
76:76:5b:70:b6:0c:11:b5:16:f1:65:10:f8:09:c1:e1:e8:20:
14:b5:51:b4:f3:82:9f:60:37:a4:a2:53:13:7b:d9:13:03:99:
1d:33:1a:de:b4:2d:e4:70:05:f6:97:b3:2e:05:4b:16:a0:cd:
c5:fe:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:36:48 2025 by rpki-client