Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
File: zbY--iaaFBF1Thzaq4SPsG-ghBE.mft (raw, json)
Hash identifier: tn7vMr9NeJYKZZX21BRtfprV/uxS+eNU8RWveAq+2xY=
Subject key identifier: A7:4E:2C:F8:20:AC:5A:62:75:A6:04:90:CD:7A:89:C2:0B:6D:6F:AB
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial: 019764032DA05158BC03263AAF8D58B1C17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
Manifest number: 0CC0
Signing time: Thu 12 Jun 2025 12:00:19 +0000
Manifest this update: Thu 12 Jun 2025 12:00:19 +0000
Manifest next update: Fri 13 Jun 2025 12:00:19 +0000
Files and hashes: 1: c0UDF77YneOEpDbpE_XbzKIY8Uk.roa (hash: foV69gLO281sdub8JnH51RHuvFTq6y1JtigYK6aR0Ho=)
2: zbY--iaaFBF1Thzaq4SPsG-ghBE.crl (hash: StMcuoX9h4I+MKE3VBuKqGfCfR6/vvKVycuh90mXYaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:2d:a0:51:58:bc:03:26:3a:af:8d:58:b1:c1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Validity
Not Before: Jun 12 12:00:19 2025 GMT
Not After : Jun 13 12:00:19 2025 GMT
Subject: CN=a74e2cf820ac5a6275a60490cd7a89c20b6d6fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:e7:f1:01:8e:ad:22:cb:fb:8d:73:43:54:
f0:81:f9:02:63:f6:27:c6:9a:4b:cd:a3:ca:90:91:
24:c2:e6:4e:ea:ab:c9:82:ba:32:44:d2:8c:f0:00:
47:ce:66:0d:df:cb:e0:85:00:25:d3:83:2f:93:14:
6e:a2:b4:ca:56:09:04:e2:36:92:30:fc:8f:f4:19:
4e:77:12:b3:8f:a6:7a:18:05:9d:1c:55:0d:87:a1:
18:98:d9:ed:20:9a:ca:a6:f8:7c:9c:bb:c9:db:5b:
de:9b:5f:f1:75:c3:33:05:b2:05:9d:71:75:6d:0f:
ca:69:92:1a:a8:90:58:8c:84:c0:82:d0:f6:df:7f:
78:85:e4:b5:7f:b7:39:38:49:3e:3d:ab:ce:fd:48:
93:14:40:51:6e:92:c8:07:75:74:b0:df:3f:20:42:
cb:b6:4f:f0:83:10:cd:17:f8:b8:2a:95:4e:9d:1a:
ae:cf:e1:a2:45:df:d3:25:52:7a:d1:4c:1c:e7:a7:
ba:21:a4:9d:a8:4a:6f:d5:8e:ea:2e:97:dd:27:02:
81:dc:ec:05:b9:0c:aa:94:7d:8a:30:38:11:c8:28:
43:b9:66:7b:d4:2e:5c:f2:4a:f1:72:27:d7:b2:ff:
b2:98:5c:c7:b2:20:73:ca:97:df:a3:67:2f:53:1f:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4E:2C:F8:20:AC:5A:62:75:A6:04:90:CD:7A:89:C2:0B:6D:6F:AB
X509v3 Authority Key Identifier:
keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:56:e7:85:d8:35:84:e2:66:d9:a1:7c:11:f7:bb:d5:a5:26:
83:44:3b:6b:f3:7d:5e:4e:fb:a1:a2:4c:47:ea:43:c8:d1:15:
b8:86:47:61:19:10:41:cd:20:b5:52:e5:69:5e:6d:9a:2f:b9:
42:cd:56:44:b3:ce:7c:6f:01:29:d3:cb:5c:8b:7a:7c:6f:2f:
a6:a8:27:36:99:de:7c:67:c4:98:2c:27:1e:52:76:3f:c3:1b:
03:56:e5:be:8f:0e:91:d3:fb:f1:61:8c:83:71:51:85:c5:41:
7b:9b:ad:07:6f:e3:be:94:14:7f:60:b8:83:f6:8c:9a:33:c1:
d9:b1:64:95:8b:40:b4:cd:b4:56:af:7d:4b:a3:7f:54:f8:95:
d9:9e:5d:70:07:17:42:32:2e:ef:b5:78:44:c0:79:f2:e2:e4:
40:86:50:68:2a:07:f4:ea:b2:46:23:bf:c7:22:1f:00:94:d4:
a9:bf:ac:e3:b7:bd:d4:54:c6:14:dd:02:d3:a4:f2:75:02:d1:
e7:bd:6d:cc:85:53:63:18:69:32:0b:ec:1f:61:9a:b2:da:1e:
54:9b:3e:18:bc:df:0b:69:ac:82:1d:7a:b3:5e:bc:41:d8:07:
61:e6:bb:f0:4a:17:4f:f7:c3:32:2c:c1:5d:19:99:22:9a:5a:
92:4c:f6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:21:39 2025 by rpki-client