Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: 3Wt4q9o1ryAAPYYR16VFITjuh/eQv4++PcLH1czqg0I=
Subject key identifier: 0D:D8:05:80:09:D1:5A:20:DB:CF:08:B0:1F:EF:FE:79:51:65:82:98
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 019748C3757F70EB27A43809ADA24939ADED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 0B2A
Signing time: Sat 07 Jun 2025 05:00:58 +0000
Manifest this update: Sat 07 Jun 2025 05:00:58 +0000
Manifest next update: Sun 08 Jun 2025 05:00:58 +0000
Files and hashes: 1: KciWQRUUKA8G37qpiXIJOStEILw.roa (hash: YmPZf2aHwh91FO6k/J1ZnsKw+UadvZ5IXF9CJ4jQgGc=)
2: onkr1ceIBIpKPgL3tDwWHACVi7M.roa (hash: EEvxEqVipQPJzVBh5cB6I21KRgxyU4/cw+o/6DWEUyk=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: DVZxUeiGhbH5vxpmGnW4r17y8L7ESbB/RmtU4vEvskA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:75:7f:70:eb:27:a4:38:09:ad:a2:49:39:ad:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: Jun 7 05:00:58 2025 GMT
Not After : Jun 8 05:00:58 2025 GMT
Subject: CN=0dd8058009d15a20dbcf08b01feffe7951658298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:74:c0:d5:e3:c5:a2:1c:af:2b:55:a7:8d:
1a:14:ae:9c:0e:28:0e:c6:d1:69:3a:b9:8f:dd:97:
b0:a8:dd:c3:60:85:71:77:8e:4e:03:3f:bf:e4:6a:
19:3b:dd:d3:01:8e:d1:a8:c7:85:4c:a3:9b:21:9b:
5f:f4:3a:b6:c1:31:0b:d3:2d:25:70:1f:a9:22:48:
a0:8b:87:de:cd:db:6a:58:dc:f8:c6:b3:a0:9d:01:
9e:7c:2d:71:53:da:05:14:50:b2:3a:1e:0f:bd:4d:
81:99:6e:a6:4e:c7:3d:ad:e7:ff:e8:ac:7b:b0:1c:
ee:0d:08:d5:d4:96:99:ff:49:58:ac:a3:dc:57:cc:
31:b7:27:be:64:93:37:bf:f8:14:1b:33:ce:ea:14:
0b:f8:c5:61:1f:50:0d:d8:4d:1e:1f:d5:56:58:ff:
0b:a2:ab:57:68:40:fd:eb:44:2c:20:c9:f1:c3:5c:
2e:9b:fc:eb:75:93:70:5b:cb:67:6a:dc:98:3b:04:
0a:2b:04:62:7f:d0:be:c9:42:fb:a7:32:75:a8:c4:
21:e2:ad:1a:80:b8:46:75:26:cb:d0:c4:c4:3f:3b:
4e:9e:82:f0:97:27:65:05:2e:24:59:e3:67:3e:5e:
97:e5:8e:12:5d:75:cc:62:bf:9b:20:f4:c6:3f:32:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D8:05:80:09:D1:5A:20:DB:CF:08:B0:1F:EF:FE:79:51:65:82:98
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:79:1f:59:90:ce:c6:a0:d2:77:35:6e:d3:b6:1d:07:25:f1:
b0:99:89:34:63:67:6c:3b:cf:e1:27:27:ce:b4:47:30:1c:8c:
2e:df:1c:99:2a:70:d7:f1:5f:b0:2a:22:8c:7f:d6:85:46:d6:
72:5d:88:a4:d8:1f:ea:1e:b8:18:d5:bd:10:84:97:8a:c4:2b:
53:2a:2f:81:6a:20:72:63:75:91:8f:ca:cd:21:aa:67:44:a9:
36:30:91:3f:a8:df:cf:7c:aa:cc:f7:18:c3:a6:5a:e7:6a:c1:
df:f5:1f:f6:54:db:b0:34:fe:d1:85:b8:75:c0:63:a0:db:25:
97:23:b9:29:8e:b7:0a:98:91:a5:ae:74:51:f0:7d:e2:9c:8a:
2c:b9:8b:85:49:2b:90:c3:c2:9a:30:b5:22:f2:f0:cf:2a:f9:
69:d1:98:59:0d:74:a8:d8:8e:18:37:e0:fc:b0:3b:85:a8:ce:
16:a8:b6:29:9e:28:13:f3:94:ea:63:3c:5d:16:10:c3:f3:92:
ab:da:3f:e2:81:48:dd:92:a0:75:f1:a3:48:29:1a:5e:88:04:
f9:53:e4:d6:be:b6:6b:17:ec:9c:68:3e:a4:51:ae:44:59:30:
9f:80:ff:a9:74:24:9b:54:82:3a:ee:49:74:06:75:60:90:04:
71:8e:73:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:56 2025 by rpki-client