Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: 8zxet2WEn05zghUuOKCnQgFkfuGn5ki0QPKUlneROBA=
Subject key identifier: 41:FB:6C:D0:F9:CD:39:95:50:3E:0D:69:BB:52:EE:2A:D2:9A:54:C4
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 019748555CF242BB2650D93E48A104670651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 0F7A
Signing time: Sat 07 Jun 2025 03:00:43 +0000
Manifest this update: Sat 07 Jun 2025 03:00:43 +0000
Manifest next update: Sun 08 Jun 2025 03:00:43 +0000
Files and hashes: 1: V2EVjCh2XvTTuPUY0Ak-ADU0N0o.roa (hash: VWCe010VtFOUbqTmIo3pVm3sseFcd/9FPMczSAveexo=)
2: VPlTFU2v9_-5Ue2KnHe2hWSrbvU.roa (hash: xjvDPgjYTpNfIICBZo+KKv8oMM12S2D874qBPcDZFuw=)
3: YhHxsxNH4RP_FfePdq8SlQdgZyg.roa (hash: K3fGfKE/dBh+cdQFHO8biNnAdH/Glpbr/rysigKy5PI=)
4: jFc_wlQoiHbPyXbisyroWRENeu0.roa (hash: ITqThjHQNWEDIzaupfeF4coOz5rZPmtce8EoNUCuRBY=)
5: lCJmZzkmjXSr7FEoBdA3ylq1U04.roa (hash: STzWF0AEDLQ8FI+DmmWhhzxn4hvpubeIokmYgyoJVoQ=)
6: zVdth24X5nqjsfHBDas52yk14is.crl (hash: TXcMTWahMefbiCwuT+f7FiDdSzZR7edy32v9o4oU87I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:5c:f2:42:bb:26:50:d9:3e:48:a1:04:67:06:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Jun 7 03:00:43 2025 GMT
Not After : Jun 8 03:00:43 2025 GMT
Subject: CN=41fb6cd0f9cd3995503e0d69bb52ee2ad29a54c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:10:2a:5d:8d:d4:24:92:dc:1d:b8:b5:cb:
ba:27:69:89:8b:94:e7:0d:8e:f0:bb:1a:73:18:cb:
56:d9:a7:71:5f:79:7f:66:39:d4:0e:a4:9e:5a:79:
56:d4:fa:32:06:2d:61:a7:97:5f:3b:c9:b8:b8:31:
7b:75:5d:d8:27:72:84:1c:8c:4c:5d:5e:9c:07:90:
f4:13:e6:fd:7f:9d:be:90:16:d1:d6:f6:fb:8a:85:
e2:d5:a7:60:3e:34:42:12:2d:0f:1c:9f:18:69:01:
80:46:b8:0a:3a:d0:81:4e:c0:00:fd:51:b1:3d:8c:
7d:81:12:43:2c:ba:6c:97:8f:51:cd:ca:df:dd:f0:
46:36:3a:56:15:11:d4:1f:ad:62:ff:66:5c:09:b9:
81:4f:3a:8d:2d:50:72:a9:99:24:83:04:a8:b1:37:
19:ea:7f:6c:ca:88:3d:4c:e4:e2:5c:ab:ff:30:56:
5c:2c:20:1b:d6:89:b9:d8:a3:de:f9:be:cd:f5:0f:
a6:e1:32:5b:92:05:eb:bf:10:49:d8:b9:c0:cc:87:
d3:b2:1c:d4:72:56:6a:ad:d7:20:f8:b1:d3:3c:02:
1e:81:57:70:68:cd:44:72:f0:d1:78:e6:d1:eb:74:
68:bd:76:5c:05:35:41:98:9b:89:72:84:0c:18:25:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FB:6C:D0:F9:CD:39:95:50:3E:0D:69:BB:52:EE:2A:D2:9A:54:C4
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ce:fe:6c:7b:e5:88:e5:f4:10:81:f4:e5:55:7e:1d:e6:48:
15:53:25:03:ed:2b:4c:b0:78:11:dc:c6:3a:0a:e3:3d:d8:af:
89:65:05:d0:64:48:84:9c:bd:93:b3:1b:8c:0e:1a:5b:b2:af:
3c:9c:43:df:00:2b:b2:54:5e:a0:1d:46:3d:ba:10:3a:ed:19:
a4:a2:4c:85:22:c9:e3:df:07:40:4d:7a:d6:29:1e:2d:ee:53:
c8:d0:57:5e:a9:7e:a5:0b:7a:42:3d:4e:46:27:93:d7:18:e4:
84:ff:4d:bb:58:e5:b8:56:07:c7:6c:a1:44:c8:d4:40:e3:89:
2f:71:12:0f:11:af:14:01:a6:55:17:cc:8c:1d:4b:11:dd:b6:
8d:94:0b:08:13:23:c7:b5:5e:c9:a1:ec:b3:21:a2:67:60:f4:
ee:c2:dc:a5:71:cb:6b:bf:47:53:5f:cd:fb:03:3e:16:ce:81:
99:1b:74:02:26:60:79:71:67:5a:23:5c:b9:1d:79:37:f2:7d:
d4:73:97:43:2f:ef:7f:ba:ae:a8:53:7f:7e:92:f7:ea:c4:50:
19:4d:71:8d:71:0a:56:3b:6f:e1:3c:13:b4:86:76:e4:de:6f:
cf:cd:74:c1:34:8c:f8:9d:71:68:1a:26:30:78:65:6f:af:aa:
01:3f:26:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:10:13 2025 by rpki-client