Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
File: zEa__4uQ43SFVboUR_1O3sw0ChM.mft (raw, json)
Hash identifier: pSNtbvBmKxVUOHpIWRLoy1V8OhtfCjf2Ne0fukNA/XQ=
Subject key identifier: 9E:C3:5A:4C:04:6F:05:85:9E:89:6F:18:7A:A3:1B:4A:D6:36:D2:77
Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Certificate serial: 019746D4B64F00993726372FDA0D02803BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
Manifest number: 157F
Signing time: Fri 06 Jun 2025 20:00:34 +0000
Manifest this update: Fri 06 Jun 2025 20:00:34 +0000
Manifest next update: Sat 07 Jun 2025 20:00:34 +0000
Files and hashes: 1: F0jtKGP40uC6UeGFBvx9vjMBKeg.roa (hash: /o36By5Q83qZbeXySOjiZ7fpjLFdoyPEIY6paV+aTiU=)
2: K0qFWulaqLgz9oT0AMcv9eNzEJE.roa (hash: Y/5We05dA9t/MagriMHFfJFSjAFcig5JEV5W+cYXjE4=)
3: zEa__4uQ43SFVboUR_1O3sw0ChM.crl (hash: N2CLgPrMfrN81TlF1WgGPAhgsq4QhaotDBT5EOjLvS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:b6:4f:00:99:37:26:37:2f:da:0d:02:80:3b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Validity
Not Before: Jun 6 20:00:34 2025 GMT
Not After : Jun 7 20:00:34 2025 GMT
Subject: CN=9ec35a4c046f05859e896f187aa31b4ad636d277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:c8:31:a4:91:e1:78:8c:f6:2a:de:97:05:
bb:c0:c2:a3:04:13:d4:c6:a7:d2:38:10:fb:92:70:
1e:a8:0b:4c:39:42:9c:26:7d:6f:38:12:52:ae:a4:
40:13:e2:61:73:7d:88:23:0f:a6:b5:3a:1e:d8:72:
be:32:a6:51:26:ac:d8:84:1c:26:7a:35:b8:29:85:
3d:f4:c2:6c:29:bd:9a:02:20:c7:4b:46:4d:f9:72:
fe:09:dc:99:8e:dd:62:95:dc:9f:08:31:0c:db:88:
30:34:e1:b3:92:2f:c9:c2:ab:16:e3:c0:1d:15:e4:
ce:25:a0:d1:e1:10:fe:12:55:a5:44:8c:49:1f:96:
9f:b5:de:24:47:92:53:bd:2a:64:35:61:ec:e4:d4:
c0:04:9f:38:65:4e:57:f1:9b:1f:48:12:3a:8e:c5:
23:fb:5f:db:6a:11:3f:60:4b:02:67:b6:8a:bc:c6:
bb:40:4f:e1:aa:79:04:45:14:b5:ab:e6:bb:29:00:
1f:73:91:f6:80:a2:f5:c4:e4:15:6b:be:5f:3b:40:
50:17:e3:f3:bc:e3:88:d4:27:45:31:c7:bb:ef:0d:
6d:05:96:69:49:8e:b5:74:8e:b5:ab:9e:b2:05:5f:
50:4f:2d:a5:5c:18:b5:06:96:40:d2:78:51:ed:80:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C3:5A:4C:04:6F:05:85:9E:89:6F:18:7A:A3:1B:4A:D6:36:D2:77
X509v3 Authority Key Identifier:
keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:21:b1:19:ee:f6:5d:11:3e:51:e1:4c:f0:61:4b:b2:a1:62:
45:84:7c:8f:90:ab:ce:d2:ca:da:82:5a:d5:34:97:ae:53:fa:
02:5a:9c:1e:86:60:96:f7:25:81:d3:da:78:fb:69:a5:2b:af:
0a:73:58:1c:dd:8e:5f:ce:0d:49:6b:58:e3:2b:57:e0:37:c4:
8a:0d:6f:2c:12:5b:8b:d4:69:cb:bd:3c:f3:8d:9a:d0:c2:d9:
4e:df:43:cf:b1:46:99:64:26:5c:ed:31:f3:0a:ce:fd:bd:85:
73:61:3d:b2:ac:ca:b9:2a:62:90:f4:31:f2:44:82:47:2b:83:
64:1f:4d:7b:f4:f6:4b:d7:6f:be:e5:ef:72:fd:59:19:df:7b:
17:b2:3d:4c:ed:6b:b8:3e:d8:b5:58:67:82:d8:c6:2a:15:70:
e2:3f:c2:4c:1a:f1:5e:cd:69:8a:e5:72:92:c4:95:dd:8e:f2:
38:94:af:1e:d8:0e:1b:5a:29:b6:1c:88:bd:9c:c6:d2:5a:90:
9e:9d:e2:c7:b6:7e:b2:a6:93:b9:35:eb:ea:a3:5d:52:a1:67:
73:c3:5d:3a:f8:49:35:2c:00:50:57:54:84:ec:f4:69:56:49:
f9:1e:09:e5:f5:31:ab:a4:11:ba:10:c2:b0:60:2e:2a:46:04:
ba:7a:e2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:44 2025 by rpki-client