Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
File: zZEXAvST1u3htuhyvKzcuFQoK60.mft (raw, json)
Hash identifier: nLW5d4Skc2T4Az//wzHGlWJntOg6U8Ugahbg+BiNx7w=
Subject key identifier: B0:5E:37:56:70:3C:DF:FC:02:B9:81:35:F8:D3:F0:4D:95:C2:27:05
Authority key identifier: CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
Certificate issuer: /CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Certificate serial: 019750B415A2B423437EB512F966AD550AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
Manifest number: 0BE5
Signing time: Sun 08 Jun 2025 18:01:08 +0000
Manifest this update: Sun 08 Jun 2025 18:01:08 +0000
Manifest next update: Mon 09 Jun 2025 18:01:08 +0000
Files and hashes: 1: talgukTPD8oL2wxiXAXrxPFSwAY.roa (hash: 42F75IV5IsX3V6ll7VHZlZ+ABWMo+HJa6Q+yWz1dm0U=)
2: zZEXAvST1u3htuhyvKzcuFQoK60.crl (hash: VcHtLLm0BGkysNH/z+6PkF520Fer7HHL4EOjI6qS4NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:15:a2:b4:23:43:7e:b5:12:f9:66:ad:55:0a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Validity
Not Before: Jun 8 18:01:08 2025 GMT
Not After : Jun 9 18:01:08 2025 GMT
Subject: CN=b05e3756703cdffc02b98135f8d3f04d95c22705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:44:2d:ab:5a:71:f4:ff:53:24:e0:c8:94:
02:ac:7d:21:3f:20:77:18:aa:b1:4c:1d:a4:d4:40:
ad:03:f3:b3:11:0d:31:df:fd:f3:33:c3:06:07:88:
2c:a3:85:84:c6:fe:e6:5f:4f:e9:22:0b:98:8a:20:
51:9e:01:c4:d3:bf:2c:0b:5f:b2:b9:74:11:f7:c1:
5a:a9:03:98:5d:1c:83:38:6c:bf:c1:3f:16:00:a8:
24:b7:ae:df:b2:1d:c6:70:ec:fb:5c:cf:29:fc:0e:
9c:6c:4f:24:9c:eb:45:25:99:3d:57:ed:f9:0e:1a:
86:2d:c0:de:f9:8b:db:32:a3:8b:f8:09:9b:42:a0:
7f:94:a1:d1:c2:ec:bb:65:82:75:4e:9b:31:18:c9:
e8:2d:0b:03:f5:00:dd:bb:aa:d4:58:36:fe:4a:82:
9b:e6:0e:fe:cd:07:ef:fb:82:eb:fd:36:71:85:08:
1e:d9:89:73:7a:bf:c4:98:b6:52:21:19:dc:11:fd:
8e:cd:f1:31:06:4e:59:87:81:59:8f:3e:e5:ec:91:
fe:db:ea:26:0c:26:c7:d5:fd:9b:13:3b:41:c8:56:
e9:3b:de:b6:a6:ff:da:57:a5:71:ef:c1:1f:3e:a6:
5d:46:ba:1b:4c:b8:05:94:0a:1b:69:fe:ff:6d:19:
20:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5E:37:56:70:3C:DF:FC:02:B9:81:35:F8:D3:F0:4D:95:C2:27:05
X509v3 Authority Key Identifier:
keyid:CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9e:ec:70:6d:cd:b8:12:76:70:e2:cf:e7:52:36:d5:db:e7:
ee:44:4d:9a:33:25:34:1d:1c:fc:06:34:ab:bf:69:65:c6:1f:
90:9a:e2:02:ea:55:84:50:fc:27:2b:fb:f9:67:04:75:0f:6c:
d2:19:5a:a6:52:1b:c6:44:26:a1:61:04:6f:4a:62:c9:3f:65:
43:e8:5a:3c:55:71:1f:f5:bb:33:1c:b9:98:89:59:27:11:ff:
18:bf:b4:86:51:82:87:13:6f:f4:ee:e8:b0:5a:ab:61:b4:80:
96:b7:05:fd:1b:56:f7:61:1f:9a:7d:06:a5:5d:16:e2:e1:a1:
ed:7e:13:6a:ff:6f:5b:36:b7:5f:7e:07:7c:e2:2a:1a:dd:2d:
dc:31:5e:11:7c:4b:bd:3a:58:d2:b6:5a:a7:aa:39:2e:63:38:
50:b3:7a:52:ee:1c:a2:07:92:2c:95:ec:e0:52:c8:d6:be:57:
2d:31:86:96:0f:bd:5a:15:0b:d2:08:92:54:6e:06:20:42:4a:
12:bb:25:3b:44:d7:19:77:e0:fa:cd:d4:cf:7c:64:fb:b5:92:
75:18:e3:56:32:01:59:26:d4:d3:13:56:06:bd:8f:70:32:dc:
c0:8a:81:de:44:f0:3c:4c:93:69:08:79:1b:0a:17:03:b8:d1:
9b:83:29:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:05:45 2025 by rpki-client