Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
File: Zo1_de9C8L1xqpxmZo4KM9vhY08.mft (raw, json)
Hash identifier: abpE3yn4agnFIvtr3ImkcNJ4SWqPJItXmC/x9TB1zl8=
Subject key identifier: E4:0C:42:95:9E:59:58:EB:31:3F:02:E3:BA:27:C5:76:E2:51:8D:40
Authority key identifier: 66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
Certificate issuer: /CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Certificate serial: 01974A43BF04A37E7CDD20B47D6C116F81E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 12:00:43 +0000
Manifest this update: Sat 07 Jun 2025 12:00:43 +0000
Manifest next update: Sun 08 Jun 2025 12:00:43 +0000
Files and hashes: 1: ZLef86UZ8-ykPDzWWLmzoQSdgC4.roa (hash: 9D+NhHpbmJi6ZpbrwdmFqtG+bLkEiMEM9kjTpQm+k4M=)
2: Zo1_de9C8L1xqpxmZo4KM9vhY08.crl (hash: y4zWCyd5CRaHgOLLE3xz0nAraJVOJ9YYlW/ZpACmwpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:bf:04:a3:7e:7c:dd:20:b4:7d:6c:11:6f:81:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Validity
Not Before: Jun 7 12:00:43 2025 GMT
Not After : Jun 8 12:00:43 2025 GMT
Subject: CN=e40c42959e5958eb313f02e3ba27c576e2518d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:db:db:61:ec:a7:72:02:28:e9:9b:ec:ee:
76:e1:c3:3c:3e:d4:26:34:ad:7a:64:23:38:b7:65:
1f:ee:b1:54:e7:4c:fe:54:aa:ff:7f:17:f5:4c:c0:
e6:a7:5e:70:79:1b:06:d2:a4:ad:cc:74:ee:c7:97:
c1:40:0f:c6:81:04:15:d6:10:1e:76:27:fe:01:6e:
44:6a:1c:25:5d:64:d0:ba:fd:40:46:bd:4c:30:b1:
71:05:e8:fd:68:e2:05:40:e0:60:25:6e:cf:41:51:
a5:ee:5f:48:2e:7d:27:b2:b2:de:c3:4a:ef:30:be:
80:50:ea:47:df:ab:4d:6b:15:44:dc:46:da:dc:d0:
6f:a1:21:2d:bf:19:21:23:02:d1:08:d6:ef:9a:fe:
54:ce:33:8e:9c:1d:9f:da:1b:04:d8:73:6b:4b:5f:
7c:67:39:34:2a:21:84:bd:a6:b3:f6:dd:e7:38:37:
29:4b:01:be:54:23:db:4e:51:52:34:1a:15:79:0f:
1d:bf:17:f8:aa:b0:9c:eb:e3:6f:2e:ab:08:f8:f7:
b9:61:c3:1d:c3:f0:3d:e4:0f:d7:13:19:63:ab:e5:
a2:12:b8:e6:10:71:e2:e4:8a:9f:35:52:6b:0f:66:
61:3f:22:86:43:1e:90:9e:07:13:e7:fb:7d:60:87:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0C:42:95:9E:59:58:EB:31:3F:02:E3:BA:27:C5:76:E2:51:8D:40
X509v3 Authority Key Identifier:
keyid:66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fc:0e:9f:83:61:d3:a6:90:1a:91:da:6b:09:b1:4e:55:bf:
0b:ab:59:a8:0d:46:e1:a0:61:3a:d0:77:42:68:9f:0a:88:7f:
27:c3:32:f8:e8:d0:13:d8:8f:63:16:6a:01:4b:a3:c4:3c:13:
7b:8f:c3:65:5c:68:ee:60:dc:5b:74:7e:bf:fb:0d:ea:cd:b9:
53:52:0b:72:37:ce:2b:d0:95:98:ed:44:57:bb:82:74:0d:38:
61:ce:b6:33:f1:05:28:ca:41:4d:f3:e2:6d:ad:aa:d8:e2:f0:
5a:38:94:3c:3b:0d:1b:e8:d1:30:5b:a1:6e:58:79:d6:c6:39:
cb:97:3a:d8:15:81:74:52:ec:3e:24:b7:0f:cb:60:38:6a:a7:
c5:b3:cc:9e:e1:c5:29:4b:38:fc:1f:17:ad:b0:c4:8c:21:46:
e8:88:ed:44:45:a9:c1:c5:17:e9:b0:57:6d:18:ee:d7:ea:01:
cd:5a:84:1f:9b:1b:94:5c:ef:8c:2a:07:a0:ab:ab:e6:90:77:
3f:c6:6d:eb:05:e9:60:5e:a1:77:cc:a5:ad:dc:ab:0c:85:e9:
30:28:79:1e:ad:9e:82:54:b8:db:8d:4d:cd:02:fb:cb:8f:fb:
d3:63:fe:5f:4e:1d:76:3b:75:8c:9d:78:3e:1b:da:d3:da:15:
73:fe:8d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:36:19 2025 by rpki-client