Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier: wpAHXafsmjHUAIdO4d+lK2/Yoq4LnU5UrxQZyZI9ZmA=
Subject key identifier: 0D:65:10:09:AD:F3:7D:D2:73:5F:72:9F:EA:8F:01:FE:99:2E:5C:0D
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 019746303A4C59D1E171E97B57F45FE099C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number: 05E4
Signing time: Fri 06 Jun 2025 17:00:55 +0000
Manifest this update: Fri 06 Jun 2025 17:00:55 +0000
Manifest next update: Sat 07 Jun 2025 17:00:55 +0000
Files and hashes: 1: 1c920Ct5rOPHF_34AgNrTQyTHns.roa (hash: 3ha9UyAf61XbEV4U4pqec4b6uB2FvJUFQO9xEs0mMB8=)
2: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: cJrR4+Go50Tn2i4LFS6O+JDf35Vn712AUV/PoGHZQn0=)
3: ovafsYtoE7DXZrX76_DbhwiFBFI.roa (hash: B3oTrNBu7iXQWRfAVFRfxlkERw0m92wTQifsPR2uF3I=)
4: uS_eNJttBX5d2bBiNGi8o_-V1qw.roa (hash: 4uBi6d9Ejt3VJlBosKZzOt8ocCYLF07d22+zXDAl+n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:3a:4c:59:d1:e1:71:e9:7b:57:f4:5f:e0:99:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Jun 6 17:00:55 2025 GMT
Not After : Jun 7 17:00:55 2025 GMT
Subject: CN=0d651009adf37dd2735f729fea8f01fe992e5c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:00:c3:c0:66:cb:5b:5d:23:d9:f9:84:05:
f0:13:c4:7c:09:62:97:71:67:26:c9:ba:86:69:f2:
a9:ff:c7:f7:a2:5a:ca:12:f1:1a:1b:fb:2c:c1:b7:
de:9d:21:ac:01:12:8f:bf:ed:63:3e:35:8f:f3:24:
b1:59:60:0c:ee:72:5d:1b:27:6f:86:c4:26:7e:82:
5f:7d:86:da:de:79:60:7a:43:02:a2:71:94:4c:7d:
8d:4f:85:52:65:07:68:01:47:0f:e2:f7:f8:ca:23:
40:4f:48:65:4b:c9:e9:a5:78:43:86:75:5e:e5:eb:
f3:5b:95:bc:4e:5d:32:3a:73:35:5e:2e:fc:34:8d:
d3:41:f2:f2:7a:f8:64:a3:2d:8f:2b:d2:59:4a:2e:
7d:73:62:4c:94:c4:7f:97:31:3c:a3:58:1d:05:f0:
2a:40:a0:1b:6e:7e:e6:46:75:47:40:10:12:40:24:
9f:ac:f4:c3:3e:e6:db:73:17:e3:7a:49:8d:77:f8:
7a:ce:2b:6b:1c:6d:64:a8:1d:97:38:b2:d9:de:9e:
6a:cf:18:05:d7:67:da:ab:ba:57:7f:b2:ff:ce:dc:
fd:48:9b:18:19:2c:08:3d:0d:da:de:a5:19:38:05:
ce:23:d9:9d:3d:70:d5:e3:fc:3d:d0:65:e5:3a:45:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:65:10:09:AD:F3:7D:D2:73:5F:72:9F:EA:8F:01:FE:99:2E:5C:0D
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:73:33:9b:19:0b:00:20:f5:8f:bd:8f:b7:06:c2:17:fc:2d:
81:f3:e6:94:ad:0c:0f:9b:2a:78:05:82:0b:dc:38:28:55:3e:
21:ac:eb:18:54:db:a3:42:50:55:c5:55:8a:e1:3b:fc:78:56:
0b:c4:09:5e:63:13:1d:f9:74:fd:1f:90:79:98:a2:64:f7:8e:
64:a0:b2:6e:7a:d7:40:68:7b:28:85:c6:4e:12:3a:1f:ec:6a:
83:f4:dc:8d:d2:a4:14:87:3b:08:4e:9d:4f:fc:3f:31:3b:7c:
fd:5e:b7:d9:ec:ce:e8:07:67:9d:18:3b:74:00:75:9e:67:c1:
4e:19:13:15:d8:62:e4:7c:43:e4:66:a8:89:97:81:bd:85:15:
7c:d0:3f:20:f6:b7:24:e7:a3:51:4a:f3:85:aa:17:67:75:c7:
b0:2c:1d:21:c8:99:8c:ba:5b:cc:71:ad:00:85:d7:e3:9e:8b:
57:8f:5e:2d:1d:d1:1b:85:43:ec:90:83:27:5b:07:a6:ec:68:
e9:18:74:20:14:c5:ba:7b:59:32:8b:72:5d:da:dc:a5:e3:3a:
38:59:1a:ce:cc:62:d7:4d:35:e9:18:f8:24:59:73:89:b2:2d:
3e:53:4a:90:0d:01:81:d7:db:8c:9a:81:e5:6b:cb:b2:85:48:
3b:3b:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:18:31 2025 by rpki-client