Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
File: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft (raw, json)
Hash identifier: yzVEpn/KUTfxz71v31jbpcKVceIFlAY3p0w1UT3dCmk=
Subject key identifier: 9C:AB:FF:B2:0C:A8:85:39:0E:35:CB:51:56:39:FA:0F:86:C5:70:AA
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 01974A43F4521EEA95D07BEB7DFEE87CF317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 12:00:56 +0000
Manifest this update: Sat 07 Jun 2025 12:00:56 +0000
Manifest next update: Sun 08 Jun 2025 12:00:56 +0000
Files and hashes: 1: O_KCzwVMWWFZcOERuZfC4YWn9FY.roa (hash: GvDcDGS0R/CSMmzRrzV54m/DC/W2FYWSA7lqDitIkMA=)
2: bp7wOLoR7KHYyMpRk1AVcymuiZM.roa (hash: xjmDEJIk2t11tVAVqOoUo8z5SEcqH7rBtC3fb0L+2ZM=)
3: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl (hash: Qf8iRdSvfA6J8kooJuj+Q4DM8SmmMIJkVUSIN0QYwxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:f4:52:1e:ea:95:d0:7b:eb:7d:fe:e8:7c:f3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Jun 7 12:00:56 2025 GMT
Not After : Jun 8 12:00:56 2025 GMT
Subject: CN=9cabffb20ca885390e35cb515639fa0f86c570aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:16:57:98:58:41:e0:6a:b8:7d:de:ab:60:
c0:a4:df:c8:d7:49:26:a3:05:5f:3e:7a:eb:a9:48:
9b:ea:f7:a2:d6:c7:3a:e2:ed:da:c1:f6:91:f3:a2:
1c:ee:b0:9a:af:d0:6d:72:ab:ee:fc:bc:ac:04:3f:
00:74:fe:c6:f4:08:1d:52:92:d5:7f:35:67:60:01:
28:84:a9:eb:c7:be:43:d0:a6:6d:31:59:f9:16:e6:
a2:24:af:26:c4:e1:73:0b:2e:e9:c7:7f:9e:f3:12:
67:c3:db:c7:1d:29:e3:18:e7:da:83:d9:18:a4:25:
cd:33:d6:1f:d7:76:e6:eb:39:40:72:92:e9:20:88:
26:4c:bc:9f:4b:97:49:c4:a6:5a:a9:3d:6d:ed:bd:
d1:82:40:7c:df:b7:e2:1a:7d:c4:36:0c:a3:c2:4a:
5c:cb:5c:38:ae:57:0a:5f:44:eb:d1:66:1a:14:70:
f0:42:c1:be:23:89:ba:f7:cc:cd:46:d6:c1:e7:d9:
fb:be:fc:83:42:9c:35:8f:87:31:74:cf:2b:7c:5e:
2d:6d:2a:08:1b:eb:b0:95:6b:92:43:c8:da:1d:c6:
02:cc:13:1e:46:c4:6b:1e:a6:c0:83:24:ca:a4:e2:
62:e6:d9:1a:59:c4:ef:05:c7:bd:a1:ff:fd:15:a7:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AB:FF:B2:0C:A8:85:39:0E:35:CB:51:56:39:FA:0F:86:C5:70:AA
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:57:27:4e:4e:33:29:58:3c:3a:7b:d6:9f:c7:b5:4a:f1:28:
64:17:45:d6:95:a2:3d:e3:79:9a:ca:4f:d4:90:f7:54:1b:d6:
c6:71:90:be:de:e1:a5:89:8b:24:46:0f:8e:31:e7:9f:1a:e0:
b3:60:e6:d6:f1:17:da:6e:6f:57:77:dc:13:7d:fe:e2:6c:6d:
35:3a:e1:c9:8c:4e:c7:52:36:55:e0:eb:d3:d2:d3:2a:6b:eb:
c1:3d:bc:2a:f2:6c:29:fd:97:28:6b:dd:a3:07:0d:56:cb:c5:
4f:67:26:e2:67:e2:4b:16:50:48:da:35:89:17:64:61:ee:c0:
8a:83:8b:c9:80:f3:62:e2:43:89:21:55:39:2e:b1:d9:2a:f5:
bc:51:f9:38:68:99:9c:83:b5:e5:71:4e:02:07:f0:e6:39:0d:
14:f6:83:e6:aa:b7:c6:94:ce:ff:d2:df:9b:3b:eb:ad:b8:30:
62:5a:d7:d0:48:80:d0:42:01:b7:27:66:0e:eb:4c:16:21:d8:
f0:51:f4:fe:bb:28:ae:f9:32:a4:8d:ae:50:ab:36:c1:37:88:
ea:44:14:87:24:85:84:28:ff:11:16:41:19:cc:74:e8:d1:69:
5e:c5:78:b2:d4:2a:c5:0b:a4:67:a6:c6:7c:59:8d:b6:8c:7b:
ae:0b:90:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:28:27 2025 by rpki-client