Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
File: ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft (raw, json)
Hash identifier: FGGiljpS9RCJDybxSAL6lFN1lUSXBUxQDyYi2QwXG5w=
Subject key identifier: A7:3A:4B:DD:0B:C7:A0:80:1B:5B:1F:F9:C4:14:31:C7:CC:DE:BD:AB
Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
Certificate issuer: /CN=ce235c504019c504021e0662f70133b7ee733173
Certificate serial: 01976F2CF4F0DFF445A19613C89951850B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
Manifest number: 1250
Signing time: Sat 14 Jun 2025 16:01:46 +0000
Manifest this update: Sat 14 Jun 2025 16:01:46 +0000
Manifest next update: Sun 15 Jun 2025 16:01:46 +0000
Files and hashes: 1: dVxPi-2BU6sN_zi1oxxkbrPcccA.roa (hash: LN+UvXmjMQ+4zMKoOoVm0IS9B+l8wMWW/8CPwN/xbVI=)
2: ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl (hash: pURZgy+scQApjOZMF92Nuhjv/3MSxMvf+ehQWFZZuNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:f4:f0:df:f4:45:a1:96:13:c8:99:51:85:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce235c504019c504021e0662f70133b7ee733173
Validity
Not Before: Jun 14 16:01:46 2025 GMT
Not After : Jun 15 16:01:46 2025 GMT
Subject: CN=a73a4bdd0bc7a0801b5b1ff9c41431c7ccdebdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5a:aa:f5:9d:0c:e6:93:ff:bd:79:a7:60:75:
ad:a4:5e:8d:c3:70:34:62:f3:bd:ec:9f:d5:15:f9:
85:5f:c8:9c:2a:01:1c:6e:fb:af:f2:80:71:b5:0c:
d1:55:39:d6:2a:fd:e3:d3:f2:56:fd:be:db:38:0a:
06:8e:dd:93:cb:45:bd:e1:fc:9f:df:63:f4:9d:94:
b3:41:87:0f:96:54:6a:c5:c5:c8:ce:81:88:ce:cd:
74:d8:8d:d9:1e:95:75:f8:58:82:55:d2:5d:7c:90:
47:ed:a7:f2:11:ff:b4:ea:2c:82:91:7d:8c:1f:cf:
f3:87:8b:b2:7a:6b:81:69:8a:a5:d3:c3:d8:7e:8e:
f1:b0:f7:84:02:18:e5:a7:97:8a:91:89:1d:f6:37:
b3:c5:88:68:f0:03:81:ee:07:d5:0e:ed:60:79:b9:
1d:fa:da:dd:b3:8e:af:70:c9:da:df:15:49:6f:c2:
65:02:b2:4b:5c:0a:09:70:a6:74:4e:7c:4c:0e:63:
fa:9f:44:1b:6c:b8:a5:1a:89:09:46:89:a5:56:b4:
ad:69:b0:3c:63:9c:0d:4f:d7:d4:41:85:7b:16:9d:
f4:d0:ee:42:09:8a:dd:11:28:9a:76:19:98:79:38:
08:74:dc:ab:e6:93:77:59:04:ea:eb:88:65:12:7f:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3A:4B:DD:0B:C7:A0:80:1B:5B:1F:F9:C4:14:31:C7:CC:DE:BD:AB
X509v3 Authority Key Identifier:
keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:16:b9:7e:6a:5b:25:a7:bb:3c:65:a9:24:5f:b2:78:aa:06:
51:07:e3:e4:a1:d9:b0:60:48:e8:5d:64:b1:36:45:20:69:d8:
24:41:eb:11:d1:f8:3f:ef:7c:6b:14:c2:e5:1e:53:51:70:26:
33:9f:fb:d9:71:c8:b3:d6:4c:76:22:fe:c5:fc:02:af:69:a8:
53:9c:83:f4:45:06:f3:1e:bb:91:46:8b:9c:e6:6f:e0:89:0c:
15:26:12:4e:a6:a8:fa:17:d5:b6:63:82:6c:4f:59:c2:0c:dc:
9b:f6:0b:bb:bd:ee:c8:11:08:c1:9c:89:cf:a7:46:cd:02:46:
81:72:a0:0b:85:46:9d:fb:ff:a3:bd:6f:07:62:c1:0d:8b:f4:
a7:9f:7e:97:e8:0a:dc:f9:1b:f5:e8:2c:e3:36:a5:d9:27:95:
29:ef:f1:7c:80:ea:f2:ca:1c:e8:3e:4c:10:2a:d6:bf:30:6e:
c8:09:55:1f:e5:d0:14:25:bb:eb:c4:3f:3e:59:c4:df:ba:21:
7f:ac:e8:1c:e1:57:12:c9:85:30:bc:fe:ff:fd:14:4c:8f:cb:
31:38:c4:41:3b:b0:ea:46:6d:43:52:7a:4d:2f:10:97:ea:ec:
56:e3:22:32:a0:ee:88:3f:0c:2b:91:90:6f:76:0a:04:cb:b3:
f5:09:8e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:17 2025 by rpki-client