Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
File: zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json)
Hash identifier: bFP/5a9aZxSTp2vCPzpvrmoWQC/FWmb1QPYl25eAJW0=
Subject key identifier: 73:3D:E0:89:32:D1:E3:D0:FD:A8:CE:F3:4F:BC:E3:0A:E4:62:91:64
Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Certificate issuer: /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Certificate serial: 01974967B986788F6E2AD9FDBF22A0794A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 08:00:23 +0000
Manifest this update: Sat 07 Jun 2025 08:00:23 +0000
Manifest next update: Sun 08 Jun 2025 08:00:23 +0000
Files and hashes: 1: ugeI_SPpOI_az_dGl_P54hP9qpg.roa (hash: HZZ/y/qcvJFbb7qD1Pg6FgrRdOBnE2ywGhjLdlNi6S8=)
2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: mKA0pb0HEfP1xByVyXtHyN1L+YTohXUWAxBe4h9DzSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:b9:86:78:8f:6e:2a:d9:fd:bf:22:a0:79:4a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Validity
Not Before: Jun 7 08:00:23 2025 GMT
Not After : Jun 8 08:00:23 2025 GMT
Subject: CN=733de08932d1e3d0fda8cef34fbce30ae4629164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:ad:aa:eb:c9:0d:da:f7:02:ac:11:86:5b:
6e:04:03:9d:05:99:d1:f0:c7:f0:29:11:83:ee:a9:
d3:e2:4d:78:b5:94:cd:16:90:e4:57:1a:86:aa:e3:
35:53:49:13:73:26:68:0f:a4:86:f7:e2:a1:cc:8e:
0f:16:92:c8:08:a9:25:f0:c1:12:d8:65:18:21:f6:
52:66:40:06:b8:8b:d8:51:d1:0b:08:ed:88:fa:f6:
26:94:20:00:27:f7:03:6b:8d:b8:7d:28:7f:72:0e:
29:8c:4e:b4:5a:a7:da:18:41:39:40:69:aa:1d:1f:
52:d6:a8:da:0f:86:cf:b2:28:dc:0e:a5:75:ea:39:
3b:1c:03:a0:99:9e:50:4a:71:f4:4e:62:2f:42:05:
ec:4a:eb:8f:7a:3f:ee:d3:75:80:da:77:f3:ed:98:
47:af:eb:a0:7d:06:79:f8:fa:ef:b2:91:f3:99:40:
9c:e7:8e:66:d6:b1:a3:43:d0:fd:c6:0f:83:c3:bb:
f9:a1:39:3e:2e:df:e2:6b:06:a3:fa:55:c5:8e:32:
ad:05:0e:80:26:f9:b1:a2:32:0b:7d:1c:a3:b4:90:
86:48:9d:93:cb:e1:ff:41:46:65:5a:56:b9:3f:74:
b5:23:87:57:14:6c:1f:64:89:45:b0:4b:92:3e:2b:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3D:E0:89:32:D1:E3:D0:FD:A8:CE:F3:4F:BC:E3:0A:E4:62:91:64
X509v3 Authority Key Identifier:
keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:66:e2:51:c8:47:6a:33:47:ac:8d:52:1c:77:7e:fa:2f:bf:
04:08:7d:e9:47:3f:16:15:c9:38:de:c1:0a:33:08:93:8b:db:
1c:24:3f:9b:86:ec:7a:2b:20:84:ff:03:ee:dc:60:a7:e6:70:
52:73:38:0c:fa:f0:8b:1b:65:63:c2:8c:67:fd:28:fa:61:21:
91:6f:2b:40:a3:d5:51:12:eb:53:5b:f4:a8:3d:b5:f8:e2:d5:
02:d2:ad:0f:12:08:1b:96:4f:15:4c:aa:f8:c6:01:d1:7a:27:
18:4e:86:2e:11:04:79:17:47:a5:7d:40:c6:63:11:c9:9f:c5:
02:fd:c7:ef:f9:11:e4:59:40:d5:47:5d:3f:0f:87:34:0d:40:
08:9d:00:8e:56:6c:eb:c2:c7:46:77:fd:f1:e7:f6:9d:89:fd:
6a:5a:a2:4d:06:68:41:11:fa:5f:26:83:92:6a:5a:a0:b1:13:
f9:7e:79:f5:ac:35:db:83:b1:73:21:be:a0:1c:d3:9d:ee:0d:
f7:79:eb:b9:23:5f:fc:db:00:c2:bc:ce:79:bb:b4:af:86:01:
8a:39:a7:4c:7d:02:74:02:82:2b:39:0c:55:90:ce:08:52:f4:
fc:61:c0:d5:dd:12:3e:cc:df:c5:10:ee:8b:79:53:94:73:ce:
49:75:bd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:09:48 2025 by rpki-client