Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: vaue4p8Bh6D9Oz6BUocGZQeHLm7xFwmqU8HQIRouRzY=
Subject key identifier: A5:42:0C:37:35:4C:EB:F9:BA:FB:E6:C0:33:34:BC:34:F9:A8:4F:46
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 019753B4A6C6474B24BE1AF11A7FCDED737F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 08C4
Signing time: Mon 09 Jun 2025 08:00:37 +0000
Manifest this update: Mon 09 Jun 2025 08:00:37 +0000
Manifest next update: Tue 10 Jun 2025 08:00:37 +0000
Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: 7EPwaGie8DYhPTIw5UpOZcfPSmUmv+HwJd9z9udP0UQ=)
2: iZsQcVJmfkhAcYH19cli-30jJSk.roa (hash: 5op4VZIOL+EirxQSg7kSyPAbPkqJzG43PAru2qFB904=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:a6:c6:47:4b:24:be:1a:f1:1a:7f:cd:ed:73:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Jun 9 08:00:37 2025 GMT
Not After : Jun 10 08:00:37 2025 GMT
Subject: CN=a5420c37354cebf9bafbe6c03334bc34f9a84f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:92:0a:67:c0:2f:1e:23:3f:87:ee:03:e2:
49:af:91:d7:ea:28:47:5d:56:fb:f6:6e:a0:f8:e3:
ec:8c:f3:d4:36:1c:cf:00:c7:91:f0:97:e3:89:14:
26:f5:11:d8:bb:b2:90:df:3b:60:8b:66:f4:59:b1:
a9:94:7e:cb:4c:7b:99:31:18:8b:cb:1b:b9:a5:19:
53:8e:3c:36:61:34:14:1c:b4:ce:4d:02:c4:6c:ba:
3b:78:6b:5b:6c:29:19:d3:13:08:14:38:e5:4e:ea:
f1:f3:47:0f:d1:27:5f:2c:52:3a:c3:a8:92:29:fd:
4b:72:36:a3:3f:26:bd:ab:76:38:82:ad:9c:db:74:
db:67:f3:c5:28:c3:f4:30:06:46:68:98:19:76:8a:
a0:07:b3:06:b5:98:0e:c9:54:9a:f6:fa:c0:de:4d:
b0:d6:b2:c6:3e:f0:e7:9e:2b:84:3d:73:d4:26:25:
e0:3d:a2:d3:3f:96:ed:f1:04:5b:da:19:97:d9:93:
4d:de:e1:2d:97:89:f1:e3:1f:2b:8c:0c:9e:06:67:
62:29:6b:73:99:6a:86:18:0c:c8:d2:99:51:ed:d4:
48:f5:a0:3a:b9:19:f6:cc:06:3d:20:d7:89:26:f8:
97:f9:56:78:1b:dd:65:60:17:e8:59:ba:86:cc:3c:
f6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:42:0C:37:35:4C:EB:F9:BA:FB:E6:C0:33:34:BC:34:F9:A8:4F:46
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:83:07:65:fc:59:57:69:b4:16:ca:1b:b4:1f:97:0d:ce:cf:
48:aa:2e:dc:d7:e6:74:d5:93:15:4a:e5:85:a0:6f:72:8f:e8:
54:9f:c3:50:05:2e:19:41:53:e1:ac:fe:3a:52:f7:ad:03:34:
9d:6c:d1:99:6f:8f:3b:60:d6:6d:b3:2d:31:49:fe:1f:16:7f:
7b:a3:fe:7e:8f:6f:74:1a:d3:14:9e:e0:a5:3c:9b:c6:19:09:
d4:9a:ee:5d:ab:1a:0a:dd:e2:da:72:62:52:a6:96:87:c5:fc:
ed:26:da:32:3e:30:06:f6:47:a6:27:82:14:d9:26:6f:40:cc:
73:2f:ed:f9:ea:b7:2d:f2:94:42:cc:e4:fc:50:06:b7:15:ad:
ab:33:ce:35:3f:97:5d:0f:70:c2:67:f0:4a:d2:90:b0:de:fb:
e3:8c:68:4a:11:df:69:ff:9f:3d:86:03:58:91:92:a3:a9:f1:
8b:c3:5e:f6:7a:0f:6f:f3:e8:4d:44:6a:94:c6:36:02:48:2b:
bd:0e:eb:ec:23:83:14:c4:12:09:30:8f:08:93:c2:33:1f:79:
af:a9:67:d8:c7:30:9d:61:2f:3c:26:97:4a:ee:80:24:c1:20:
58:d1:05:76:8b:7f:cf:5f:bb:6b:cb:72:58:09:d2:60:59:cb:
46:b0:9d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:47:03 2025 by rpki-client