Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: zTafUrtcct6gm4okYVmp7YkqQhpW/sr98oh1yqatlW8=
Subject key identifier: 8A:B0:B1:12:1A:AF:B7:4C:95:0C:4F:04:4D:AD:06:9E:4D:65:B7:3A
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 019768F3103097BC38CE9BA9BEF10D911C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 08CF
Signing time: Fri 13 Jun 2025 11:00:48 +0000
Manifest this update: Fri 13 Jun 2025 11:00:48 +0000
Manifest next update: Sat 14 Jun 2025 11:00:48 +0000
Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: vdb9RW7kBjsKwMgkx1o/XGFJauZ+rBwT+fgb85jPzis=)
2: iZsQcVJmfkhAcYH19cli-30jJSk.roa (hash: 5op4VZIOL+EirxQSg7kSyPAbPkqJzG43PAru2qFB904=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:10:30:97:bc:38:ce:9b:a9:be:f1:0d:91:1c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Jun 13 11:00:48 2025 GMT
Not After : Jun 14 11:00:48 2025 GMT
Subject: CN=8ab0b1121aafb74c950c4f044dad069e4d65b73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:49:36:1c:ea:27:24:c1:8d:82:66:d5:40:
77:42:7d:ab:23:bb:fa:24:f6:61:d1:a5:61:5a:11:
ff:0f:67:f1:6c:0c:47:08:db:c5:b8:13:d3:8f:d6:
ca:75:28:79:77:cb:89:c6:a7:12:d3:14:47:c2:81:
f1:f3:5c:a9:c7:07:4a:b8:11:ec:5a:8e:23:ed:90:
6e:c1:68:67:16:8e:40:0c:70:a2:13:5e:7f:98:70:
99:e6:2e:11:49:cd:c6:d9:50:70:30:f1:7c:b3:7e:
f5:3e:6d:d5:2c:b6:d5:c0:f3:b6:e3:2a:87:00:dc:
fd:3c:c2:89:fc:eb:79:55:ca:2e:1c:61:b4:9b:f5:
31:28:2c:45:d5:88:43:01:15:38:26:4f:a8:57:03:
59:e6:b6:0c:29:f7:b9:52:4e:44:ad:b1:84:57:72:
2d:8c:8e:8e:bb:23:2c:2a:72:f1:60:ec:77:99:96:
6e:aa:a7:d3:c9:b4:93:6f:22:c4:d7:5d:eb:07:67:
78:a5:84:24:1c:ec:82:22:5c:f7:f5:04:2d:c7:db:
2a:59:e8:40:34:f2:c9:7a:fe:ea:3d:c9:e5:2f:4f:
e0:ba:25:60:07:77:85:d5:a2:97:04:ee:92:1d:08:
78:2d:61:36:e5:14:80:23:27:10:5c:c5:37:d5:18:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B0:B1:12:1A:AF:B7:4C:95:0C:4F:04:4D:AD:06:9E:4D:65:B7:3A
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:60:45:c8:d4:c0:df:a4:4c:03:1c:19:09:78:c8:4d:e4:82:
37:5c:4b:91:ca:ee:30:e5:bd:dd:88:6a:5a:27:46:fa:ee:dd:
c3:92:d0:8f:62:43:3a:c4:d1:45:8f:ba:fa:dd:25:03:c7:01:
00:61:ce:3e:0f:71:e0:55:56:36:03:60:59:e2:53:e4:a8:8f:
3d:dd:46:4e:a5:2f:d1:57:4b:97:46:e5:45:8c:77:85:65:be:
45:05:c0:43:2f:93:6a:87:a5:5c:69:d6:df:e6:8e:c7:a5:ca:
bb:64:a5:d2:da:cd:f9:dd:13:4e:74:e9:f5:d7:0a:b9:48:1d:
38:5b:e8:0d:df:09:38:59:59:11:9d:50:53:4d:f7:f4:37:c2:
25:43:6b:cd:65:df:96:a7:ee:84:77:17:62:b5:da:4d:c5:28:
36:f8:40:0d:26:27:6e:70:57:58:5d:f7:59:20:55:93:9a:cd:
9b:41:9d:4d:d1:a0:c7:d8:cc:0c:00:d7:e8:ad:7b:ff:7c:e4:
fb:e2:39:4f:9d:71:60:47:a0:9e:ae:2f:86:1f:ba:13:20:ee:
79:63:b7:b3:2e:aa:e3:9c:e5:e3:27:d0:05:63:0d:56:7b:33:
9c:e1:6e:85:84:fa:a0:29:f2:8f:4c:88:42:91:29:01:7c:32:
49:a0:74:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:50:14 2025 by rpki-client