Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: VZ63nq4BLocqQAzZ+vjVbpdv2ew193YdkllGLmi93SU=
Subject key identifier: A4:C2:4B:17:C1:F3:8F:25:C0:19:6C:6E:3B:67:B1:A4:E4:56:C2:77
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 01974E8E270FE97A80A90C2A71F02EE10BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0C67
Signing time: Sun 08 Jun 2025 08:00:28 +0000
Manifest this update: Sun 08 Jun 2025 08:00:28 +0000
Manifest next update: Mon 09 Jun 2025 08:00:28 +0000
Files and hashes: 1: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (hash: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=)
2: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (hash: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: CQYLaVE++6FbQ5d3X9guiFdJW6aOwKPO+kfBqfKA6qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:27:0f:e9:7a:80:a9:0c:2a:71:f0:2e:e1:0b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Jun 8 08:00:28 2025 GMT
Not After : Jun 9 08:00:28 2025 GMT
Subject: CN=a4c24b17c1f38f25c0196c6e3b67b1a4e456c277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:be:23:bd:b0:2d:8b:6f:9b:9b:41:73:1a:
3e:f4:e3:2e:de:a3:b4:40:14:6f:cd:74:94:c1:de:
28:14:ce:fe:ad:97:27:22:a4:e8:f9:11:99:01:1c:
3c:56:f3:cf:03:a0:b3:db:f8:87:99:58:1b:39:84:
b1:dc:15:ae:2c:b1:94:a5:22:05:46:0a:2e:3a:47:
95:4a:4c:a8:90:94:c5:cf:71:93:1a:d5:43:90:e0:
a1:f3:bf:37:86:9e:6a:dc:f3:73:fb:fb:5b:14:03:
99:56:80:57:87:c3:8b:d3:03:b3:34:cb:63:b1:10:
3f:57:6f:76:1e:6c:4b:8b:16:32:39:4c:d0:4d:6c:
3d:c9:ce:58:cf:e8:93:f4:8b:ae:4a:16:93:ca:0e:
90:6e:a0:4e:ce:4a:08:f5:7c:1d:fc:69:02:c5:9d:
1b:24:e5:f3:e1:92:e8:45:2b:99:dc:80:81:bb:24:
59:08:7a:cf:01:95:c4:d1:23:36:c8:b7:a5:b5:b2:
26:c9:44:cd:98:40:42:a5:ac:8b:98:f5:57:16:70:
fa:1a:32:36:5d:93:0e:43:8b:0d:f7:9f:93:df:b4:
f8:b9:9f:18:bb:e5:a4:b0:d8:80:03:aa:6e:7f:7f:
45:24:f4:01:ac:74:8b:af:7f:12:4f:da:94:19:6a:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C2:4B:17:C1:F3:8F:25:C0:19:6C:6E:3B:67:B1:A4:E4:56:C2:77
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e3:be:61:9b:26:4e:b3:58:c1:cb:f3:5f:d0:9d:d9:9c:32:
2e:2e:5d:ce:00:a5:ae:21:1d:e3:ea:10:56:0b:db:ac:75:83:
64:c8:eb:82:d1:dd:db:99:50:30:59:95:5b:77:74:83:61:22:
ce:31:5c:3a:17:87:2b:7e:38:65:d3:a0:37:35:59:ff:b9:20:
eb:13:37:23:7e:93:de:a0:37:99:14:7b:d6:6f:35:9c:37:03:
62:3c:3f:70:6e:2c:a1:b5:18:52:cf:a7:f2:99:cb:24:b2:07:
6c:7c:34:f9:bd:de:60:c6:54:01:b2:33:26:73:48:bd:e8:12:
7c:13:55:bd:c9:d6:39:a8:48:20:f8:b9:9c:ba:b2:65:7b:fa:
28:d7:af:01:8d:50:03:15:05:3d:11:14:f5:d3:86:b9:4f:26:
51:da:cd:53:06:c1:65:84:30:9d:db:06:46:3b:1e:b2:ba:ee:
cd:a8:ea:f2:78:12:ce:ba:fd:04:b7:38:ff:80:45:5c:97:6a:
c4:df:17:33:2e:7b:e6:bc:3e:8c:3b:99:ef:0e:0c:11:08:d3:
0a:19:fb:27:52:48:5f:88:47:37:7b:b9:cf:81:ac:6f:8c:0d:
98:b6:92:39:07:bd:4b:4f:f5:b0:81:ee:56:e0:58:61:69:11:
d3:81:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:40:54 2025 by rpki-client