Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: MNe4ICxGj0DEuQ+yfhpmNoZEO4zwi+fhjgFqySoVu/w=
Subject key identifier: F2:A1:7F:BE:B6:F1:25:51:BD:9B:A0:93:13:FD:66:E4:4F:CC:92:10
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 019749686B36FC75095604115BD7DBDBAF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 1585
Signing time: Sat 07 Jun 2025 08:01:09 +0000
Manifest this update: Sat 07 Jun 2025 08:01:09 +0000
Manifest next update: Sun 08 Jun 2025 08:01:09 +0000
Files and hashes: 1: 8B-49SRrYWj3BFm1FIacELaGu3s.roa (hash: laIZJXxS1vtVLt93zJEWrt+cjjvvJapngvXurJPqS7Y=)
2: a3gHziW8P1fHttGC9Ex68BgcGK4.roa (hash: 5EwUldHPQ4hQYwe5t3ER6qcsrkPeWX9lX5322mclP1s=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: SKsm4yDjOzpyX7Tp2QfPPkh3aCWMFP2s+32iH4enGXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:6b:36:fc:75:09:56:04:11:5b:d7:db:db:af:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Jun 7 08:01:09 2025 GMT
Not After : Jun 8 08:01:09 2025 GMT
Subject: CN=f2a17fbeb6f12551bd9ba09313fd66e44fcc9210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:2f:95:40:d2:c3:07:6d:ad:7b:cb:c9:10:
a0:12:47:f5:e5:3c:a5:8d:48:da:74:37:fc:42:cb:
00:b1:c1:d0:ff:a4:99:46:98:2f:b1:84:47:e9:67:
03:a2:99:80:53:a8:f9:bd:88:c8:ef:07:f5:3c:ed:
14:7d:40:6e:b9:df:51:94:36:d0:0d:6b:74:e4:4d:
fe:b9:60:24:ac:90:be:b0:29:04:fe:5f:de:57:8f:
65:94:bd:60:b9:35:ad:8b:f9:7a:34:02:79:1b:18:
6e:17:c9:49:bc:b1:bc:8d:e1:ac:92:19:db:5c:61:
2c:5e:ba:0b:d6:d8:ba:46:34:d3:c7:8c:8a:67:36:
8b:ab:38:bb:c7:f7:e2:e9:12:df:f5:49:95:b3:a3:
14:7d:22:d2:5e:d0:e6:c4:8c:6d:5d:c1:07:73:fa:
72:86:9a:e2:77:40:24:68:a8:3d:17:d8:04:9e:27:
ec:00:67:4c:e9:61:6d:75:5c:9d:8a:b4:87:e0:c8:
80:55:e7:a3:dc:cd:60:00:a2:6e:50:de:79:df:5e:
92:a6:dd:d5:47:28:c8:9a:b1:cf:e7:ae:a3:78:38:
ac:d1:bf:41:eb:23:66:44:e9:cb:0e:86:c6:81:bb:
39:7e:b6:17:fc:81:5d:84:4b:47:26:97:cd:bf:67:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A1:7F:BE:B6:F1:25:51:BD:9B:A0:93:13:FD:66:E4:4F:CC:92:10
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:72:f7:98:41:94:c9:4b:67:86:59:a5:b2:23:60:bf:d6:70:
ab:7e:db:4c:d7:c8:c7:a4:59:b3:dc:90:4d:ab:b9:e6:50:78:
a0:3d:ee:dd:d0:b0:b1:c9:ab:5b:7a:ad:c1:54:6d:e4:28:bf:
90:36:bc:69:37:35:b5:b9:68:21:28:e2:af:f2:f7:9e:06:17:
6d:7b:7a:1b:d8:db:0f:df:65:1a:6b:2e:06:fc:72:84:cd:be:
41:41:bf:d2:3b:9f:f5:13:2b:eb:ce:6b:e9:16:46:03:3b:ae:
1e:49:4b:6b:11:2f:4e:15:9e:23:63:37:7a:b2:d9:bb:50:6a:
2d:a5:46:70:71:c4:4a:ea:31:6b:e1:69:f1:0f:11:c0:10:80:
9d:07:df:99:20:26:e9:3e:fb:c6:cc:60:fe:cc:21:96:99:3f:
a0:72:e5:0d:66:57:65:8e:58:ee:a7:57:17:75:7c:4b:61:4d:
33:69:e7:b0:d4:51:09:77:d4:55:6a:4e:c9:b2:a6:45:a1:e2:
46:a1:38:32:11:44:fc:b9:5c:6e:76:1a:86:b2:a6:27:73:c1:
e0:6b:5b:20:07:0d:f5:c9:aa:15:9e:07:ee:e6:cd:75:ec:c4:
ae:9a:04:3f:e9:5b:0c:d0:8e:af:49:a0:7b:15:6b:e6:9f:9c:
3b:3a:9a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:58 2025 by rpki-client