Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: 43iHPFbwViPT18ii6PdeiB8NQNk560dASnED7w83sKI=
Subject key identifier: 8F:14:C1:29:A5:D2:C1:97:19:7E:54:37:82:57:3F:AB:3E:91:13:CB
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019749D5F043D17114D7EB00451640307480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 0E79
Signing time: Sat 07 Jun 2025 10:00:46 +0000
Manifest this update: Sat 07 Jun 2025 10:00:46 +0000
Manifest next update: Sun 08 Jun 2025 10:00:46 +0000
Files and hashes: 1: iFAQtylr3ZRvM5JOhViQDahNSl8.roa (hash: ziaVf39GfMHlG6F56FK5ey4SYxeBfLmJtFc4nGwT8Lo=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: zOB6DGrqw2zff/WiLFJQSLCq9Igje9LYumn69k6puJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:f0:43:d1:71:14:d7:eb:00:45:16:40:30:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Jun 7 10:00:46 2025 GMT
Not After : Jun 8 10:00:46 2025 GMT
Subject: CN=8f14c129a5d2c197197e543782573fab3e9113cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:4e:e6:5f:e6:de:b3:68:56:56:7a:1a:87:
fa:05:43:97:2d:3b:1d:e6:26:6b:e1:74:bb:36:e4:
09:fd:17:95:af:0d:b2:34:38:b4:85:56:fa:23:1c:
c0:b8:4a:bd:50:0c:f1:e6:b7:4a:20:e7:38:3c:4a:
c9:12:b6:04:b7:0e:ef:1f:b5:b1:4a:6c:71:e0:19:
b0:63:4c:8f:9d:4b:5b:25:55:42:9f:e9:57:37:26:
1d:75:af:2e:5f:42:93:38:e5:02:aa:3e:8f:6f:33:
31:69:c0:05:c1:77:f2:08:f9:6f:ed:0f:53:0f:27:
54:d1:4c:4c:4f:f3:de:d4:67:63:3d:84:3d:86:d5:
eb:68:fa:ee:cc:c8:71:05:bb:b6:08:22:63:18:91:
68:72:6e:04:9f:8f:47:15:85:d5:49:97:0a:f9:54:
72:22:7e:03:7e:02:dd:3b:39:57:ba:22:7c:6e:e3:
cd:d9:c5:b8:2b:d8:35:c6:d7:8c:23:3f:f2:57:55:
3b:02:e6:0d:de:67:91:55:62:5b:69:be:7b:5c:94:
b6:6f:b9:ff:bb:1a:07:22:bd:1c:75:ae:0d:01:ef:
69:77:67:31:d6:70:6d:68:9e:ba:7b:88:bd:a7:3e:
63:4a:13:ee:92:1f:98:39:f9:8e:82:02:29:a5:b8:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:14:C1:29:A5:D2:C1:97:19:7E:54:37:82:57:3F:AB:3E:91:13:CB
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e8:eb:6e:30:20:93:a3:86:c7:8d:a8:bf:07:0d:52:c0:4b:
58:7e:75:f7:a6:9f:d5:9b:d5:c7:b6:68:68:f0:67:01:28:8a:
0f:e9:b1:99:f9:c7:33:f3:b0:cc:bc:4b:e3:b0:79:98:32:2f:
cd:4b:29:e0:eb:f0:8b:4e:02:3a:23:68:74:25:c9:68:2b:fa:
b3:10:d2:c3:89:06:bd:d2:c9:71:ea:2f:02:7e:37:58:11:be:
66:df:9d:79:86:ee:d2:75:82:5b:22:3f:06:08:c1:68:34:c9:
fa:89:43:92:72:83:96:c3:a3:b7:73:e8:74:6e:52:07:fa:e2:
d4:44:21:7a:c9:63:2d:31:e8:b1:97:2d:e6:af:3e:ae:39:c6:
e2:ea:19:be:ef:f1:58:23:50:c5:95:c9:a8:0a:c4:74:0a:8c:
3f:5f:11:b5:b0:90:18:91:a9:79:f0:78:69:4c:04:c5:b1:3a:
33:cd:ab:8d:d1:a0:6e:19:3d:82:b9:ff:52:f1:12:7f:8f:5b:
f1:dd:12:68:6f:75:35:5a:a2:52:4f:81:01:f4:f5:ac:27:f2:
28:e1:c2:4c:65:c2:c4:fc:21:30:10:dc:42:f9:bf:80:0f:b5:
4c:1b:4a:18:90:8b:26:b8:42:cf:6c:78:8c:2e:f9:32:63:43:
11:58:ee:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:28:42 2025 by rpki-client