Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: HithTsVBGp3KgwJDYrcJOETgrZjie9VwhEGf+C0aeJY=
Subject key identifier: 77:81:0D:6A:3C:1E:79:03:F0:A5:29:F1:75:C2:A3:90:29:CA:99:FC
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 01974FD81A9BCCEE13BD567F424697B2E048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 0F9E
Signing time: Sun 08 Jun 2025 14:00:52 +0000
Manifest this update: Sun 08 Jun 2025 14:00:52 +0000
Manifest next update: Mon 09 Jun 2025 14:00:52 +0000
Files and hashes: 1: l0ahmTF7VU-jM66pydmyaaFWBpI.roa (hash: kRKJwUHD3kMQk4tSNCj0K9HqnVNFjpJ2azvHqDtCdr0=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: L4u1FKnukbS1gt7N2KTagC3nD39G3pVbBZ4SAMHRCWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d8:1a:9b:cc:ee:13:bd:56:7f:42:46:97:b2:e0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Jun 8 14:00:52 2025 GMT
Not After : Jun 9 14:00:52 2025 GMT
Subject: CN=77810d6a3c1e7903f0a529f175c2a39029ca99fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:65:59:1c:8f:e5:65:25:16:21:ef:4e:43:
7b:1e:72:39:ce:c6:93:53:88:6e:bb:ba:fd:0a:34:
e5:c4:92:a0:31:4e:1d:5a:19:1d:fe:ae:af:e5:cd:
56:5e:c3:a9:ca:73:70:45:e5:c0:44:31:26:80:43:
c5:ed:c6:bb:70:df:e5:a7:f6:8d:45:14:09:9a:e4:
52:bf:c7:2a:c1:99:ac:5a:33:40:61:ed:de:cb:a9:
4d:45:43:c4:c5:b9:09:b9:4c:49:3a:c7:75:ac:0b:
ae:b6:2f:5a:f7:77:a2:1e:db:ce:da:19:3c:3e:16:
cf:a3:25:d9:70:ea:ce:4f:fd:1d:4d:f6:fe:c2:aa:
10:28:b2:15:61:f0:a9:f2:03:0a:4e:1c:c1:ab:a3:
62:13:7a:fc:83:09:57:b4:6d:97:4c:94:c6:a1:d4:
66:f9:0d:40:df:2d:e2:29:6b:7c:db:a7:5d:ef:66:
76:15:c8:56:26:0d:9d:f5:e1:06:39:ac:6c:bc:b4:
82:9a:91:0d:1b:6c:1c:25:7a:91:1e:68:11:c9:62:
90:81:2e:92:d9:1e:f6:1c:d5:d8:63:03:6f:9c:8f:
ca:46:d2:89:ff:5b:41:d3:6c:0b:43:69:93:28:d4:
c2:f0:af:b1:fa:0c:7a:98:4d:bd:c9:d3:f8:75:bd:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:81:0D:6A:3C:1E:79:03:F0:A5:29:F1:75:C2:A3:90:29:CA:99:FC
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a7:bc:a5:ee:76:b8:9e:0b:e1:4a:9c:d5:46:6e:1a:3a:ec:
ab:ff:83:b6:fd:81:01:3b:e4:e1:f6:c6:18:2b:ec:3f:f0:30:
48:59:d5:47:3f:37:97:a9:39:37:9e:f2:df:1a:76:7a:f6:ea:
bf:3d:dd:17:3e:13:6f:a8:75:9c:52:c8:81:cd:15:9e:7b:dd:
af:31:92:18:e4:54:14:f2:24:6e:48:00:f8:96:b7:bc:99:c0:
cd:20:60:5e:b5:25:79:f7:ab:86:35:4d:7d:3f:24:a7:ea:64:
26:08:e8:a4:d2:50:e5:3e:4c:d6:af:58:c5:cd:df:e9:4f:9e:
71:b4:c1:e4:2b:f5:7d:9b:ed:92:69:97:98:64:e9:7f:0f:03:
81:2b:9b:6c:11:65:19:a8:73:dd:ea:ac:30:6a:d4:35:e3:57:
f9:8d:78:90:ac:28:ec:cd:ce:57:65:b8:0e:5f:27:bd:d0:67:
91:ec:8b:9a:ee:9d:e8:48:79:e8:16:8d:db:b2:c7:25:a0:1a:
64:0c:35:d1:3c:c1:eb:07:df:85:16:20:46:5b:0b:6b:de:a0:
ad:ce:bd:0e:f8:64:08:d6:88:7c:81:ca:53:e4:70:b3:b0:0a:
71:07:3b:95:01:52:05:a7:c0:30:eb:71:b0:db:28:bf:91:bf:
34:cd:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:11 2025 by rpki-client