Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: vXLiFhsHaiiS3uGGhT2Rsq/9pBB5gw4kNGuWGGdRsL8=
Subject key identifier: 44:A1:7E:2C:7F:D5:74:FD:73:1D:A0:31:91:DF:8C:06:37:38:97:E8
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 019750B3981AAC372209AEC9707D6D116099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 18:00:36 +0000
Manifest this update: Sun 08 Jun 2025 18:00:36 +0000
Manifest next update: Mon 09 Jun 2025 18:00:36 +0000
Files and hashes: 1: 2gXpcecRRCZij4ZXTFv5wgCwpoc.roa (hash: XTp2a7d9Z4/ce0bBWK6Hs10N2L5hCV8LpzUzoDu0gs0=)
2: 6UlZFNCUrDjb89rguKwpyS9qT0g.roa (hash: D/Hmsl6tGFB+vz20t6vs0y0e3hMtr6xcd6Lxa8Hmltk=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: 3jd13k+p62EegJRmSg8QdV8EkB1qTI6I7li4kPYevGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:98:1a:ac:37:22:09:ae:c9:70:7d:6d:11:60:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Jun 8 18:00:36 2025 GMT
Not After : Jun 9 18:00:36 2025 GMT
Subject: CN=44a17e2c7fd574fd731da03191df8c06373897e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:bc:73:1e:b3:eb:44:bf:66:b1:3e:78:e5:
e2:71:59:44:a4:2f:51:7d:95:9c:9a:92:a5:98:9e:
2b:8e:de:dd:f2:9a:9d:8b:2f:95:e8:29:05:34:b6:
28:f3:3b:c4:ab:75:f6:ba:79:45:6f:13:c5:c6:b8:
5d:b5:2d:0e:f7:e5:54:4b:c3:b2:01:d0:13:f9:45:
53:eb:82:e1:e5:86:df:91:bb:d5:bc:15:75:49:98:
c6:7b:ac:82:5a:9e:16:55:99:a3:61:11:e4:70:9a:
ef:7d:c7:90:e3:2e:81:b2:86:e6:f4:ba:43:6a:26:
9f:30:e5:2a:ae:3b:23:15:32:c5:42:43:07:aa:68:
20:db:4f:0c:50:97:28:08:10:bf:92:06:0e:82:b6:
c0:47:4c:6d:d1:16:e2:1e:76:12:c6:04:8d:06:4b:
e6:df:82:75:20:a4:90:83:e6:37:f1:e7:34:ff:cd:
05:4d:cf:a5:c2:ea:73:75:b0:71:41:5f:2b:17:52:
cf:a2:12:f7:e9:9f:6a:e7:e7:2a:57:ab:4f:26:97:
ce:28:a1:81:32:ab:3f:7a:77:f2:b8:ee:34:cc:06:
45:b6:a1:68:7e:9e:61:a9:78:3b:32:7f:e5:32:aa:
a2:df:7d:98:96:fc:b8:fc:65:d9:11:bc:1e:64:b1:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A1:7E:2C:7F:D5:74:FD:73:1D:A0:31:91:DF:8C:06:37:38:97:E8
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:44:dd:63:1f:4c:d9:5d:9d:1d:7b:ef:39:8e:49:1c:03:f7:
b8:18:9e:b8:23:25:6b:6c:0b:5d:68:df:83:20:86:56:f2:7a:
6c:53:e1:14:a6:8c:c9:77:11:ec:96:c9:dc:7b:a6:f3:a9:4f:
3d:21:40:01:a2:fa:3a:c3:c0:ff:5a:7d:6d:96:ce:b7:92:0a:
8a:99:c1:a7:19:c7:44:2f:6c:26:b5:2c:bd:f8:0f:4b:06:ab:
02:c8:31:8b:2c:2d:f1:76:ad:b4:41:84:b4:ce:f0:10:89:ff:
d9:5d:d8:8a:76:ce:30:fe:af:16:3f:00:15:60:1d:ea:e7:a4:
e0:19:43:d8:58:74:89:71:68:e1:66:33:15:73:f7:1a:07:4e:
33:9e:f6:78:8d:5c:a2:68:cb:3c:1a:49:57:96:db:06:63:42:
dd:5a:d7:d4:4e:46:7b:2a:ed:72:df:bd:8f:06:db:25:5a:ba:
37:15:ee:5d:f1:ad:82:c9:ca:6c:c3:55:a2:ac:08:f9:7e:08:
64:15:e0:fa:a6:39:c8:c5:a0:fb:ae:cc:5a:f7:1c:f1:16:3a:
d4:94:14:d1:f8:6c:ca:87:43:27:28:a8:ef:63:04:f4:fb:c8:
87:f3:15:69:af:ff:1a:b0:ab:86:1f:fa:fc:9a:8e:bf:92:49:
c7:4f:79:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:07:49 2025 by rpki-client