Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft
File: ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft (raw, json)
Hash identifier: 6+hH9CgJpgRVhjwQ3HztBQkOY0PxTKrYy0Jcq9BbAoY=
Subject key identifier: 1E:D0:FC:5F:50:BE:B5:51:9B:E5:84:56:6A:32:AD:3F:12:90:32:4A
Authority key identifier: 64:C2:49:3E:4C:2E:EA:93:0B:1E:C2:C8:36:3D:2D:1F:FA:E6:E1:7E
Certificate issuer: /CN=64c2493e4c2eea930b1ec2c8363d2d1ffae6e17e
Certificate serial: 0197C8DDD41FA47EFC8520C55C5C34730582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMJJPkwu6pMLHsLINj0tH_rm4X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft
Manifest number: 2E
Signing time: Wed 02 Jul 2025 02:01:10 +0000
Manifest this update: Wed 02 Jul 2025 02:01:10 +0000
Manifest next update: Thu 03 Jul 2025 02:01:10 +0000
Files and hashes: 1: MckCG4y-wri8O-rhV1d-4APvk7Q.roa (hash: t6aCmEdp+Iv6iGvY/88GuOgzU150j1sRRJp3dvFtQRo=)
2: ZMJJPkwu6pMLHsLINj0tH_rm4X4.crl (hash: MTQq8nS6wuacm+DRN8Abzs0fe8EcDtZP6b9IFRwl0dY=)
3: wZYr5pA49UEOjk728OoUqLp-LgE.roa (hash: x0qHAy3trHy7B4i8jS/LA3sJJ8rnNp07je101ERYGWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMJJPkwu6pMLHsLINj0tH_rm4X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:dd:d4:1f:a4:7e:fc:85:20:c5:5c:5c:34:73:05:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c2493e4c2eea930b1ec2c8363d2d1ffae6e17e
Validity
Not Before: Jul 2 02:01:10 2025 GMT
Not After : Jul 3 02:01:10 2025 GMT
Subject: CN=1ed0fc5f50beb5519be584566a32ad3f1290324a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:ba:72:c3:c6:59:5a:a5:27:f4:52:14:b9:
74:ed:93:e8:33:d0:01:f4:d7:1c:e2:cd:ef:34:f4:
bf:25:f6:81:fb:ea:0a:98:69:bc:68:09:72:a3:66:
ac:16:e1:88:e6:9c:5f:0c:14:52:15:46:97:5b:1a:
0d:33:e2:5e:93:6c:5f:45:52:3d:97:34:3a:d9:6b:
ff:fe:86:a1:bf:16:c3:6f:d8:b2:73:a8:27:ae:61:
fe:91:1c:d6:c7:05:11:a2:f8:c0:a1:28:90:5e:25:
be:10:51:7b:16:1e:1a:80:90:18:46:37:8e:a9:65:
e8:4c:93:77:76:85:09:33:3a:c0:97:d4:f7:a8:59:
0b:76:5c:97:4b:cc:a3:0b:0a:2d:a8:1d:e9:08:33:
3e:49:66:60:6b:96:77:03:d0:9c:dc:60:42:7c:ab:
cc:74:90:40:0d:f7:e0:98:4c:2e:0d:d3:47:8c:7a:
27:55:19:95:0d:8d:e8:0c:a5:f5:69:90:f4:82:5a:
93:fd:d6:60:57:be:dd:65:39:50:4c:8f:d3:c8:53:
db:8a:d7:27:06:f3:50:60:cb:b3:ca:34:0a:1b:be:
cc:3e:68:14:b5:8a:9a:99:90:d3:a4:57:13:f7:11:
69:df:9e:cf:99:44:aa:66:a0:62:75:e5:f8:7a:fe:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D0:FC:5F:50:BE:B5:51:9B:E5:84:56:6A:32:AD:3F:12:90:32:4A
X509v3 Authority Key Identifier:
keyid:64:C2:49:3E:4C:2E:EA:93:0B:1E:C2:C8:36:3D:2D:1F:FA:E6:E1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMJJPkwu6pMLHsLINj0tH_rm4X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:54:1a:b3:5c:a9:ef:ed:9c:b0:3d:ae:43:01:b7:f1:af:bb:
e0:53:75:48:a7:52:3d:b5:62:53:15:66:4f:28:08:b1:c7:17:
f1:6a:f9:28:92:03:d1:63:14:f8:33:57:af:60:89:cf:6b:81:
9e:58:89:2c:22:00:4c:d2:0f:98:44:06:9d:e2:40:0c:e4:57:
b8:6d:e8:4d:e0:ed:06:12:26:1a:fd:ad:f1:c0:73:a5:9a:9b:
b1:b2:a3:f3:c5:68:ac:8a:99:ed:64:d5:7f:5d:69:52:70:9e:
05:e8:51:74:ae:eb:88:bd:ad:e2:cb:af:45:b6:0e:6f:b7:22:
cd:f2:44:77:7f:ed:84:61:a6:c9:c0:d3:56:be:db:d3:b5:b4:
25:d1:60:43:76:4c:38:c7:58:d3:5b:4a:cd:01:e5:21:56:30:
ab:c4:fa:16:4b:d8:1a:bf:1b:91:d0:d9:e3:74:98:af:d3:ae:
ab:0e:3a:13:fa:27:d0:d1:4e:80:5b:5c:7a:21:38:6a:07:28:
87:53:aa:6d:b6:4e:4b:88:37:4b:91:77:f4:2a:e3:de:5f:06:
1a:74:35:d7:51:64:e8:b9:ed:1f:90:e1:86:e9:46:cd:ca:ae:
95:cb:eb:c6:bc:4d:0d:b5:c8:58:2e:b3:9a:ed:78:87:cc:03:
e9:41:d4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:48:21 2025 by rpki-client