Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
File: ZAsfh3LG70hOLNLWYmPy75j6OWg.mft (raw, json)
Hash identifier: QMHcCRPpdRRLGDA+HU8u9da8NRqYNROzQ0g5MGrb7uM=
Subject key identifier: 77:19:C3:EC:34:74:1E:82:80:B6:F9:DC:33:71:7B:86:E6:AA:19:7A
Authority key identifier: 64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
Certificate issuer: /CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Certificate serial: 01974BC3FB90F4CDA56D4608CF1B49FCBDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 19:00:24 +0000
Manifest this update: Sat 07 Jun 2025 19:00:24 +0000
Manifest next update: Sun 08 Jun 2025 19:00:24 +0000
Files and hashes: 1: 5sIyZUUxUKqIAWVgUkx5eBGU5N0.roa (hash: 3M5MqZOHY6IgU/oY5PEX9Quago5F235Gft3ZQVLU+EE=)
2: ZAsfh3LG70hOLNLWYmPy75j6OWg.crl (hash: fwW2cRphlaUhV0TuyKoua771n7n/htgqQZnC9xTVLdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c3:fb:90:f4:cd:a5:6d:46:08:cf:1b:49:fc:bd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Validity
Not Before: Jun 7 19:00:24 2025 GMT
Not After : Jun 8 19:00:24 2025 GMT
Subject: CN=7719c3ec34741e8280b6f9dc33717b86e6aa197a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:42:27:95:88:c9:81:e5:32:fc:e7:b7:80:90:
0e:a3:8f:75:97:e4:d7:23:fb:6d:58:16:20:dd:75:
44:65:c2:68:e1:32:bb:98:7b:a8:cf:0a:b3:24:7e:
d0:d8:62:dc:58:ea:03:34:04:b3:5e:41:4d:a1:79:
71:d2:da:54:70:a1:68:59:e8:b3:28:12:09:39:b8:
a1:dd:ca:7b:99:23:e7:5c:a9:b8:2d:f5:30:e7:ce:
b2:7a:09:3a:a0:27:ca:1f:b2:1a:1e:ba:f4:d4:48:
22:3d:ce:c9:80:a5:29:06:bd:31:43:01:68:0f:2b:
66:09:d4:5b:c2:08:3a:3d:5c:30:c4:79:e6:6c:10:
b5:6b:27:33:45:f0:b2:33:56:5c:37:ce:b9:5f:d2:
4a:4a:c0:f9:8b:90:54:3e:6a:7a:92:24:dd:a6:e9:
ac:0a:6f:86:11:b6:7e:35:cc:4a:9c:52:55:72:88:
84:4e:c1:e2:f0:d6:b6:99:16:99:eb:23:03:d9:3e:
3e:6f:bf:ec:e9:0e:fe:2a:88:eb:c5:5c:36:bd:a3:
ed:bd:49:af:4f:b9:19:4d:a2:27:9b:f0:d2:06:ab:
b4:43:fb:0b:4c:af:78:22:d4:ea:2a:e5:66:c3:24:
b4:e4:4c:f8:14:3a:1a:67:ec:18:08:c4:75:0e:07:
b1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:19:C3:EC:34:74:1E:82:80:B6:F9:DC:33:71:7B:86:E6:AA:19:7A
X509v3 Authority Key Identifier:
keyid:64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4b:f6:f5:07:cb:16:0e:03:6a:83:59:dc:c8:53:02:ac:4f:
2f:18:1c:c0:cf:6c:d5:89:6f:8e:76:ec:62:f4:b5:b4:aa:88:
a6:a6:6d:6d:ff:c9:21:3d:23:4c:be:a1:46:60:30:5a:65:89:
10:b3:e8:d6:34:dd:cd:5e:df:fd:77:f0:07:dc:c2:6d:3b:ef:
8f:27:48:3e:4d:84:88:b1:23:c7:7a:7b:cd:cd:05:17:56:f6:
91:7c:db:4a:8c:89:05:38:77:d4:92:d4:60:eb:42:45:ed:92:
45:b3:b9:f5:83:d8:30:73:ce:b0:f8:5b:84:d9:15:cf:ab:aa:
b2:73:85:36:ef:7c:b0:77:6c:1d:40:a1:f1:41:87:14:7e:9e:
80:e0:8a:ce:12:df:02:68:57:e2:f7:c8:2c:ea:dc:69:8e:2a:
9c:e1:8f:4f:32:ee:f0:27:90:a0:76:ee:0d:da:c3:3d:04:78:
c7:0e:02:fa:23:f7:b2:19:14:1e:b7:c0:62:3e:b1:de:a5:c7:
03:fa:d3:0c:3c:8e:f5:8a:27:e5:85:69:42:8c:c6:22:73:10:
c7:e0:b8:aa:90:1e:5b:10:05:ca:20:09:c0:29:57:a1:67:70:
45:94:06:25:84:5a:54:e4:61:86:18:af:62:1e:f4:01:62:f7:
45:09:11:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:09 2025 by rpki-client