Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
File: zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json)
Hash identifier: vfMavvpWkUtAixP/iEcczT2/5CvakdutWmpEiidUQBY=
Subject key identifier: 9E:09:C0:91:8E:E8:A3:F7:14:C5:2A:EA:F5:54:0D:42:50:3D:DB:0F
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 019748F9C9E251745E2E5484698E3DE27C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 06:00:19 +0000
Manifest this update: Sat 07 Jun 2025 06:00:19 +0000
Manifest next update: Sun 08 Jun 2025 06:00:19 +0000
Files and hashes: 1: 3TjgfHBQ3TSR3m9y0lvASlg8xJE.roa (hash: xhRBJVrNxo2QfSSHQs80HTy1SPE+Tw63EIyLJNfW+98=)
2: O9iKTZs-NSCx-2a4wz3hixLMrQo.roa (hash: 9kWdgObviNsf7fH09ytaVex94ijVjQzdPVkcYWojJN8=)
3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: UxW3zHMVO/hEBew8ghGKAytMfDs508kCg5XxHw+5x2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:c9:e2:51:74:5e:2e:54:84:69:8e:3d:e2:7c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: Jun 7 06:00:19 2025 GMT
Not After : Jun 8 06:00:19 2025 GMT
Subject: CN=9e09c0918ee8a3f714c52aeaf5540d42503ddb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:36:9e:a4:a4:2e:e3:ac:a2:0a:61:14:67:
0c:30:e3:f7:b5:ae:d7:d6:e5:67:43:98:0a:e8:4b:
50:5e:15:c5:fa:7d:dd:42:14:5b:39:4f:b5:77:71:
b1:50:a6:2b:8a:bd:6d:ba:96:8f:9e:be:be:16:f9:
8f:9b:53:5f:21:a3:f2:37:8b:ca:62:24:5c:f7:42:
32:07:36:de:59:49:25:3e:a5:22:1a:d6:c4:57:a0:
f9:17:69:0e:8c:85:3b:94:c2:a9:b3:e9:cb:6b:f6:
22:aa:aa:ae:66:d8:b9:52:d4:0d:43:c4:55:33:12:
06:3e:2a:4c:6e:e0:e5:45:66:d6:5c:89:8e:32:81:
28:70:6e:f3:24:56:88:43:e7:73:dd:3a:04:80:68:
f5:d7:d6:a1:2e:ce:51:04:b6:78:13:b5:f3:89:95:
f9:db:7d:36:ff:43:7a:0e:8e:e9:e7:4e:b2:f7:8a:
8a:b5:08:41:49:62:81:bf:cc:0b:3e:a4:21:52:30:
0d:f5:e0:8a:d1:e8:75:83:60:07:e6:42:0e:84:90:
bc:aa:0a:7d:88:4f:fe:b7:1b:bc:7e:93:3f:34:59:
72:68:92:05:e1:56:0d:47:d3:6e:dc:7e:90:e1:a2:
bc:f7:92:62:06:e1:e0:b2:09:60:eb:7d:e8:29:ae:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:C0:91:8E:E8:A3:F7:14:C5:2A:EA:F5:54:0D:42:50:3D:DB:0F
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:25:fa:0f:ce:8a:d0:52:70:8b:05:93:da:7a:5c:90:17:42:
4f:db:e3:e4:8e:51:cd:ba:60:f2:76:1d:67:06:5e:f6:78:ea:
c3:dc:8c:a6:84:e4:3d:11:01:39:98:a0:86:e1:46:e9:63:fa:
77:9f:17:e3:10:3d:c6:b5:55:00:16:64:e6:88:20:b2:b1:2e:
75:4d:ae:f5:d5:43:04:d6:c0:ec:da:e9:13:31:19:04:45:fc:
20:bb:7d:98:4e:31:34:8b:e1:79:29:eb:f3:5d:90:22:af:14:
99:27:bb:a3:1e:d8:45:54:0c:56:8c:bd:44:10:30:ca:33:ac:
df:fa:35:4e:7a:d3:5e:e4:8c:86:45:49:73:99:5e:66:1f:27:
cd:67:a2:46:51:90:71:ea:36:9d:43:7e:3e:87:37:1c:34:78:
77:ca:f4:f7:22:f5:df:4b:68:8a:9a:a8:bc:d5:43:c3:22:28:
3e:c9:d3:cc:5d:43:5f:8a:48:3e:2a:b6:5e:66:fe:ce:d8:84:
2f:9e:43:f6:49:59:ac:d7:5b:91:00:e8:02:82:e6:46:cf:10:
03:9b:e9:34:66:35:51:ca:65:56:61:08:e4:fd:ce:a0:dc:5b:
5d:2c:f8:21:e6:5d:71:bd:98:7a:49:ff:32:01:a2:cf:e9:9e:
6d:d8:d3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:41 2025 by rpki-client