Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: pAtbRCMzQllUQAF685TcCvuONrCdHdyshD30WkyWbcs=
Subject key identifier: 6E:40:0E:0B:7D:2D:99:C7:25:6B:B6:C9:46:84:CB:FD:9F:2B:6E:FA
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 01973919F395D8214349302340DF619F032F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 09DB
Signing time: Wed 04 Jun 2025 04:01:31 +0000
Manifest this update: Wed 04 Jun 2025 04:01:31 +0000
Manifest next update: Thu 05 Jun 2025 04:01:31 +0000
Files and hashes: 1: JZLfCpTMSe09vK_TLbLQFlxw2Ds.roa (hash: oEwUEmn9BEj5nCyDqmNSjb0S6HVplNaKnZXZP0H/66Q=)
2: UojdXawnx16jHvQuUPhyRGr9AUA.roa (hash: Hr78TmcOhe37IFpeiMzuuAac0/dugWioMJ66bJbp/E8=)
3: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: TB5EhbAqLdKFS1Gh1r9PnRKQgtirCQ+5TXQ9LVaOA8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:19:f3:95:d8:21:43:49:30:23:40:df:61:9f:03:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Jun 4 04:01:31 2025 GMT
Not After : Jun 5 04:01:31 2025 GMT
Subject: CN=6e400e0b7d2d99c7256bb6c94684cbfd9f2b6efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:ae:2e:7d:be:3c:62:6e:ed:07:c7:62:de:
36:94:55:d2:2c:83:72:e3:3c:d7:42:10:9f:d8:c9:
8e:26:d9:6b:92:ad:f4:18:ab:26:70:71:c5:eb:0d:
97:d5:be:e4:a3:29:71:46:18:a8:85:49:a6:fc:5a:
79:ab:b7:77:38:5c:6c:7c:89:08:87:41:d0:d6:3c:
fc:e0:c5:e5:9a:ee:9f:fa:e5:40:af:4c:c3:48:b8:
de:29:0f:fd:b2:29:d5:a3:6a:0b:1f:31:5f:ef:71:
85:a7:69:f5:37:91:40:b3:84:70:7c:70:1c:1d:d6:
ad:09:13:c6:2d:36:8d:12:6f:58:b7:a2:9a:8a:39:
23:e1:4e:10:f1:07:86:aa:34:2d:ff:7a:cf:82:ed:
b3:da:c3:7d:50:33:51:3e:6d:8a:ab:9f:c9:9f:f7:
b5:3c:cd:ef:77:95:b1:9d:4b:b9:76:d5:55:a2:5f:
12:4f:bc:ac:fc:3f:d8:a6:71:45:93:80:05:a4:b2:
1e:8e:7b:c4:70:a2:f1:c6:68:c9:58:2a:04:42:27:
5f:7c:78:e1:78:c3:bc:20:61:de:d0:4c:36:01:be:
76:d1:5b:af:f4:12:22:82:0c:63:47:af:4d:d2:c0:
5b:4a:92:61:ee:fa:06:9a:aa:dc:1c:85:d4:62:e9:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:40:0E:0B:7D:2D:99:C7:25:6B:B6:C9:46:84:CB:FD:9F:2B:6E:FA
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e3:65:99:75:40:60:a4:59:30:1d:4d:67:85:e5:ee:83:7d:
6f:4e:54:f9:f2:35:80:39:09:46:7a:5b:93:52:87:35:a4:00:
f6:cf:dd:e4:33:5b:c2:22:ac:97:5c:6d:3d:be:38:83:19:73:
57:ce:5c:40:91:0b:12:6c:e8:6a:e2:f6:24:46:4c:55:fe:0b:
f3:66:75:00:03:bb:66:d3:e1:ed:a0:af:bb:b6:60:f7:d7:03:
85:76:b6:b2:3b:bc:97:2a:36:15:25:0b:09:63:6c:85:c2:4a:
98:6b:18:e4:b1:af:5b:fc:54:06:23:c8:ca:ff:0a:e8:7d:46:
25:08:e9:90:f1:2e:0f:d8:e8:72:ee:ab:eb:2e:38:16:cd:2b:
ae:00:47:e8:88:59:35:d0:cc:2a:fc:f5:03:42:0b:3e:4b:b6:
4b:54:de:cd:ac:ae:80:75:81:47:ed:8e:91:26:4e:36:e2:8f:
fc:25:a9:b4:19:9f:8d:d6:4c:bc:24:29:a1:d5:19:76:bd:ba:
5f:c9:f9:61:e4:43:b9:c6:81:63:a6:33:df:c0:95:17:a4:d7:
bc:e4:a5:ee:15:71:e1:c7:45:16:dc:51:8b:93:4d:73:ed:26:
3b:2e:b8:8e:42:55:6d:85:3e:7c:58:ed:be:04:82:81:1e:06:
ba:93:fd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:41:50 2025 by rpki-client