Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: cCkVoHgCqUeDhmJBDkEWLHfI1yuBnEEP6ugH+lM9QrE=
Subject key identifier: C6:E6:ED:9D:D2:9C:B0:EB:41:B3:41:20:82:4B:2E:86:CC:12:9D:F4
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 019749D5C2476E89CEA2036A39ECF15E994A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 10:00:34 +0000
Manifest this update: Sat 07 Jun 2025 10:00:34 +0000
Manifest next update: Sun 08 Jun 2025 10:00:34 +0000
Files and hashes: 1: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: 7ypqkFCwKmYW4P/aQKTk201pf2lstMeX3ZsiGpp3SgE=)
2: b6QMF74wF01wlBWgUywRsmP3cGw.roa (hash: mCNVR2N9fZow4RurrMaom9Uu+qamMdZIjWplYZcfRCk=)
3: gVLVKsEHBgFO0HBzlpPgO1QXFuY.roa (hash: fKAtB5hizqASF48vAvN9nOmMRZOKAzC8UCmGWDZ4vi0=)
4: nCahf5trEXt1Ll4GxNBIlQJyFoQ.roa (hash: jcflcFSB0gGF5Eobckb0cDmbAhuF6soPeVbl+/qaprQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:c2:47:6e:89:ce:a2:03:6a:39:ec:f1:5e:99:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Jun 7 10:00:34 2025 GMT
Not After : Jun 8 10:00:34 2025 GMT
Subject: CN=c6e6ed9dd29cb0eb41b34120824b2e86cc129df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:37:9f:d7:ae:7e:bb:5e:10:dc:87:1c:8c:
ec:77:5f:54:4f:32:a0:7d:72:84:bb:a1:f8:cf:1e:
b4:9e:a9:d3:68:90:b6:ab:58:cf:42:3a:c4:c4:a2:
a5:e7:26:03:8f:37:4b:4e:db:46:08:3a:67:d3:3b:
33:91:f3:be:32:16:11:53:20:51:03:f2:d9:5b:e8:
00:6e:34:d1:42:10:e0:71:6c:18:ac:b0:31:0f:9f:
66:19:8b:a0:de:9e:be:d5:25:00:88:91:cd:7f:8b:
23:26:fa:36:29:6f:6a:b6:e3:18:7b:d3:a0:2d:b8:
61:22:93:ac:c3:d4:c1:04:f7:bc:b5:24:e4:2b:95:
9b:7c:4e:55:50:2d:ed:d5:0f:c0:ac:92:b7:16:07:
9f:39:a2:5a:89:52:ec:ae:81:44:80:f2:2f:03:18:
62:a3:11:ba:9c:14:6f:70:83:ae:d5:53:e3:34:3d:
45:2d:f3:f1:63:59:a7:78:29:f0:2a:de:29:ca:7c:
6f:8f:a0:7d:2c:27:2c:b5:df:a2:ef:4a:3d:e6:a8:
a8:37:0a:5c:c1:09:61:62:5a:7a:f3:2a:3b:be:0e:
bc:6b:e0:77:a6:39:a0:5b:cf:6f:e8:e8:90:37:76:
49:7b:39:ec:56:58:65:52:36:bd:25:95:39:6e:6d:
2d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E6:ED:9D:D2:9C:B0:EB:41:B3:41:20:82:4B:2E:86:CC:12:9D:F4
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2f:11:9d:f3:c1:d8:fe:4f:42:92:f0:13:93:b1:9b:d4:5b:
43:a0:e2:6f:f3:e6:06:f9:91:69:6e:45:49:16:68:14:40:7d:
fb:f6:1f:61:a3:d9:4a:24:2e:04:57:06:6f:25:ff:14:1d:66:
e0:86:45:17:09:15:2b:0e:e4:c7:46:3f:57:f5:65:86:38:2b:
c5:ff:d1:0c:8b:c2:09:2e:8d:a5:b3:7a:5a:e0:86:55:fb:28:
bb:19:7d:c5:a3:18:21:0c:bf:f0:9d:a3:0f:fd:c6:a0:2e:5b:
84:58:ff:a7:73:5f:e9:90:8c:fd:ac:32:07:b9:cf:ca:44:9e:
87:98:13:ef:f1:d4:64:b0:73:2b:49:a8:78:8d:69:08:09:ea:
ab:cd:e4:2d:c3:50:9c:f7:d4:7d:ae:47:18:4c:4a:5d:28:3d:
99:f2:33:d9:87:9f:24:c1:87:cd:97:62:8f:0b:65:9a:0e:2d:
ab:bf:07:c3:55:76:c8:42:1c:d4:3c:2f:5d:4c:14:1c:bb:3f:
2a:51:d3:30:5e:47:3e:91:62:69:56:fb:bd:b3:8c:da:34:33:
70:70:a3:f3:c7:51:25:02:52:4f:2d:ab:a1:68:d0:89:cd:27:
9b:fe:5f:1e:41:a5:b1:02:d4:3f:fe:32:ef:17:4f:a9:43:80:
16:00:01:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:37:37 2025 by rpki-client