Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier: MLs2QwKeRBsMUQ4V+RGyDwdzLb4dIat5gDKpQRVs+18=
Subject key identifier: 43:FE:C8:65:6C:B6:1D:89:28:8F:DA:71:F5:10:4B:35:80:47:E6:7B
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 01974B56662CC07E32F33A6981E8DFF20300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number: 0EE9
Signing time: Sat 07 Jun 2025 17:00:42 +0000
Manifest this update: Sat 07 Jun 2025 17:00:42 +0000
Manifest next update: Sun 08 Jun 2025 17:00:42 +0000
Files and hashes: 1: pDhGAUUYTY1UyjFCug_VA9YXDfc.roa (hash: 6QASzR15fgb6kzzjuyGG0IHeby7n6I+Zv7YlWcP1xhM=)
2: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: vHBz6un05DQht6QcQlNtcs8mEOzdEfvJlbzjxBi65ow=)
3: zX5SsCvbtwgH75QXuBUCbtdy6Ww.roa (hash: wvJG3iztzAVZHUfCx2K+W5TdCzTlwS3eoby1xR0ldnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:66:2c:c0:7e:32:f3:3a:69:81:e8:df:f2:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: Jun 7 17:00:42 2025 GMT
Not After : Jun 8 17:00:42 2025 GMT
Subject: CN=43fec8656cb61d89288fda71f5104b358047e67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:fd:58:c8:7e:ab:a7:eb:30:af:4c:59:d2:
c8:1d:c2:10:d8:84:d7:e1:de:c4:aa:2b:dd:b8:be:
6c:52:f7:22:45:a7:a7:e0:3f:9f:34:a5:0e:2c:4d:
d3:47:38:fe:6a:e8:ab:74:66:30:4e:b8:a6:28:98:
97:77:0b:77:c5:e0:d5:75:99:d1:9b:84:3b:03:0b:
78:fc:86:52:f6:e0:7c:6a:72:77:d0:0c:af:a4:51:
1b:77:32:ac:89:c2:0d:79:11:f2:2c:87:1b:db:80:
73:6d:9f:1f:c4:19:90:ee:2d:29:fb:3a:fe:ae:f8:
1d:59:de:89:44:49:15:2f:b6:d8:cc:3d:dc:32:11:
ef:08:9f:76:43:2f:e1:25:4c:d2:27:af:b3:6c:8d:
e9:a1:dc:2e:25:76:44:1c:66:62:64:8a:0f:6e:6b:
3f:03:ed:d4:96:3a:25:a6:8c:ab:85:1e:e9:58:42:
ea:31:80:ec:e8:b5:ea:b3:ec:9b:f3:30:40:dd:eb:
99:86:05:cd:37:be:6c:cb:81:85:25:70:65:15:da:
b0:d8:31:4d:c7:7b:ff:12:05:cc:b0:82:e8:86:df:
aa:47:af:80:37:d2:07:ef:8e:d2:79:4c:33:7d:06:
ff:6e:64:19:bb:b1:44:e5:2e:59:06:76:ac:73:6f:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FE:C8:65:6C:B6:1D:89:28:8F:DA:71:F5:10:4B:35:80:47:E6:7B
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f3:71:84:47:4e:cf:13:b4:e5:bc:a7:29:0b:53:26:2b:3d:
5b:32:c8:7f:66:79:cb:6f:d9:8e:d9:92:76:b2:17:07:79:00:
96:c6:bc:9f:e9:01:6f:88:75:7f:5d:73:29:b2:21:f9:da:7a:
dc:1a:dd:79:fc:e7:f2:d9:06:d4:9f:72:d6:ad:88:67:18:e3:
a9:c2:ff:58:ed:93:7a:cf:a2:d1:9f:bf:70:5f:bc:c7:38:41:
ef:2b:2f:ec:36:ba:ec:53:eb:00:3e:2b:84:29:97:f6:4e:a0:
43:5f:0f:ce:83:00:ef:e3:cf:c4:be:76:9e:b7:87:76:f5:6b:
ba:33:a4:6c:ba:f8:02:ef:d5:7a:7a:44:37:f9:1b:4b:72:94:
a4:3f:44:10:20:45:fa:4b:fc:4b:4a:dd:00:fa:fa:7c:76:3e:
a6:88:9d:73:3a:38:fa:72:5e:3e:fb:12:49:0a:ab:59:db:1b:
e7:82:1c:47:b4:cd:b6:5d:38:d5:62:98:7d:18:5f:46:42:7a:
7a:50:f9:98:81:12:3a:df:ed:fe:a0:2d:51:dd:9e:0c:a5:25:
f0:38:12:e9:d6:5c:b0:e8:1a:44:d5:4b:dd:ef:19:43:fc:f1:
2a:46:5f:7d:64:04:96:7d:ff:e8:25:53:d4:4a:ae:af:90:9d:
de:11:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:28:58 2025 by rpki-client