Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: 8qR9VNKFPh9xthkuPQbSTdrnXtnNuWR2UKaqAu+xGhw=
Subject key identifier: DA:E7:05:22:26:6D:54:22:A7:3E:B8:C8:F3:42:C4:EC:08:99:53:74
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 01976327F711B7ADF7B2996F035056FC9A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 0415
Signing time: Thu 12 Jun 2025 08:00:52 +0000
Manifest this update: Thu 12 Jun 2025 08:00:52 +0000
Manifest next update: Fri 13 Jun 2025 08:00:52 +0000
Files and hashes: 1: R7JjHxkLaRMAq-eNFDHFR56Dyhw.roa (hash: QknjqXJUcPnKm7YDFtc8WvDMm5i4FQMrmsy86E9cK0o=)
2: dcPmo2XYjicBKISwFo1ah0M8EAk.roa (hash: dxaAbmfm7We1eLkAnEaZ1vpiKLgIut7Bw847FmfAdkc=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: KYTfC5Umno6YyZ+lQWnfbe3OhvnuA9v11JAH8tnN55w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:27:f7:11:b7:ad:f7:b2:99:6f:03:50:56:fc:9a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Jun 12 08:00:52 2025 GMT
Not After : Jun 13 08:00:52 2025 GMT
Subject: CN=dae70522266d5422a73eb8c8f342c4ec08995374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:c3:6e:fd:96:d2:72:54:18:3f:c2:8e:29:
41:fd:db:21:09:7d:b0:4c:1d:2c:26:23:4d:4b:90:
f3:fc:a3:cb:b7:a9:83:f9:5f:74:36:b7:96:19:ab:
87:a6:20:09:0d:c6:e9:06:13:d7:e1:ee:2f:f0:42:
27:76:3a:5d:74:9c:01:6c:e1:d4:8a:c4:65:21:52:
fd:6c:e8:14:21:71:7c:33:77:50:38:a8:e3:cb:36:
02:f3:f5:89:e9:5e:61:59:df:ec:35:fb:72:3e:86:
53:b0:8d:0f:dd:d7:b9:0f:33:02:07:e7:ae:75:4e:
a0:1f:42:1f:bd:83:f3:6a:8b:47:94:ac:8f:be:87:
c8:d0:93:cb:18:48:d7:f0:3b:31:de:91:26:7d:7c:
ec:84:d8:32:4f:e2:14:a4:f5:9d:b3:81:88:d7:dd:
1b:c9:b5:19:bf:ba:de:8d:31:72:3e:f4:da:ed:eb:
b8:31:d6:a5:30:35:bb:17:3e:ef:4d:28:53:39:20:
af:98:d6:b2:83:9e:92:3c:36:8f:03:bc:d7:59:73:
bd:64:c7:9d:60:31:12:70:fd:75:6d:f2:f3:37:6a:
c9:bd:e5:62:dd:57:50:32:84:f9:fd:bd:80:03:b9:
40:23:38:e6:48:62:d6:88:e3:8d:4c:97:4c:f3:f8:
0b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E7:05:22:26:6D:54:22:A7:3E:B8:C8:F3:42:C4:EC:08:99:53:74
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:18:95:f0:0f:20:43:9c:0b:b7:13:82:ec:a1:ae:99:f2:c7:
06:75:c3:22:55:f8:39:28:95:9a:7d:f9:09:dc:c2:d0:c6:a6:
e4:ab:01:54:61:47:89:14:88:3a:6e:0f:aa:37:bb:96:08:5b:
ae:6a:a1:6e:12:2c:97:af:2c:74:21:d4:20:27:81:97:14:5c:
49:ef:38:56:e0:95:37:2c:1c:5b:2a:a4:fd:ee:6c:1b:03:d2:
5d:a2:16:bc:d1:f6:24:a6:00:58:05:e2:1b:58:c9:5c:e8:2d:
9a:ab:6d:54:13:1c:95:73:39:cc:02:d7:a0:a2:09:87:1c:b0:
e6:59:3d:6b:b2:fb:f0:6f:62:0a:b6:7c:e7:6e:cd:32:85:fa:
a5:d3:cb:2b:99:d4:e1:01:17:87:d6:75:8b:2f:e5:99:20:f6:
79:0c:35:a1:db:71:7c:3a:fd:ff:9e:70:d3:3f:8d:e0:2e:4d:
0c:d0:79:2b:e1:75:5c:eb:a3:84:c2:74:81:45:4b:21:f8:b6:
92:d1:e3:15:75:00:d0:59:85:bb:51:b1:59:f1:06:97:0a:64:
1b:6a:67:3c:c0:65:fe:bb:00:ab:d7:ca:0e:72:ee:e4:ee:10:
21:52:ac:1f:a6:af:e1:04:81:81:5f:d8:24:df:7b:97:3e:8b:
4c:58:e2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:05:45 2025 by rpki-client