Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
File: ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json)
Hash identifier: LMA38GlpPqAeXnIr1y1OVBUGtL0dfJShqEQaYsDox18=
Subject key identifier: 6C:F5:B5:E4:3C:B6:DB:5D:5F:6F:6F:30:85:4B:6F:B0:77:8F:98:65
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 01975AC962008E6E5530E9C5675FD5C04484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
Manifest number: 1587
Signing time: Tue 10 Jun 2025 17:00:36 +0000
Manifest this update: Tue 10 Jun 2025 17:00:36 +0000
Manifest next update: Wed 11 Jun 2025 17:00:36 +0000
Files and hashes: 1: Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa (hash: MQWABCmJmPzBZuvJm1UdXrqjK/z2moIohkG/Rp3fZtA=)
2: E3ZC-IKUFV8dsLuSPPYjoVWBSBk.roa (hash: /bl5hl4kqSXgSNneJaVMs/G9S7DHiQCDWl5lO8OIAgk=)
3: nBzRioAspYogjhuqMfmeJKfieBA.roa (hash: zMCnSjaFE4ydwmXDRAVpua0IoyMIX5RMql4K/75vlGo=)
4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: h2YzQtzT/ttp/MZMRfaIgycR7zFk8k7Khe1ZShrB0ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:62:00:8e:6e:55:30:e9:c5:67:5f:d5:c0:44:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Jun 10 17:00:36 2025 GMT
Not After : Jun 11 17:00:36 2025 GMT
Subject: CN=6cf5b5e43cb6db5d5f6f6f30854b6fb0778f9865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:88:29:cf:ad:73:f8:3a:cd:2d:1a:8c:2f:
7c:31:87:f4:6c:f0:4c:54:dd:55:f1:c2:d7:40:0d:
93:b0:b4:28:1f:66:d0:16:d6:d8:9a:4d:ec:7b:ba:
5a:31:6a:8d:e2:81:e2:99:53:f3:e8:df:36:e0:3c:
50:7f:a4:61:28:94:da:27:fd:b8:6f:88:ca:70:56:
04:59:2f:a8:72:1d:7b:93:81:90:ef:a0:9a:73:ab:
e0:7f:30:50:58:7a:36:7a:bb:a6:79:84:5e:15:82:
44:f2:4e:ca:64:09:92:3e:d2:6b:7a:30:a6:32:26:
e6:d4:3b:4c:3f:9b:86:b6:dd:8d:0b:51:b3:6a:ab:
5c:d8:e8:37:20:13:32:f2:47:4e:c3:7b:ca:c8:23:
c4:8b:ef:e5:44:8f:1f:9b:e3:20:a8:b5:9d:f9:25:
25:24:8f:ff:e4:1a:38:0e:23:d1:78:2a:17:f1:e7:
9c:c2:68:41:0e:79:41:35:93:ba:ba:6b:76:bb:80:
b8:67:be:33:c6:d7:54:bf:45:55:08:ca:aa:45:b0:
8b:1d:2a:ce:94:5a:10:c3:c4:09:db:ec:8d:3a:73:
93:37:19:a3:95:49:39:15:7d:9a:70:37:86:5b:26:
bc:48:c2:b1:c0:b2:88:22:c5:39:87:c3:8b:fd:dc:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F5:B5:E4:3C:B6:DB:5D:5F:6F:6F:30:85:4B:6F:B0:77:8F:98:65
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:66:0b:ef:f7:0e:de:da:f4:cd:f2:95:73:91:d3:4b:16:18:
ce:dd:56:3f:ec:dd:6d:7e:59:87:61:30:92:5a:53:c8:d0:7f:
88:da:13:fd:9d:c4:e6:dd:84:6f:6c:e8:7f:d2:0f:88:c8:de:
b7:29:48:48:5b:a4:6b:84:4a:91:55:8b:4b:b1:66:c7:ba:50:
6e:e4:31:18:30:68:b7:a9:86:08:27:ba:11:3a:05:46:70:39:
d1:16:e1:9a:6e:c7:6c:96:44:91:1b:85:73:1e:4a:f4:ae:09:
e2:c9:b7:38:38:7c:14:2b:21:fe:c9:2c:fb:4b:ac:8f:17:d7:
d8:12:f2:cf:6d:08:1c:9c:ce:c4:27:9e:4c:62:8e:93:4b:6a:
b2:58:4a:e2:1e:ef:42:81:37:82:6a:0d:dd:d8:d9:32:d1:b4:
4a:46:47:d5:4d:9a:bd:48:2a:10:21:bb:4e:e7:b6:30:a1:65:
68:9a:c0:50:26:07:00:65:75:6b:71:5f:38:1c:28:0a:d6:64:
91:4f:b8:14:66:bc:cf:a5:36:0e:04:05:b6:0e:22:f7:2a:8b:
f3:65:c5:3f:aa:1c:68:4b:24:2b:77:bd:10:29:2d:ba:dc:56:
a1:fc:97:c7:74:e1:75:b0:cf:52:18:6d:34:83:c2:a9:f2:f7:
eb:31:72:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:42:52 2025 by rpki-client