Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
File: ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json)
Hash identifier: e9S2ruYJyEx3A8dPBPcIOHZw+07OHOPcchvmwjtMsqA=
Subject key identifier: 4C:58:FC:BE:5C:79:8D:7A:C7:6B:28:84:C2:EF:E5:97:25:0D:77:81
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 01975CB796FA4EF9403D0EF53BED901DBAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 02:00:24 +0000
Manifest this update: Wed 11 Jun 2025 02:00:24 +0000
Manifest next update: Thu 12 Jun 2025 02:00:24 +0000
Files and hashes: 1: RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa (hash: hQavpFz2oCU1+0mLco5J0o7jUBnjsvfgN8INGoEF0q0=)
2: a79ubTTcO-rbEIzEJnpKg6XrOxE.roa (hash: IYsHiJt20/J4LFVzebr5lpEx8b1KgX8azoIHYgZmQIM=)
3: cwftnOMJWL6OI0cFl6W2kZiEivw.roa (hash: tMF0bm//N5hKVf/varVEdqE9/zqDLvcE/naNsmtxwqE=)
4: sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa (hash: tk2qiKz5w3ItJrfdyPO9YfeczBBuvWHAVgHNYJne0ws=)
5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: 0E9HkCq4g/S9W6ePULnAonwjuD9dW47B2zeW4Md4Dgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b7:96:fa:4e:f9:40:3d:0e:f5:3b:ed:90:1d:ba:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Jun 11 02:00:24 2025 GMT
Not After : Jun 12 02:00:24 2025 GMT
Subject: CN=4c58fcbe5c798d7ac76b2884c2efe597250d7781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:a7:f3:ec:aa:13:1b:79:a3:7a:9d:6e:3d:
6d:a8:d4:be:85:7e:a7:f2:44:7e:41:91:84:9e:9f:
67:37:63:fc:78:5a:b0:fe:7a:5c:f8:6a:e0:45:24:
f5:fc:63:0d:77:50:10:9b:ca:c3:e5:02:0c:11:26:
7e:81:b0:79:eb:64:51:b7:ea:f0:8f:68:b6:64:21:
fc:b7:5e:ad:ca:ae:ff:23:55:52:43:64:ca:da:56:
73:7c:09:90:b9:1a:8e:e1:79:5c:63:bb:41:7a:86:
22:1d:ac:69:3c:50:c9:04:09:f5:93:82:7d:80:a2:
ac:f6:8d:3d:6e:31:8a:21:20:4b:ad:dd:36:cd:8f:
e2:f7:34:f8:f6:f5:87:7f:43:83:9b:ae:f8:27:e4:
c8:3b:0d:eb:52:28:ae:45:b0:8f:34:74:2f:f5:b5:
71:ee:5b:58:aa:32:7e:a7:a0:18:33:5c:70:59:f8:
1b:07:6e:be:eb:fb:e5:ce:87:a9:69:1c:c6:e2:91:
b5:32:40:0e:9c:45:3b:c1:d3:c5:00:3e:40:4c:23:
ab:a0:d2:0c:7a:36:1a:c0:47:bc:b8:fe:98:b1:fc:
22:6e:01:e7:44:c7:8d:64:d1:d2:4e:6e:59:53:80:
47:2a:04:0f:b3:37:9b:aa:c9:d6:0f:5f:c4:82:35:
18:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:58:FC:BE:5C:79:8D:7A:C7:6B:28:84:C2:EF:E5:97:25:0D:77:81
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0c:42:92:31:55:59:cf:89:77:c9:37:5f:4a:84:6f:ef:0c:
d0:e9:5a:ab:27:6b:9d:6f:25:b6:6a:96:73:ca:34:17:65:8e:
71:1c:55:2e:27:b7:b6:cd:91:3d:20:0e:eb:2a:5d:a7:6c:b0:
e5:9b:5f:59:3a:29:8c:93:f7:bb:49:34:7a:f6:01:b2:99:0f:
43:23:82:0a:3f:21:e2:ad:15:0b:76:10:0b:a8:58:32:cf:70:
3a:89:5c:22:0f:57:c7:c1:77:8e:1a:c5:f6:38:60:e7:6a:90:
ca:a3:66:d2:6f:0d:81:2b:f7:a8:5d:f8:4e:a6:53:05:22:87:
3a:5d:db:bf:1d:b0:44:6b:3a:e0:4b:ab:fa:1f:e6:d5:c8:6f:
77:4b:1b:94:4b:36:c9:6b:08:47:bb:70:28:f8:a5:83:70:34:
7f:3b:f5:3a:bc:1d:1b:86:23:2a:7e:b3:ef:52:ca:09:0d:a4:
38:6b:09:ca:d4:69:14:26:bd:ed:28:d7:4d:74:3e:12:fa:07:
b9:cf:2e:8b:cb:c7:1c:a9:76:31:92:30:21:bb:13:c1:23:85:
e6:a0:34:e7:2f:a1:b0:6e:38:30:ad:e0:a7:71:eb:03:5e:4a:
b7:a4:02:f3:8f:3d:fe:4a:11:23:a9:92:a4:51:b4:66:38:1c:
d9:fb:d8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:25:40 2025 by rpki-client