Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
File: ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json)
Hash identifier: zudNGfZD7I5WUoJMtERo93XjiBekLZSj4BSHuTDs75k=
Subject key identifier: 52:D9:EC:96:36:90:AA:A2:8C:01:E3:27:2D:11:28:5F:31:3E:41:5E
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 0197647132880B499DDFE9FA0A63BC5DCDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
Manifest number: 158D
Signing time: Thu 12 Jun 2025 14:00:29 +0000
Manifest this update: Thu 12 Jun 2025 14:00:29 +0000
Manifest next update: Fri 13 Jun 2025 14:00:29 +0000
Files and hashes: 1: RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa (hash: hQavpFz2oCU1+0mLco5J0o7jUBnjsvfgN8INGoEF0q0=)
2: a79ubTTcO-rbEIzEJnpKg6XrOxE.roa (hash: IYsHiJt20/J4LFVzebr5lpEx8b1KgX8azoIHYgZmQIM=)
3: cwftnOMJWL6OI0cFl6W2kZiEivw.roa (hash: tMF0bm//N5hKVf/varVEdqE9/zqDLvcE/naNsmtxwqE=)
4: sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa (hash: tk2qiKz5w3ItJrfdyPO9YfeczBBuvWHAVgHNYJne0ws=)
5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: xijBU4decX+vOvog8UE5UNzInTLN/bUDJlIGXZtQDXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:32:88:0b:49:9d:df:e9:fa:0a:63:bc:5d:cd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Jun 12 14:00:29 2025 GMT
Not After : Jun 13 14:00:29 2025 GMT
Subject: CN=52d9ec963690aaa28c01e3272d11285f313e415e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:09:71:65:94:8b:3a:0d:92:a3:62:1f:2a:
86:06:0d:51:3d:0b:21:c6:97:d1:8a:19:06:38:dd:
06:99:fe:97:70:b8:f3:0d:4b:93:14:a4:65:2b:25:
bd:c0:1d:90:01:44:81:52:a8:19:54:03:9d:7d:2e:
89:7f:2d:f8:6e:14:2d:d8:98:d7:47:f3:0f:57:47:
50:d1:d2:c2:0e:68:0a:3c:d1:0c:c4:0f:d6:0b:20:
3c:62:02:1d:79:d5:7b:4f:9b:aa:32:44:87:6a:0c:
eb:79:41:3e:fa:da:64:e1:3e:12:30:3f:6b:0a:fb:
74:14:9a:40:7b:d5:22:8e:71:3d:10:ab:c6:bb:05:
5b:de:cc:d0:cf:8d:df:ff:d9:77:29:ba:8e:51:bf:
bf:d7:ee:de:c1:1c:64:9c:41:f5:57:0e:b7:a2:db:
9c:b6:b7:5f:ad:f8:4a:c1:42:48:4a:09:b8:51:8d:
51:9c:1a:b7:4a:e8:94:47:33:c2:1c:20:37:7a:59:
17:e4:3b:30:b2:87:b2:45:92:82:ed:09:41:5c:21:
35:e9:06:04:36:d8:fc:f4:5a:bd:9f:9a:b0:4d:e1:
ef:5b:2e:18:c4:74:03:86:a6:fd:20:f4:99:ee:b8:
08:a8:8d:02:00:d7:d6:ea:90:0d:3a:cd:e0:11:36:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D9:EC:96:36:90:AA:A2:8C:01:E3:27:2D:11:28:5F:31:3E:41:5E
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:81:45:a5:af:3e:f3:54:7c:b5:18:46:cc:3e:1f:09:9d:c5:
49:f5:4d:26:46:dd:3e:f2:ff:97:36:c0:bf:03:72:4f:20:b4:
c7:d9:85:08:2a:8a:22:66:0c:6c:a7:66:4a:06:0b:9a:a1:93:
e5:31:aa:a0:6e:04:28:f6:71:72:00:18:b6:57:5c:99:70:e4:
cf:67:54:98:89:fb:3f:e7:0b:2f:89:fe:0e:6b:7d:dd:3c:57:
8f:5d:5d:9d:e2:ab:87:96:41:50:75:29:47:70:ff:3d:91:08:
69:ef:d2:9a:d5:44:e5:f7:3d:d4:61:6b:05:c7:1a:84:6d:17:
74:fd:54:54:e1:9a:73:c5:56:77:6c:4b:62:cd:09:3e:b4:79:
d3:e9:ae:5f:22:a8:c3:5d:49:a4:aa:08:b8:9c:da:42:4d:e5:
d8:5b:64:e0:2a:89:68:b2:43:b6:a0:db:6d:18:55:d0:18:5e:
45:97:fd:40:19:94:79:8d:05:99:aa:98:2d:06:64:55:0a:d6:
22:37:03:d4:f4:f6:10:b6:67:eb:e9:65:ca:df:5d:9f:97:65:
05:05:ae:ed:89:1a:75:12:b8:77:88:2d:48:6a:6d:4c:98:73:
5f:45:49:bb:6d:f3:34:2c:a5:f2:07:67:cd:1c:02:fc:85:4c:
17:ed:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:48:01 2025 by rpki-client