Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: mRC1Si98whX3o38zgVD5FsQRxYHBHAAb+2IZx2ys2Sc=
Subject key identifier: 9D:88:17:DD:E1:83:EE:BC:7D:80:A3:0E:AA:79:87:05:E6:57:20:CC
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 019771F5DA4162186ED2564BF4A28EAA547F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 1009
Signing time: Sun 15 Jun 2025 05:00:26 +0000
Manifest this update: Sun 15 Jun 2025 05:00:26 +0000
Manifest next update: Mon 16 Jun 2025 05:00:26 +0000
Files and hashes: 1: 0yOggjDqNy10C3OKz3C0rIr3a-c.roa (hash: caWl/Q44QQWpPzxLX9RAZwZuiCmuzzxKu+jqUXyZ8ec=)
2: ifcwYHfmty9P7YlJSIwto5Z8mhc.roa (hash: j3Q6hvt9y1dRnxH4mfVL1HI6Z3oaft4npRVPXBxnB5Y=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: ZDOoPpNKeWc61tlU/tmRNGHRsewfRqfW91G84CRqSl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:da:41:62:18:6e:d2:56:4b:f4:a2:8e:aa:54:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Jun 15 05:00:26 2025 GMT
Not After : Jun 16 05:00:26 2025 GMT
Subject: CN=9d8817dde183eebc7d80a30eaa798705e65720cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:20:ac:57:05:14:0b:aa:23:fb:f7:d0:f9:
0d:68:63:ba:0e:cf:d3:f1:94:60:d6:07:6d:ed:0a:
6b:56:4c:64:2f:36:67:aa:ef:43:6c:af:92:c8:c9:
23:4b:5d:14:0f:f0:a7:ac:d2:f1:fc:be:99:b5:9a:
0f:57:db:12:68:9b:6c:fd:b5:b5:9d:d1:3f:6b:02:
6c:b2:0a:7a:af:d3:31:1e:59:4a:1d:85:38:c3:f3:
e4:39:ae:ef:4c:39:6d:02:c1:96:98:fe:4e:11:ba:
88:e7:a6:b1:8d:e5:bb:9a:29:62:6d:d7:ec:7a:08:
55:9a:39:39:86:4a:e4:95:6d:dd:05:5f:08:2b:63:
77:04:67:07:9c:cc:2a:a4:a1:49:13:4b:50:85:e3:
f2:da:b3:5d:e3:d3:11:7d:e2:0d:2a:21:ec:bf:70:
c0:44:7f:ca:bd:7f:d0:4c:d8:7c:85:51:81:7f:09:
b1:7d:dd:94:f9:bc:fa:d3:5a:a8:b1:71:11:f7:e7:
4b:38:17:f7:b3:3a:76:94:f3:7c:89:aa:0e:5e:8d:
43:f3:ac:48:df:ed:44:b6:9e:13:87:46:59:27:cf:
eb:22:29:bb:da:f0:10:2c:45:e7:5b:97:1e:3f:6b:
6d:95:63:83:d4:1d:8b:56:bf:bb:e5:a5:7d:c0:b3:
f7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:88:17:DD:E1:83:EE:BC:7D:80:A3:0E:AA:79:87:05:E6:57:20:CC
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:34:dd:c4:e9:97:b5:3d:f1:24:46:56:ef:d0:8f:7b:f7:60:
1d:22:d7:82:01:20:4b:3d:16:1f:7e:ea:78:72:65:f7:e6:c9:
7a:24:ca:85:cd:8c:bf:07:c0:2a:46:3d:0e:46:dc:6d:4c:e4:
33:c2:a5:5c:f7:fb:78:10:88:c0:4f:e3:fc:44:2c:af:ff:55:
bf:8f:2e:31:0a:0f:14:45:f3:b2:24:5c:59:16:5a:4b:90:e7:
6b:c4:51:4e:ae:80:88:91:d9:8a:34:d6:e1:e7:29:7e:ef:77:
e4:eb:67:80:fc:39:79:ea:44:3f:7c:eb:5e:68:5b:9d:84:3e:
35:0c:2b:c1:dc:00:3f:70:58:36:15:83:00:61:3c:c4:5f:dd:
ea:a8:8e:b1:4d:cd:b1:1f:68:46:d7:e9:e6:ca:a3:56:a4:7a:
3d:a7:e8:c8:db:b9:c5:3c:a3:31:6e:49:0d:0d:f1:e4:3c:a9:
e0:6d:37:78:4b:02:6a:70:a7:1a:6b:b1:e6:60:9d:12:07:6c:
f3:f8:df:b3:f6:e6:c0:29:ba:96:8c:90:56:34:0f:cf:15:66:
02:d6:7e:36:8c:a5:c1:56:a3:de:ac:0f:c8:1e:f9:2e:4e:c7:
60:f2:8d:1d:23:31:17:be:2c:c9:8e:a4:26:c4:4a:08:05:14:
94:91:6c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:42:41 2025 by rpki-client