Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: 9xPzEdfkJDFPGFg6iE23MT8io9rYssf1cN/3PQlNS78=
Subject key identifier: CC:86:54:D7:DD:FA:7B:72:7C:FB:84:25:54:7E:ED:80:D1:2F:0D:43
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 01976884D53CB046F61AF28669317E375881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 0545
Signing time: Fri 13 Jun 2025 09:00:25 +0000
Manifest this update: Fri 13 Jun 2025 09:00:25 +0000
Manifest next update: Sat 14 Jun 2025 09:00:25 +0000
Files and hashes: 1: BvxwicsH1ZVfBk6Q4DoBq1qq_Cg.roa (hash: 4jEtLdDvLytqaDFqVfLMjurgO3/mhXlRnfALOClKcPM=)
2: IaQkr4wJmPFX7MlGIC068T5SLas.roa (hash: LZsKSu9vsLm4Oqz5UZoGBpM3ebW0TaSiuaWmenP7SS0=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: Qlc6+o/zf+uCguwUZXWgYtPgqyjGry1YfuqTi4fP+hE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:d5:3c:b0:46:f6:1a:f2:86:69:31:7e:37:58:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Jun 13 09:00:25 2025 GMT
Not After : Jun 14 09:00:25 2025 GMT
Subject: CN=cc8654d7ddfa7b727cfb8425547eed80d12f0d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:48:36:62:5f:a9:0b:0b:68:36:03:9f:69:
25:66:26:3e:6b:d4:fd:66:84:06:b8:a0:db:f8:03:
69:37:fa:e5:a2:4c:53:8e:67:70:84:b4:01:42:bf:
2f:17:fb:c8:51:5a:ab:e2:c1:10:8a:97:db:76:e0:
b0:bb:25:8a:2b:6b:37:0d:0d:0f:6f:f4:79:b1:d6:
5e:5c:99:cb:43:47:97:bf:13:a5:19:d5:ed:90:84:
40:ff:7e:e5:aa:d5:77:37:6a:98:2b:8b:55:86:c2:
39:3b:c4:df:50:e7:6c:af:a3:47:f6:9c:2f:a3:a6:
64:05:c4:ba:d3:ae:97:36:42:65:bf:17:7b:3d:d1:
be:a7:43:47:97:2d:a4:ce:41:b8:98:71:49:41:4b:
14:1b:33:0f:bd:80:3f:1e:ea:1c:57:6e:95:41:ac:
db:0b:63:a1:41:45:14:eb:99:2e:0a:14:c9:7a:dc:
ea:52:d8:92:b3:5a:ec:a5:fe:62:04:79:da:dc:fc:
76:3c:15:69:5b:37:4e:ae:68:dc:c9:f1:40:f6:08:
3a:ca:33:32:2e:50:52:d0:c5:d8:a1:28:18:30:94:
7c:f5:0a:43:de:56:dc:e3:3f:e0:fb:d8:04:a2:53:
f6:37:ba:68:91:30:0f:d6:5f:47:67:67:d1:df:8f:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:86:54:D7:DD:FA:7B:72:7C:FB:84:25:54:7E:ED:80:D1:2F:0D:43
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:c0:37:eb:86:c7:62:2f:9a:de:f7:bc:9f:aa:29:c8:96:d9:
64:2a:c0:5a:81:23:ba:e0:f0:57:5f:2c:f9:ec:e4:8d:21:9d:
d0:77:25:d4:1a:7b:32:c7:0c:9e:d7:cd:c4:46:37:1f:44:9d:
c8:86:f0:ac:07:4d:da:b8:20:db:88:d3:d1:d9:0a:5f:e5:b8:
38:0d:fe:57:98:a6:07:90:de:d9:b3:e1:97:10:e5:8e:b3:30:
b0:e8:20:87:1b:76:8f:ba:49:cc:10:9d:87:23:76:91:06:aa:
20:56:bc:92:e6:8a:cc:df:31:fc:a5:c9:13:cf:d6:51:2d:44:
1f:a0:82:69:69:6a:30:03:8b:30:ba:69:a1:c9:e9:4f:ac:23:
ef:a6:23:fe:86:15:9f:e8:c1:53:33:51:e1:87:6e:5b:e4:90:
15:32:d2:57:bb:58:47:7f:b4:a1:4b:9a:44:f8:09:c4:da:e8:
fa:c8:28:01:25:8c:e8:9d:95:4b:fe:97:39:b6:6b:49:1d:5f:
0f:37:e6:3a:d5:d0:7a:8f:37:79:10:7a:55:9f:49:f9:5e:23:
1f:21:d0:3d:35:13:65:4b:34:90:42:33:06:8c:36:bc:63:c5:
10:54:28:78:19:25:ca:10:c5:58:8a:50:6d:ff:d4:f5:63:36:
f6:f4:0b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:36 2025 by rpki-client