Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
File: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft (raw, json)
Hash identifier: 3wtnbM6dQ83sxlgNm4iX8b1WgZuGAIgJnsd5Qo7zRCA=
Subject key identifier: 45:41:E9:B3:2F:0C:75:FD:2B:91:4A:C1:60:4B:07:CF:E8:DF:B8:86
Authority key identifier: 66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
Certificate issuer: /CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Certificate serial: 01976BBD3AB4A83143D463DBF6BAFAA1E911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
Manifest number: 12C8
Signing time: Sat 14 Jun 2025 00:00:52 +0000
Manifest this update: Sat 14 Jun 2025 00:00:52 +0000
Manifest next update: Sun 15 Jun 2025 00:00:52 +0000
Files and hashes: 1: 6JYNh-n5WyyjhpESG3f33euXdz0.roa (hash: F75DJeS7+fMY7BG2ZrDAaDOIaz0HnjQabtUssq/wKLk=)
2: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl (hash: nhubF6SAEehqiT5Pqn4WlCVHTOZCh0zspJB5crCz1KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:3a:b4:a8:31:43:d4:63:db:f6:ba:fa:a1:e9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Validity
Not Before: Jun 14 00:00:52 2025 GMT
Not After : Jun 15 00:00:52 2025 GMT
Subject: CN=4541e9b32f0c75fd2b914ac1604b07cfe8dfb886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:c2:de:db:f2:56:75:58:67:0a:15:eb:20:
a9:89:1c:a4:23:19:1c:00:6f:1d:54:ea:13:d2:1d:
d8:87:fd:21:b1:c7:ef:ed:ce:fe:0f:f1:7f:cb:73:
c7:70:40:4b:51:55:c4:98:7b:36:d0:64:5d:e3:e7:
39:b1:16:e5:22:de:c4:a0:0d:68:5b:50:63:17:fa:
0a:bb:d0:61:53:ee:3b:99:74:1b:de:d6:83:50:9d:
d9:2d:8f:c9:f8:f8:47:88:9e:ee:ad:d5:13:3e:61:
69:ee:25:e5:db:50:9e:70:16:02:43:7f:2b:c3:08:
d6:aa:a0:f3:41:3d:2f:d1:ef:31:7c:47:cc:42:de:
f8:da:39:cd:15:51:30:09:9c:02:cf:40:ad:8b:2f:
85:f2:52:bc:10:62:9c:fd:75:aa:88:12:af:ee:b4:
e4:4e:51:35:4f:78:f7:ae:9b:a5:78:56:2e:bd:0b:
62:e3:d3:fd:ed:ca:46:f0:78:5e:2c:11:b3:c9:ba:
4d:e7:d4:b6:67:4e:20:55:14:30:a5:a4:e5:6c:16:
5c:e7:06:95:99:26:c8:c6:50:5c:10:cd:8a:b0:16:
13:4a:f2:a7:02:63:a5:86:eb:ad:ae:50:e0:f2:8d:
e7:aa:e2:5e:94:a7:38:d4:9e:1c:84:cf:cd:52:01:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:41:E9:B3:2F:0C:75:FD:2B:91:4A:C1:60:4B:07:CF:E8:DF:B8:86
X509v3 Authority Key Identifier:
keyid:66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:07:5c:36:a9:00:c3:d9:c8:5b:9c:26:c8:67:d5:10:8f:c7:
01:ee:f2:01:8b:7e:a6:82:ab:c3:5b:e0:c7:38:cb:a3:11:89:
ab:a2:3f:f5:16:00:1b:36:3e:60:c1:3e:0a:81:2f:48:60:6b:
e8:b3:2a:0a:0d:ab:36:8a:90:05:ff:d3:e7:e3:ec:3a:a3:4b:
c3:74:5b:43:ac:ab:7e:3a:78:51:07:b7:6a:50:ef:1e:c8:b9:
83:16:b8:e1:34:69:f6:87:d1:36:34:27:2a:b4:ba:f2:b5:f6:
81:f7:5a:be:eb:c0:c8:15:2a:39:a1:98:ab:b2:bf:41:16:56:
2e:03:d4:6c:85:7a:d6:0b:a0:41:20:fb:3c:9f:d9:a8:3f:77:
f4:9a:b8:83:9f:9c:22:a8:1d:48:d3:9a:0d:d0:92:d3:01:d0:
59:f0:5c:e1:da:aa:e9:1f:d6:50:df:4a:5f:d9:d5:e6:c2:87:
91:e6:bc:a7:fb:6c:b9:e5:95:d2:6e:50:ea:04:71:d5:e7:f6:
61:00:98:4f:07:82:44:71:a6:5c:74:4f:fb:57:d7:49:ea:58:
46:fb:29:0b:19:69:c6:1e:a7:ef:f0:7e:80:c6:0c:61:5b:df:
25:76:0d:b0:c3:40:66:56:6c:82:d4:76:7b:94:f5:0c:9b:e6:
72:02:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:41 2025 by rpki-client