Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json)
Hash identifier: uCTa3x2Hwvn95bTrgtuTe0YI56z0Emscs2h+dyKmPzY=
Subject key identifier: F2:3D:FF:E1:D2:DF:A2:9E:65:7B:73:9B:4F:EA:DA:9A:31:F2:D8:6D
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 01977564AB823FDEDCB6891DDC4C86C18890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
Manifest number: 1595
Signing time: Sun 15 Jun 2025 21:00:21 +0000
Manifest this update: Sun 15 Jun 2025 21:00:21 +0000
Manifest next update: Mon 16 Jun 2025 21:00:21 +0000
Files and hashes: 1: 0eFE803oL-x-2UtW8hW4h_oGSOQ.roa (hash: 1/pEIXtNgxj6Ggb1H5PZs612B1gxk22zRzlXx7oVu5s=)
2: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: 5Ep+IuVuqfOi/K8mBNAph1oHNP4aRKTj+mCDlQZP1dg=)
3: e2qB4esbK6h3v26XFDC4VZBc5KY.roa (hash: j1cRIZ5v+8OJ2fmGwhM51DYmzvrib+oAKJLnWq3m2pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:64:ab:82:3f:de:dc:b6:89:1d:dc:4c:86:c1:88:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Jun 15 21:00:21 2025 GMT
Not After : Jun 16 21:00:21 2025 GMT
Subject: CN=f23dffe1d2dfa29e657b739b4feada9a31f2d86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:08:3c:ac:2b:5b:96:7b:a9:28:59:40:1e:
52:dd:b4:d1:63:0a:a0:b3:58:2b:c0:31:33:62:0b:
15:92:b0:8c:22:5f:ed:23:e3:88:95:bd:37:cb:49:
5c:e3:75:67:6d:30:06:ad:5d:c1:94:4a:dc:1a:d0:
1f:26:26:fd:24:85:93:6b:39:14:8d:b0:85:61:f4:
d8:79:2f:11:79:79:6f:5f:a0:3f:53:d8:14:7e:d4:
0d:84:82:b9:b7:65:b5:f3:7b:f8:c9:57:1d:aa:2d:
3c:1c:c6:04:6a:d2:8b:c3:57:ce:24:87:03:cd:c3:
75:d2:69:e0:f1:d5:7f:7c:a9:11:54:32:da:b3:1b:
89:34:4c:f8:62:07:13:23:4e:ba:fb:2d:90:09:04:
2d:21:50:6f:78:3c:5a:69:00:78:38:c1:3c:82:d8:
33:5e:cf:21:9c:8f:7b:8c:6d:58:9f:18:ca:37:a3:
e7:6e:9c:34:93:1c:bb:ea:ad:31:b8:62:0c:24:99:
93:e0:d6:af:b3:eb:9b:5c:f9:7f:79:aa:37:bf:be:
27:33:b6:46:64:73:af:98:57:54:d9:bf:ed:a9:62:
d7:df:f0:13:26:79:34:69:fb:d7:d1:51:56:f9:d6:
7e:45:b6:24:7d:0d:e8:7a:de:6d:04:6a:a1:00:ef:
d4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3D:FF:E1:D2:DF:A2:9E:65:7B:73:9B:4F:EA:DA:9A:31:F2:D8:6D
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:14:f9:be:b0:7f:1d:75:2e:17:bb:39:1e:49:87:0f:ba:c1:
06:d1:c6:23:71:6e:db:eb:33:5f:91:31:e6:c1:71:9a:23:53:
59:b7:46:f4:08:f1:d8:25:f6:14:3e:7a:86:a1:13:33:77:f3:
01:a6:51:4d:db:68:d4:31:74:c1:11:ec:aa:ad:24:da:61:c3:
69:46:62:30:8f:4d:ed:2a:68:15:61:b7:2f:75:de:3b:63:27:
9a:28:4c:f2:af:bc:2c:83:45:ea:4a:ff:02:7a:74:8e:0f:5a:
04:c5:9d:f5:4e:1b:d5:b6:6d:7e:0e:68:a0:1c:64:53:de:f4:
df:06:35:2f:58:d0:74:ba:b5:17:2f:13:a1:26:73:10:b7:b0:
a0:9b:5b:0e:c7:75:5f:ca:ce:74:5e:26:59:00:dc:ad:c2:a1:
2f:3a:1e:ef:f7:2c:04:3f:81:91:57:99:c6:2c:a2:87:b9:e4:
88:05:28:b3:15:28:6a:e1:f9:45:3c:20:e3:38:bf:a7:ae:58:
b9:14:6f:99:7c:2c:5d:30:fc:6c:9b:62:7d:5f:e2:92:e4:fd:
95:ab:df:99:2a:ab:d1:49:4a:fc:b9:59:7c:58:37:80:d9:bf:
2d:a4:64:d6:4d:58:05:f9:3c:d9:f6:44:fc:df:4c:43:a3:25:
9b:bc:c9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:42:27 2025 by rpki-client