Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: ujbqXbWwYhwB3H7t2lHNjFElY22m5A6deyM6uasX8T8=
Subject key identifier: CA:42:00:B9:C2:7A:B1:8C:DD:D1:ED:FD:48:73:40:01:E5:33:38:CE
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 019776409594C7D51EACDA6425A2B067D0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 1593
Signing time: Mon 16 Jun 2025 01:00:33 +0000
Manifest this update: Mon 16 Jun 2025 01:00:33 +0000
Manifest next update: Tue 17 Jun 2025 01:00:33 +0000
Files and hashes: 1: P7vPWrkUt_4tI2tusoLN2OIhgCA.roa (hash: vg79/TJpONqI6MyXQJ/4Hu+xaXpkJvsU35isLPjUC8s=)
2: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: N1s2Ygs8oV5JVdlXcZY/UeXpv4gZvIeh12M5R3x2ca0=)
3: r6QzNtUWS8LqjO5zMkFtGGDH8lg.roa (hash: l3MXhVwlaN7WZQxmnLfdtChq7kKxEP3Qy/454Bdw0ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:40:95:94:c7:d5:1e:ac:da:64:25:a2:b0:67:d0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: Jun 16 01:00:33 2025 GMT
Not After : Jun 17 01:00:33 2025 GMT
Subject: CN=ca4200b9c27ab18cddd1edfd48734001e53338ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:6b:64:61:99:7b:7f:24:86:9d:29:e5:3a:
d5:04:3b:ce:d2:a1:93:f1:79:39:c3:76:bf:de:5f:
42:a7:d9:81:1c:fb:94:f0:d8:67:e0:9a:a8:95:ba:
45:32:53:e0:37:b3:72:63:86:12:4e:a5:d3:e9:56:
a6:e7:63:0e:41:6f:49:14:f8:a8:b7:64:16:46:44:
40:0a:03:a5:bc:fa:61:77:a5:cf:3a:2c:b2:9b:1d:
03:a1:a2:e3:2b:4b:80:11:6d:16:77:3f:7c:d7:6d:
5e:47:7a:b9:ab:90:d4:90:27:83:a5:fa:f3:0f:e7:
57:56:11:e8:12:a4:b1:52:96:5a:9c:55:31:c8:be:
62:79:ba:77:1a:c3:1a:a2:76:60:eb:f7:ea:75:16:
5e:af:52:57:4b:80:af:c6:f0:98:49:77:30:c8:31:
0d:6c:7c:f7:6e:3e:eb:b7:8c:b6:db:a3:eb:4f:d1:
f6:65:40:da:d5:04:6f:27:69:14:d8:38:d8:87:80:
7f:e5:5c:75:c8:45:74:c9:8b:c8:4a:ea:4b:20:2f:
c9:b6:03:e6:6e:ad:42:c7:15:b4:ba:66:fe:4f:bd:
97:50:78:21:23:59:26:41:df:9b:eb:4c:a3:ed:dd:
7d:fb:ef:3c:14:db:17:4d:a2:b9:84:d2:38:95:0b:
e0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:42:00:B9:C2:7A:B1:8C:DD:D1:ED:FD:48:73:40:01:E5:33:38:CE
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:43:c2:c5:41:c2:26:ec:59:e1:8b:2a:1a:65:43:e6:db:96:
e6:c1:e7:02:ff:43:80:b7:f2:5e:7c:c1:d1:e4:2f:31:81:61:
ef:d6:57:5f:b4:c3:da:1b:36:60:45:be:ca:0b:83:3d:60:16:
68:be:38:7e:db:09:ba:f3:bf:f1:73:2d:f5:84:ae:7c:7a:80:
01:40:1f:0b:56:6b:a6:d5:58:0f:fb:3a:a9:c3:94:0a:b8:23:
7c:a1:48:65:80:ba:31:1f:f9:21:c6:76:49:21:2a:eb:d1:de:
d8:ac:56:fa:68:c1:64:2e:12:ca:36:09:97:41:34:9e:ed:94:
77:8b:5b:3e:08:ff:a1:63:04:4a:5a:27:a2:af:b0:99:0b:d2:
01:58:51:7c:b0:a1:90:70:bf:5d:e0:43:01:1e:f5:c9:17:2a:
d0:68:ca:f0:0d:3f:c0:00:af:2b:a5:83:63:1d:24:6a:c2:da:
a0:a2:9b:1a:a7:d2:b4:67:2f:63:c1:ad:80:da:0c:e6:8a:70:
70:84:b8:9c:02:76:69:a1:e1:60:87:51:8b:a3:14:51:32:aa:
22:2d:f1:7d:e9:2b:3b:fa:cb:d5:bd:aa:df:83:3e:cd:60:8f:
77:e9:fe:f2:8a:d4:a3:c6:9d:a6:5f:52:75:48:3e:d9:6c:a2:
a1:8a:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:41:47 2025 by rpki-client