Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
File: zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft (raw, json)
Hash identifier: +IcQm+KXaIhMn+7JzImGRheiBwCmMxbunuMnA6uMqPY=
Subject key identifier: AC:1E:3D:54:60:FE:6D:A1:BD:1F:CE:31:1D:9A:5E:62:7A:C3:D7:4C
Authority key identifier: CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6
Certificate issuer: /CN=cddd902a1271270027e4577778ea35883b4515f6
Certificate serial: 0197925D0A6CC87D2843D9BFE5100FAF9D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
Manifest number: 15A8
Signing time: Sat 21 Jun 2025 12:01:00 +0000
Manifest this update: Sat 21 Jun 2025 12:01:00 +0000
Manifest next update: Sun 22 Jun 2025 12:01:00 +0000
Files and hashes: 1: Ylu4oY650LeSLzKfRWZsKd7D6d4.roa (hash: at13Jjp52CyKiekCDznMGprsJGH6Ha6O/Aegpe9S1N0=)
2: zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl (hash: N86xIVHeRlFkOOXB/+S5Ck0pmOPqWfJbhOvssA8YRlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:92:5d:0a:6c:c8:7d:28:43:d9:bf:e5:10:0f:af:9d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddd902a1271270027e4577778ea35883b4515f6
Validity
Not Before: Jun 21 12:01:00 2025 GMT
Not After : Jun 22 12:01:00 2025 GMT
Subject: CN=ac1e3d5460fe6da1bd1fce311d9a5e627ac3d74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:bf:d5:28:1f:7b:fb:a7:de:f1:f5:a4:15:
28:f4:ff:24:59:1e:34:12:db:1b:90:d5:61:dc:b0:
7f:d1:2a:9f:3e:3b:a0:0e:0e:ca:73:62:7f:a5:6c:
46:6c:e4:a2:cb:c8:93:f6:d6:0e:ea:d3:ec:ff:fe:
bc:f9:ef:4c:bf:20:11:ce:34:05:43:08:66:65:fc:
c6:2d:8b:c9:28:d8:51:bc:72:96:f1:d0:06:21:7e:
22:41:7d:d1:54:f1:e3:ae:14:f6:ae:e4:a5:6d:9f:
01:de:b9:34:7e:48:2c:99:98:8b:54:28:4b:fe:78:
7b:4d:f9:19:b3:a4:fb:d5:09:8e:2b:b0:4d:fb:23:
54:df:6c:8d:47:14:fb:c0:8b:52:9c:b9:6e:93:c2:
be:2a:16:fe:5b:71:37:3e:e0:fb:40:16:e2:13:35:
b8:fc:2a:55:15:85:10:69:33:05:bd:2e:d6:d6:78:
43:cb:d1:20:f4:e5:69:d4:78:da:e1:19:f9:21:dc:
3c:bd:b1:a9:3b:3b:fb:64:d4:65:0d:17:3d:4d:6c:
13:d9:89:a0:fd:ce:5e:5a:60:d3:81:c3:f7:f2:ed:
c5:f1:6b:63:bd:2f:0c:7c:f1:bd:e3:29:7e:81:f7:
de:56:93:c3:1e:cf:e5:c2:f9:67:82:07:e2:96:9c:
85:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1E:3D:54:60:FE:6D:A1:BD:1F:CE:31:1D:9A:5E:62:7A:C3:D7:4C
X509v3 Authority Key Identifier:
keyid:CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:33:88:62:1d:8a:42:45:0c:30:64:b4:ac:c8:5a:62:65:b0:
53:e5:9f:52:3a:0b:26:a1:80:98:e6:b6:00:4d:fb:40:60:f1:
21:7c:57:52:e7:00:98:9b:5b:73:63:cf:8b:28:c4:62:83:82:
a1:ee:01:a4:aa:fa:87:a2:e5:87:22:aa:74:e2:f1:07:39:20:
b0:d0:a7:5d:8b:c7:03:c5:dd:d0:60:ee:d6:e5:2b:ae:1f:e8:
e6:1e:24:44:99:04:64:43:a6:28:df:02:00:49:1c:42:db:5f:
f5:f5:9c:48:49:68:fe:14:17:6a:18:ca:6f:32:cd:24:ab:34:
bc:6c:cd:93:7b:c4:51:8a:3e:16:b4:70:4a:02:a7:c4:8e:32:
ca:4f:82:64:0a:48:85:48:c3:ef:40:61:58:22:bd:d9:48:8f:
16:47:10:7a:00:6d:2f:d8:8f:a3:41:3e:8f:00:11:9b:bf:c5:
1d:26:d5:5e:a8:03:00:e5:7c:15:e3:ce:d3:54:16:93:eb:81:
c3:a4:54:bd:ac:06:4d:52:6f:57:92:5a:25:d3:83:ab:2e:2a:
67:e5:7b:47:58:e5:89:d0:2b:78:8c:4f:c3:fb:45:8c:36:b9:
cb:3e:f8:c4:7d:07:0c:8d:53:2f:00:4a:cf:2d:73:ee:74:47:
4c:fb:d3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 17:22:43 2025 by rpki-client