Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: dd43PsH8JLDdzYlUz2lUzDWK3ybNWR7+eemQx+2m2dQ=
Subject key identifier: 98:58:18:39:D9:7D:0D:50:D9:FB:76:C9:0B:25:0E:C5:DE:5D:CE:3C
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 0197790B081669EB291B79348A50D5A64082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 0BE2
Signing time: Mon 16 Jun 2025 14:00:55 +0000
Manifest this update: Mon 16 Jun 2025 14:00:55 +0000
Manifest next update: Tue 17 Jun 2025 14:00:55 +0000
Files and hashes: 1: 6uraY0RUo083dp6VRDIhaMr-XOw.roa (hash: 84hQ/Wr95yt1TasjhyzEMQBsJDQIG0TsCg+7NafRezY=)
2: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: yQmFnAJrhdjr8uIARf16gX9tpOu2yxiigNLr7NAJw38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:0b:08:16:69:eb:29:1b:79:34:8a:50:d5:a6:40:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Jun 16 14:00:55 2025 GMT
Not After : Jun 17 14:00:55 2025 GMT
Subject: CN=98581839d97d0d50d9fb76c90b250ec5de5dce3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:5e:52:5d:09:26:42:6f:d1:0e:8d:cd:b1:
28:50:23:4f:d2:54:e8:ef:9d:68:4d:30:f6:dd:5a:
9c:c2:77:74:ce:8c:e7:19:16:ef:12:0d:34:97:fe:
9c:00:91:44:0a:34:d8:a6:81:d4:e7:a5:86:f9:31:
fc:6e:4c:d0:ca:b8:59:2e:20:4a:5d:7a:81:6c:3f:
3c:98:d2:40:59:31:85:f2:30:48:d3:60:b4:60:1b:
01:24:e1:aa:d1:53:7d:27:bc:8d:6c:2d:7d:02:b7:
04:d5:b2:e7:bd:3d:d9:36:e7:8b:e2:9e:f9:60:11:
96:9d:f2:26:6d:cc:af:ef:11:4c:b1:0d:80:6e:da:
e9:43:e2:d6:ae:f2:76:32:38:73:1e:cf:be:3b:b2:
de:90:64:db:7f:53:87:33:20:46:c1:6a:4c:ea:40:
22:4b:c5:e2:d5:9c:18:35:81:d1:93:f5:c7:5d:cd:
28:2f:6f:1c:30:33:b3:99:44:f6:55:52:cb:08:cc:
55:80:bc:d1:15:77:18:07:52:ba:7e:68:bd:6c:b8:
38:59:7a:70:a7:1b:d1:a3:1b:04:ab:10:4a:3f:f4:
31:f0:98:1c:35:c3:37:78:a3:e1:b4:d7:0e:43:92:
91:f4:79:a4:98:e9:72:91:37:9f:62:4e:3e:2f:b2:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:58:18:39:D9:7D:0D:50:D9:FB:76:C9:0B:25:0E:C5:DE:5D:CE:3C
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6f:85:d7:33:4f:ec:86:9f:4d:7d:6b:c6:1c:46:25:21:58:
49:b0:7c:8b:d6:5f:06:a7:f7:91:e1:50:11:46:48:1e:2b:13:
f6:31:5c:4a:49:bf:1a:4a:0d:58:68:24:80:67:9a:e0:d4:bc:
fe:b7:e5:3d:10:d1:da:08:7a:8b:59:2c:4a:83:9d:1a:a0:27:
dd:81:3f:27:fc:f8:85:64:59:e7:f3:7d:54:79:29:bf:fa:7c:
23:61:6d:27:52:91:b9:c0:64:f0:95:f0:ed:77:4a:ea:c3:a0:
7b:db:d3:ef:43:0e:c5:92:9d:cc:f1:23:ce:36:d9:31:98:fb:
1b:b7:66:ea:61:96:79:9d:19:3e:9f:97:cc:6f:1f:74:5a:d9:
d3:d2:2d:49:92:4b:38:92:85:04:2a:8c:05:b8:66:13:04:a1:
64:ed:fc:e1:d0:15:bc:c2:00:b0:1c:55:de:9f:ce:8a:3b:05:
2a:52:5c:27:db:2a:9b:52:e2:69:bc:07:fb:f6:c5:4b:d2:a2:
50:b6:ab:0f:ef:da:7c:dc:30:a4:fd:80:37:b4:31:9f:b8:84:
a4:46:5a:24:e2:03:c4:f3:a6:81:55:00:a8:56:d7:75:79:1e:
42:74:04:fd:4f:3a:f0:b3:be:d2:ae:b1:ab:ff:2f:fa:d1:4e:
1c:60:8b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:05:43 2025 by rpki-client