Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: 7W1+tnamZFslBIZN2ECdLM8K2jc3n6VzDx+rqH+awvs=
Subject key identifier: 52:B8:13:F1:9D:50:FC:56:9F:12:10:DD:3A:C8:E1:13:38:F8:D7:39
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 0197789D05EC66D9BC2163E84CAF27A63D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 12:00:45 +0000
Manifest this update: Mon 16 Jun 2025 12:00:45 +0000
Manifest next update: Tue 17 Jun 2025 12:00:45 +0000
Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: aYfaPpYo7x4js32SoqcwGTzOEqQgOiSBArYVc2yFOGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9d:05:ec:66:d9:bc:21:63:e8:4c:af:27:a6:3d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Jun 16 12:00:45 2025 GMT
Not After : Jun 17 12:00:45 2025 GMT
Subject: CN=52b813f19d50fc569f1210dd3ac8e11338f8d739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:66:f7:7c:ff:87:bb:f8:f2:fe:bd:94:68:
e1:23:56:a1:0f:19:be:37:89:7b:61:e8:33:68:c9:
74:60:dd:ba:72:49:62:32:72:bf:ad:e5:17:9f:19:
aa:a9:d4:6d:6e:06:32:71:d8:30:09:8c:f2:5f:06:
16:de:08:90:f1:7b:e2:ad:21:86:58:4a:58:bd:65:
75:a8:14:a9:87:89:04:0e:fd:07:a1:71:a3:5f:6e:
c0:83:85:16:55:85:4d:29:b5:79:02:69:56:5b:c1:
bc:57:1b:0e:23:48:0d:f2:76:26:52:b3:da:e3:85:
34:a7:76:51:79:07:aa:40:15:62:28:d8:b2:ec:ad:
8c:9e:1c:f0:6d:c0:62:3b:c7:ce:aa:e1:62:41:89:
40:20:df:2a:1b:58:59:11:a4:f1:d3:00:ae:37:fd:
f2:2e:3e:02:5b:03:1c:13:52:f1:3f:d5:25:87:67:
e3:6d:65:76:03:eb:ad:4f:49:8a:8d:b3:7a:48:d5:
4a:2b:03:7d:75:66:67:29:94:d4:a7:7b:e0:2f:47:
f1:47:c0:37:07:c2:19:ee:8b:d2:8b:b2:ae:ed:01:
74:13:dd:9e:b6:fc:0e:49:30:67:57:ac:64:47:e2:
c0:ef:ad:c6:e1:3d:a7:d8:d0:3b:a8:65:8c:c4:2e:
5b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B8:13:F1:9D:50:FC:56:9F:12:10:DD:3A:C8:E1:13:38:F8:D7:39
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8a:09:f2:89:79:82:18:2c:24:7c:25:c5:67:6c:c0:0b:78:
ec:a8:b9:46:e1:3c:f5:83:57:c0:a0:0b:f1:47:e8:a2:66:60:
fa:7e:c6:a4:4a:0c:e0:d3:be:4c:85:61:05:62:12:9a:9b:47:
9c:6f:68:00:ad:63:79:77:6a:93:8c:2f:8f:6c:72:0e:9e:0b:
c5:6f:40:f5:01:e6:18:d9:fd:31:e1:63:83:03:89:6a:89:72:
f6:e7:66:34:24:e2:3a:d8:dd:28:1e:f6:d3:08:96:ee:18:b6:
0b:b5:ba:19:b2:66:ed:66:1b:bc:31:80:d7:b9:bf:25:44:6c:
f8:6d:1b:58:4e:45:45:7b:b0:be:af:cd:3b:05:58:76:0e:59:
93:80:46:f8:fa:23:fc:21:80:38:91:76:a1:f5:4f:04:8c:f7:
ff:6f:c0:39:08:fc:4c:32:7e:84:56:66:fa:b4:a7:c7:c3:9c:
b3:69:47:20:71:0a:0a:63:35:62:fc:d8:66:a0:7c:df:86:d2:
4e:e8:7d:a9:f2:eb:40:0d:3d:b0:26:ca:83:19:8f:65:8a:e3:
1f:2a:69:a7:4b:b9:38:62:1c:ef:d2:93:6a:51:64:f8:89:c6:
f3:13:59:01:7c:1b:b2:9d:6c:7b:a4:eb:a5:d6:b2:93:86:94:
ce:4c:44:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:55:28 2025 by rpki-client