Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File: ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier: fAWTAsx4wQe7GDHurIF/IQcO0geGWqbRwfHNv7VY1So=
Subject key identifier: 4A:EB:A6:5C:B9:8F:55:39:54:21:6F:F4:EF:17:BC:BF:48:87:C1:AC
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 019770E37907FF031CE481CDB11981CB932F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number: 0A48
Signing time: Sun 15 Jun 2025 00:00:45 +0000
Manifest this update: Sun 15 Jun 2025 00:00:45 +0000
Manifest next update: Mon 16 Jun 2025 00:00:45 +0000
Files and hashes: 1: 7Z7IzpBHNDRFWYLe_OokcTNbBnw.roa (hash: 24No6BP2DTZdRjBSm6KFYcGax0GtKenfx9uqKb2W2tw=)
2: OAC5V3ngkZFG4cbcfwTqgC0RbUw.roa (hash: amgbjuIRYLpnsd8z61aY9wLmq9odfVbwcJCZF+luhjo=)
3: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: qgf0UzVHmGA3YHFuuW3lhohRiRDc2Vql1pSogfGEs9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:79:07:ff:03:1c:e4:81:cd:b1:19:81:cb:93:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Jun 15 00:00:45 2025 GMT
Not After : Jun 16 00:00:45 2025 GMT
Subject: CN=4aeba65cb98f553954216ff4ef17bcbf4887c1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:88:bc:66:d1:ea:13:36:2f:e3:1e:0b:fb:
ff:7d:4c:81:d0:6f:8c:16:12:65:9f:cf:b6:0d:09:
46:7c:4e:c5:2c:9e:42:29:75:b2:e1:79:9f:e8:6c:
c4:44:81:4c:c8:88:39:7f:aa:fe:39:0a:b1:4c:48:
ba:b1:2a:c6:a6:72:71:ad:4b:ed:8a:d8:20:5f:4d:
6e:de:40:8c:79:5f:45:aa:fe:39:9e:90:90:d5:f5:
15:70:64:cb:9f:51:91:4b:03:0b:ef:6b:ea:bf:6d:
41:bb:09:f1:cd:1a:d8:14:c9:ab:2d:ec:00:91:98:
80:01:28:93:1d:39:50:39:5a:73:2b:08:d5:6b:62:
d7:8c:2e:6e:22:a2:34:ac:93:c8:ab:d6:c3:3a:58:
94:e5:4b:7d:c5:6c:c7:da:cf:85:c0:4c:9c:6f:97:
ae:b1:b9:aa:52:54:fd:3b:8a:c3:48:91:eb:ff:16:
98:f9:a0:4c:3b:db:1c:a3:ff:22:6b:f0:83:e3:9f:
a9:ad:12:94:b1:29:18:96:1f:8a:c7:50:05:a6:40:
c6:40:83:7c:0c:f1:26:af:7b:03:c4:a3:e7:01:89:
25:32:8a:12:59:f3:e5:6a:75:8c:64:73:13:3b:11:
a9:40:72:c1:c4:7e:01:93:cf:70:56:56:ef:b3:37:
ca:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EB:A6:5C:B9:8F:55:39:54:21:6F:F4:EF:17:BC:BF:48:87:C1:AC
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:69:de:a4:52:41:28:db:5b:52:c7:2d:a9:ab:f1:fb:f0:5d:
85:e8:31:85:bc:cf:39:59:92:51:a5:ad:e4:8c:15:4d:45:a3:
89:ac:5e:57:2d:82:30:12:fd:ec:cc:a0:b3:49:5e:39:49:43:
76:dd:68:66:f9:8e:a0:d1:6f:02:e1:31:c6:c1:80:b2:46:db:
18:70:50:4a:e8:d4:bf:c1:17:3c:f3:d9:c2:6d:bf:66:3a:a9:
2a:22:cf:aa:75:18:44:4a:0f:d1:9e:11:12:50:9a:a7:b0:fc:
31:ee:2d:45:3a:67:db:6a:3e:78:af:ae:22:65:2f:b2:9b:15:
fb:e3:3d:6a:d0:12:22:04:63:5c:fd:ca:b6:ec:29:7e:76:e8:
48:ee:51:a2:80:3c:df:90:82:92:99:da:e3:3d:7d:8e:9b:1f:
07:d7:b0:44:ea:fd:62:b1:0b:d9:e7:fa:a5:4b:65:93:be:23:
e3:29:c3:7b:d7:72:d2:26:5c:3d:5f:6e:61:84:1e:c8:e9:2a:
a4:a7:25:36:7a:5b:d6:ca:20:e6:6c:0f:7a:ed:06:1a:b4:ea:
e8:5c:61:4c:6e:d1:47:36:d9:0b:f7:a9:77:8e:5e:6c:d3:06:
e6:da:74:56:56:83:ac:0c:f1:ad:d3:31:35:90:1b:03:14:cd:
d4:14:5e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:43:41 2025 by rpki-client