Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: lGvxPrKEwnpZrbFZNp1/DpQPAwBT7lOfpGld7b1YVYo=
Subject key identifier: DA:F9:E1:AF:D4:EF:33:BD:AD:BB:D4:07:4E:B8:C7:3C:E2:37:61:91
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 01976D06E6C3A72C65DCF7BA80EEDCE1F01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 0185
Signing time: Sat 14 Jun 2025 06:00:58 +0000
Manifest this update: Sat 14 Jun 2025 06:00:58 +0000
Manifest next update: Sun 15 Jun 2025 06:00:58 +0000
Files and hashes: 1: 1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa (hash: tYb6X8EoEPBIOpcCtjg5jZ8qmmvQ3HaHzxmvyPy77Pw=)
2: VzQqyrs-uqIcVAV9Qkei6a34wwc.roa (hash: fyOWws5YA8x0adXdJbC1gsHmLihm5Um5wk56YNm2GDk=)
3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: bGY9Ove7dJFYEwdswgzxYH/M3fU0o45mFag76JL4Kqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:e6:c3:a7:2c:65:dc:f7:ba:80:ee:dc:e1:f0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Jun 14 06:00:58 2025 GMT
Not After : Jun 15 06:00:58 2025 GMT
Subject: CN=daf9e1afd4ef33bdadbbd4074eb8c73ce2376191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:92:8f:80:34:43:49:95:97:d5:26:00:40:
03:cd:94:fb:00:9e:2f:6b:7d:a0:91:53:26:88:df:
d5:e8:45:1c:97:16:f4:34:19:d9:80:f9:09:f0:f4:
8c:b8:ee:8a:e1:23:27:ba:5b:3e:97:5a:e0:f8:b9:
0a:72:22:b7:8d:50:8d:5e:b4:53:f4:c5:69:ba:03:
c8:b3:e5:e6:f1:ad:01:b6:8d:7f:aa:7f:e1:b9:4d:
ea:16:f5:3c:7f:37:3a:a9:2a:e4:0e:f1:2b:c6:bc:
71:e6:26:41:98:73:b3:4f:17:b7:ad:30:34:74:de:
5a:5c:37:35:32:6d:39:b8:fc:a0:0c:e8:a8:cb:94:
1d:8d:bd:57:ee:a2:77:62:8b:29:87:40:0a:65:8d:
50:fa:40:69:77:72:f9:72:36:d7:6d:53:fd:d4:e1:
f7:83:66:2d:f0:46:97:bb:87:1b:d4:29:e1:0e:b0:
3c:f5:8d:04:9a:9e:f9:98:06:c0:10:af:32:c2:71:
bc:7e:64:ab:18:f9:e1:1c:ed:13:9f:2d:d9:39:59:
4e:68:72:dc:b5:f9:f4:09:04:04:f2:32:c2:6f:72:
73:19:1b:bc:ca:12:77:80:2a:90:cc:53:00:57:ac:
ad:ed:b1:6b:73:20:0a:ba:45:89:75:7f:bf:09:32:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F9:E1:AF:D4:EF:33:BD:AD:BB:D4:07:4E:B8:C7:3C:E2:37:61:91
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cc:13:2b:9a:da:17:b1:88:eb:1e:eb:dc:46:5e:dd:d5:b0:
2d:1e:70:6a:42:78:88:32:ed:a9:61:b1:32:46:65:53:f6:fb:
63:6c:bf:59:85:04:5d:c6:ab:ea:0e:b9:50:59:01:28:80:5b:
b1:aa:84:68:a8:50:70:2c:f8:24:a7:89:36:2f:e0:24:b1:82:
15:95:9b:7c:3f:3c:82:a5:98:32:28:99:b6:33:28:fc:7c:05:
cf:56:2a:81:3f:f3:e8:5e:23:f8:14:27:2f:f8:8b:e0:d6:4f:
c8:13:fb:32:93:3f:a4:dd:69:5f:04:99:2f:ee:19:2b:bd:00:
0d:af:ae:b8:f4:bd:7c:a7:5d:af:49:b1:39:56:37:01:c9:ab:
4a:e9:22:5e:a7:08:03:70:8b:f2:55:dd:b9:2f:ad:da:ca:c1:
c5:0d:0a:5a:74:d7:6b:5f:01:8c:bb:d8:f6:54:99:47:2b:2b:
71:d7:9b:a7:f6:b4:28:5b:44:0a:8e:13:a8:44:4c:75:6b:c6:
22:2a:8f:fc:59:b2:16:31:f6:fc:66:46:92:91:e1:3a:c7:27:
54:af:3c:e6:82:73:76:79:4e:33:74:40:53:02:7e:93:28:43:
3b:08:de:89:b1:90:50:b6:f7:da:a5:8c:44:2d:70:ff:71:b5:
cb:32:90:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:15:49 2025 by rpki-client