Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: lB+ukt+dc/NnjxFSmS0UcZxvZRx3ARbquetL1ptW+K8=
Subject key identifier: 4F:BC:D6:96:3D:0D:CE:5B:DB:97:32:EB:C9:D3:9F:FF:76:C6:C0:A2
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 01976C2B57B0B6A6B59BEDF314E386F564EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 02:01:09 +0000
Manifest this update: Sat 14 Jun 2025 02:01:09 +0000
Manifest next update: Sun 15 Jun 2025 02:01:09 +0000
Files and hashes: 1: 8VKbbYixNDCpMWrK8Sk18PBt9UI.roa (hash: Y+EwSEC1feZ0TsmplFocxAWfhhAkFX7OxAfih+EUUq0=)
2: 9iP7WJpaeB_-buLXK8znbS1Ia3M.roa (hash: WfmJ7gmjlOFm1xY2ae1k54FPRmlhbu8yzibRgq+Obrw=)
3: KO1YGIQXzqmCT0PfoP9U_bP8Ik0.roa (hash: snMWMSvb7n+P3ZpH6VNK6nVq04jDlvUE+5CJBun4qik=)
4: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: IJ3bMOxv+4P6lkvP5OGYZk38UKAGvlDMb65Axo/7TdQ=)
5: cvFT9U6f9q2iEs9qYdY5pICL5uA.roa (hash: rpF3ncfSzctaMA19sRq+0rLTTnT49oldb4WYIOd4jLo=)
6: j97-8Fr-iu2JkstPIny1GyoUCWs.roa (hash: hG141yU64tbNFyVwR3WNdvmuMd8XffVyyIfIeXPsAX8=)
7: tOlreYPe7u67idbXYncHUQK-mIo.roa (hash: KU1u5Wpoy603w8tu9YwxwROqP4UYKqLHuGvfzTsDk/c=)
8: vsJTJNJUt5vULQK53FxCdXmG5wk.roa (hash: Tj8gi+0DcWqm3KQnTu0KBcAKSHrMVabVRmlaSv0QlNQ=)
9: zegOmVW3er1W7JPzrg42o5wEwdQ.roa (hash: 4d7Zk0b0nBk4WIXJdlH8YvyzxungmG127NYOALKCd2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:57:b0:b6:a6:b5:9b:ed:f3:14:e3:86:f5:64:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jun 14 02:01:09 2025 GMT
Not After : Jun 15 02:01:09 2025 GMT
Subject: CN=4fbcd6963d0dce5bdb9732ebc9d39fff76c6c0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:88:6b:c0:46:e4:e6:33:e9:b0:63:58:03:
08:9c:35:d7:ac:1e:7a:a4:e2:33:ed:da:c8:cf:ca:
f8:4f:54:19:13:44:04:67:eb:5b:ae:fd:cb:12:be:
73:58:35:4e:ee:d0:61:f2:9e:22:48:59:b4:e0:ff:
56:a1:b5:b2:cc:d3:60:ed:97:b0:7e:69:f2:5d:cb:
5f:9f:54:6b:57:1d:23:16:79:c0:7f:af:fa:be:f1:
67:b0:ff:dc:24:15:16:06:e4:db:d0:c5:6f:e1:97:
e7:74:88:34:04:04:fd:91:1e:cf:3c:06:6e:13:81:
14:0c:93:86:78:5b:f5:d5:04:bc:2a:65:1f:26:a4:
63:c9:f9:d5:10:ab:54:50:61:41:8c:dd:a0:99:70:
e6:ac:58:d3:f2:d8:17:e2:cb:23:b4:ff:49:90:99:
7b:e0:e3:66:ce:88:64:1f:2a:40:9c:e2:fb:bd:8a:
47:87:2b:f6:f9:6b:58:12:23:5f:b6:ca:32:25:71:
b1:fe:7a:fc:e1:f3:b2:9d:10:fa:25:cb:9a:e2:17:
ff:4c:f8:9b:4e:43:51:93:e3:89:7b:1b:96:db:59:
3f:f9:f5:88:e5:0c:9f:7e:bb:a9:8e:60:f5:a3:62:
71:b2:eb:34:03:f7:2b:21:65:79:27:02:09:cf:91:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:D6:96:3D:0D:CE:5B:DB:97:32:EB:C9:D3:9F:FF:76:C6:C0:A2
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a5:7e:b8:e7:73:c9:72:18:ed:62:d0:05:d2:b3:e7:17:a5:
1d:13:ee:ca:a8:48:79:ea:1c:d9:86:bc:fe:fc:46:e2:e8:c3:
db:cc:b3:18:42:2e:18:ae:78:65:1a:44:f3:a7:0a:3c:47:1d:
8a:df:64:bd:28:87:de:21:bc:ff:f2:c6:5a:b5:2c:93:ca:26:
5f:b5:38:2a:71:b0:7a:f0:21:78:e6:88:d2:aa:70:9c:41:f4:
aa:e6:c3:15:79:ee:05:30:98:cc:9e:c0:e1:d0:bd:99:60:f1:
8e:51:b3:ca:24:c7:ee:73:4a:91:f3:90:76:21:4d:10:3e:d4:
69:b9:93:46:0d:97:e0:53:d5:54:bb:1c:4c:cb:e2:f8:8a:8d:
cc:11:85:3d:7b:d1:55:8f:7b:94:72:4c:a9:c1:e9:93:0b:3b:
63:2f:db:31:a9:d0:86:c2:bd:12:a1:4c:59:61:4b:c9:43:73:
c7:8b:db:6a:57:cd:40:16:e0:1e:f9:0a:15:5b:fb:83:ef:61:
66:08:8a:c0:0d:0c:51:f6:aa:3e:74:d0:e7:fb:8e:32:a0:82:
d1:0f:f5:bb:03:a1:48:0b:94:6b:b6:c1:d4:43:82:c2:c4:ed:
5d:a7:3a:f8:f8:63:2d:f9:4e:8d:8c:e4:0c:49:3a:bd:04:06:
6f:89:74:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:35:17 2025 by rpki-client