Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier: JEnx6mXV6EYP7A4sh1XS2F5UHfyMnaw4GbReMkMrK+A=
Subject key identifier: 9A:29:54:5E:CD:E6:E0:84:C1:50:B0:8E:15:71:79:DC:22:FD:2A:13
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial: 0197887DA20771483FE8B504B1A622B2EEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number: 0F05
Signing time: Thu 19 Jun 2025 14:00:24 +0000
Manifest this update: Thu 19 Jun 2025 14:00:24 +0000
Manifest next update: Fri 20 Jun 2025 14:00:24 +0000
Files and hashes: 1: DkGvgDnbdtEHDMx7b64dzBjhPco.roa (hash: 8mB0OA1c8Mmrq7iJrmaJaIVGUwLhqVKrizBW/uXLsCE=)
2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: D3yA8YauxooWdtI2xd9RCFf+O2BKqizcv9AGMqVhRHM=)
3: ZiWYCsD1Dry724z5OmJJ8Oawr6w.roa (hash: pA+krdDNaZYU7n+P4r9c22BIzRTJGvLkmVz3LgTk2aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:7d:a2:07:71:48:3f:e8:b5:04:b1:a6:22:b2:ee:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Validity
Not Before: Jun 19 14:00:24 2025 GMT
Not After : Jun 20 14:00:24 2025 GMT
Subject: CN=9a29545ecde6e084c150b08e157179dc22fd2a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:f6:f3:5a:dc:5a:68:1e:a1:d4:c9:2c:88:
54:a5:dc:d3:fa:72:9b:28:95:96:27:b4:ab:82:75:
1f:8f:f9:f8:21:b7:3c:82:70:0d:1e:9e:3c:19:97:
cc:52:3d:0f:29:bc:59:90:9e:11:c4:f1:fd:01:27:
3b:e0:0d:bd:07:ce:8f:dd:78:e1:eb:88:01:fa:7d:
ee:d4:7c:0a:35:8e:1a:86:0a:ec:d8:5c:ff:17:11:
58:d3:7f:59:e0:df:90:8f:fa:cb:41:66:db:7d:fd:
86:b6:06:e8:5b:5c:97:3e:72:3d:ee:e4:35:b0:49:
53:6f:2a:24:8e:4f:5f:a4:09:06:e7:6f:f1:13:af:
e4:45:df:0a:ea:bd:2e:db:91:c1:2a:d0:5a:3d:30:
a5:45:ae:56:d3:e1:df:06:7d:77:e6:db:bb:fe:78:
2b:5d:6d:6c:27:11:79:d8:fa:42:3b:1b:53:01:31:
7f:05:5d:19:1d:7d:74:d7:4e:3d:fd:59:eb:e9:f1:
79:75:86:c2:60:ca:b0:3d:4c:bd:72:52:90:7e:ed:
f6:71:4a:9e:a6:e3:d0:4b:90:86:20:21:dc:dc:52:
1e:ae:5c:48:44:19:96:b4:3e:b0:5a:af:c6:8d:50:
6b:15:11:c1:10:98:01:c6:a0:0a:a4:bd:3f:c9:a0:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:29:54:5E:CD:E6:E0:84:C1:50:B0:8E:15:71:79:DC:22:FD:2A:13
X509v3 Authority Key Identifier:
keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:32:d0:41:dd:34:4f:98:f5:4e:1c:ae:b2:8a:c7:b1:07:29:
07:68:f6:0d:f9:79:f1:e6:1a:e3:ba:63:cc:cd:2f:06:62:48:
e9:e1:21:58:56:90:a8:a1:10:45:c9:57:84:bb:74:78:40:47:
e8:ba:9b:a3:4a:8f:66:73:74:e0:56:0f:1a:a7:35:9d:46:71:
79:86:45:4c:d5:16:f6:98:35:88:72:d1:ed:52:b6:b8:3a:31:
f7:74:15:7a:a5:58:7b:a8:90:37:2d:29:41:2c:9b:4a:74:fa:
f8:49:99:0c:3b:04:de:31:02:45:ab:a8:d0:74:a5:d1:b3:6b:
df:3b:6a:03:5a:bb:b9:ea:f6:36:40:14:e9:c7:c7:cd:b5:f6:
42:da:0e:aa:ec:19:6a:f6:98:e2:9c:4a:f5:bf:be:cc:fc:2e:
52:4f:6d:3b:54:31:c3:a6:82:e9:31:54:b0:24:07:80:e5:fa:
e2:da:27:c3:1e:6d:11:97:25:03:79:d7:24:db:57:82:c3:0a:
27:46:24:ff:1f:37:68:b5:3f:11:bc:72:06:fc:e3:c7:dc:42:
d2:95:b3:3f:68:3e:4c:da:6e:c0:c1:2a:53:b5:be:57:b3:61:
bb:21:d1:5a:86:12:52:29:50:18:31:23:33:3b:9d:90:6e:1d:
2b:7f:76:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:12:43 2025 by rpki-client