Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
File: ZvmDE4lp-NpnT3tcATPgwtAptMg.mft (raw, json)
Hash identifier: S6RrTX0CIFY93PC86wquUvGG45QIAbN7tiEWAx7aUdg=
Subject key identifier: 4D:2B:6E:F3:A0:C0:B7:A1:F6:A4:6A:5A:DC:FE:DA:B3:8D:7E:0D:8A
Authority key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
Certificate issuer: /CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Certificate serial: 01977865E4604E356B0DBE924A4A5CB00330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
Manifest number: 1593
Signing time: Mon 16 Jun 2025 11:00:32 +0000
Manifest this update: Mon 16 Jun 2025 11:00:32 +0000
Manifest next update: Tue 17 Jun 2025 11:00:32 +0000
Files and hashes: 1: 1-mam0MNYijlsUMBvUuzN8saQbSA.roa (hash: 7/MiQ2GbC+9P+jtI1s6HZozavARFckuLPrIIYS9KDUU=)
2: P1AdxUyUjVnpvB2qJGHDHOSGgqE.roa (hash: X7W16uCiCg3Hk2XdddLjkg7PZ/jHsdu8vmq4ZCQC5eQ=)
3: ZvmDE4lp-NpnT3tcATPgwtAptMg.crl (hash: T3D17kEdgYzMaGIXGD/chsdGr3Ylqv6TQASE1gsp/Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:e4:60:4e:35:6b:0d:be:92:4a:4a:5c:b0:03:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Validity
Not Before: Jun 16 11:00:32 2025 GMT
Not After : Jun 17 11:00:32 2025 GMT
Subject: CN=4d2b6ef3a0c0b7a1f6a46a5adcfedab38d7e0d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:d8:19:80:2f:89:1a:5f:8e:11:b3:e2:36:
83:ea:53:2c:a2:6f:ba:5a:92:8f:fc:f0:e5:9f:ae:
b7:df:65:f2:11:34:53:7a:ab:6b:49:2d:9d:e2:04:
30:17:54:67:86:f5:66:4f:91:21:69:93:98:bf:d2:
7f:49:b9:3c:5c:ad:a3:6c:fc:eb:69:0e:01:80:01:
e2:88:03:a8:ff:31:c9:29:96:98:60:38:63:d2:ba:
5d:b4:81:4b:45:84:75:44:32:2b:29:d3:d9:c7:e0:
0f:7e:e1:95:08:ee:4a:1b:b7:14:2e:3f:83:8f:bc:
ca:e5:4b:93:c4:15:02:5b:e0:71:e7:ce:90:29:8a:
e1:1c:c9:f6:45:f1:dc:93:eb:da:96:42:19:24:42:
9b:7e:fd:97:6a:a0:0e:f6:05:3d:af:b4:5f:8c:36:
03:be:49:c0:6f:6a:c9:d7:f2:9a:8f:c8:f7:62:49:
5f:a3:80:ba:aa:9d:ba:7b:89:df:2b:38:88:c3:4d:
c9:c2:5a:e3:c4:e1:48:28:e7:fa:c2:77:17:30:db:
11:ad:b3:17:1b:aa:74:7f:5b:21:ed:21:92:0a:e2:
2f:50:f6:86:09:f8:b5:70:d2:48:59:53:57:2a:f6:
ea:86:58:49:30:12:d7:cc:cd:26:3f:ea:e5:6c:21:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2B:6E:F3:A0:C0:B7:A1:F6:A4:6A:5A:DC:FE:DA:B3:8D:7E:0D:8A
X509v3 Authority Key Identifier:
keyid:66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ec:d5:82:42:88:d3:de:74:f1:33:0e:7c:10:e0:86:39:09:
92:83:31:69:45:aa:73:6b:66:80:ed:80:88:4f:3f:8f:bc:74:
c0:ab:43:cd:32:83:c3:0a:00:02:bc:8d:8d:ec:ba:c8:80:c2:
12:b0:7f:48:e3:23:82:b3:05:5e:15:ff:06:05:9d:82:ac:f6:
ff:3c:6d:2e:6a:f4:b0:83:1b:09:26:8f:3f:a0:c4:15:d2:38:
bc:59:13:5d:68:cc:74:4c:11:69:ac:aa:fc:79:21:d4:e9:fe:
cb:38:58:b8:5c:e5:26:f6:7e:31:ef:4a:f7:b4:6c:89:40:d8:
cb:bc:ae:9d:e4:e6:61:ca:9c:32:35:71:c7:97:ae:e1:07:bd:
d9:a6:af:ee:3d:22:08:5b:80:e3:05:26:00:87:08:94:19:56:
c7:b3:81:d4:c4:11:fa:7a:f7:4c:e9:1d:da:59:c3:70:8f:71:
e0:9d:c2:1f:5a:00:11:50:7e:91:20:2c:2e:c0:dd:7a:22:7e:
fd:81:8c:30:c0:2c:5d:02:7d:5d:13:7c:cb:6a:30:dc:c1:93:
b5:02:2a:a4:b5:ea:1d:d4:ea:49:c6:6f:1d:60:98:0c:36:5f:
eb:66:67:b7:c5:3d:b3:8a:97:f3:5a:44:de:89:63:e7:fa:0c:
e4:8f:0f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:58:29 2025 by rpki-client