Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File: ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier: rzFaqR4cJ3VqFaYXmWxcLTyZZF0cn1LJ3krVoyUeKmU=
Subject key identifier: CE:73:BA:CB:87:E7:90:4A:12:0C:E8:D2:AB:1D:41:18:35:D1:4A:14
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 0197707548920048E70818422D83DBA4E7EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number: 0DAD
Signing time: Sat 14 Jun 2025 22:00:23 +0000
Manifest this update: Sat 14 Jun 2025 22:00:23 +0000
Manifest next update: Sun 15 Jun 2025 22:00:23 +0000
Files and hashes: 1: 7EbuG3-0BaX89LTHJW4crEKXOgE.roa (hash: JIvKyqKrpPXGWekxvpmbylJZltK1pz01V4vTqb0PGqw=)
2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: SSOgnn1Jlzph5U0PRSvxgEq6w+x/nmgV5bw7Yq6tH48=)
3: o17-yma_5t9exYXoXM4y9yk2rGc.roa (hash: 21brSGZYsEDJcaoR6r/SPKw0TZMGaiZDGKvCII90PgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:48:92:00:48:e7:08:18:42:2d:83:db:a4:e7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Jun 14 22:00:23 2025 GMT
Not After : Jun 15 22:00:23 2025 GMT
Subject: CN=ce73bacb87e7904a120ce8d2ab1d411835d14a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:08:57:b7:6e:3c:cf:57:4c:b2:b1:38:12:
de:44:fe:26:02:fb:84:f8:58:51:90:2d:eb:2b:60:
b8:ee:17:d1:a8:77:8a:fa:e5:49:7b:d0:ec:e0:92:
00:40:44:0a:47:85:fa:97:fe:50:26:18:5d:40:49:
4e:54:fc:34:10:4a:fe:38:a4:53:db:30:ca:aa:cb:
3d:63:b6:94:00:45:c4:6a:58:7f:fd:27:7c:0d:d4:
61:47:a2:52:46:f3:13:96:86:4e:c9:cb:60:8f:dc:
61:3b:fa:b6:c2:4d:f1:11:0b:07:36:bb:07:77:81:
de:b5:b4:2e:c4:5b:c9:01:cc:0b:91:d9:2d:9e:10:
33:ff:e3:f1:c2:8a:79:37:f2:76:7c:1f:ae:5f:57:
bb:df:15:f5:b8:8f:74:76:68:35:4b:a3:57:fd:1c:
a0:1c:f7:bd:a6:08:21:fd:b4:21:80:13:da:75:cb:
01:b1:1e:5b:bf:8e:54:db:c4:95:00:1a:d0:bb:3f:
0e:e0:58:e1:97:f8:87:a6:fa:b5:1a:8f:74:01:36:
c1:fe:e7:0c:8e:64:45:46:51:c5:87:d6:d6:62:8b:
77:43:d6:e3:d5:41:2a:69:00:46:46:bf:47:ee:96:
0d:99:1d:9a:82:d4:21:7a:1b:f7:2b:80:5f:4d:44:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:73:BA:CB:87:E7:90:4A:12:0C:E8:D2:AB:1D:41:18:35:D1:4A:14
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8f:15:41:b0:5e:cd:4c:46:34:19:3f:26:86:34:9d:d7:fb:
57:a7:2e:bf:bb:2c:f5:1f:32:da:13:3e:11:11:cc:f6:f9:98:
6b:d1:0f:ae:5c:ee:cf:1e:62:e3:65:23:52:9b:07:47:e2:de:
6c:3b:f8:4a:15:d6:bd:de:e0:74:3d:ad:8f:9f:af:0b:d1:bb:
fc:03:61:51:69:f4:8d:96:ae:fc:d0:af:54:82:78:b4:13:38:
67:20:ac:36:a5:26:e7:a9:73:92:40:92:f6:5a:aa:79:a0:83:
4d:02:f8:69:ee:95:02:9b:ac:35:fb:4e:25:47:cf:bb:2f:02:
0a:44:99:68:e3:eb:1d:bd:19:f8:6f:38:40:3c:bc:ef:c6:d2:
1d:b7:55:31:96:97:91:f1:ce:5d:f5:8c:cd:e9:31:da:f2:c3:
20:7b:45:34:66:28:ce:7c:c3:8b:a1:90:b3:a9:14:54:29:8d:
f5:56:c6:86:37:bd:aa:4c:ac:72:50:c0:d1:9f:1c:a4:34:71:
44:77:c9:0d:62:79:eb:f0:fd:69:7f:02:32:ba:1d:02:70:fe:
70:02:69:07:0c:1a:b3:30:8f:7c:80:9e:1b:c8:26:bd:6f:87:
f3:ce:45:3f:1f:db:0f:6e:75:23:ed:66:4c:3a:3a:e2:20:f7:
d3:c3:71:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:55:28 2025 by rpki-client