Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
File: Kz1duQDggbIT6h8HHsXAA0em_ZU.mft (raw, json)
Hash identifier: UVszHCLvqaJmnBwBEvfsHFOepE+KVEM2baYfSmJTsso=
Subject key identifier: 40:C3:81:CC:E9:4A:C6:54:11:9A:43:F4:8C:00:53:ED:F7:0C:9B:64
Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Certificate serial: 01976C98C3C0DDA58D80440FF69DA07DFDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
Manifest number: 1466
Signing time: Sat 14 Jun 2025 04:00:40 +0000
Manifest this update: Sat 14 Jun 2025 04:00:40 +0000
Manifest next update: Sun 15 Jun 2025 04:00:40 +0000
Files and hashes: 1: Kz1duQDggbIT6h8HHsXAA0em_ZU.crl (hash: bldsWeBZOf7tRhJYvgKkWf0ISqVSO+OdwWJxRLHFFYA=)
2: NEgXAX_wlUMaQy2Alio_tXjqDko.roa (hash: AzGPeergn3UOGKBGdY9DWg2cAqJA+mog0I2Sf6Bpi0g=)
3: piNzw1TtbP-p8HWhuy6SBF8spgg.roa (hash: wNEUGiASiQTLAx7gOGoQvQVkZK49FM62Tev24iu4h1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:c3:c0:dd:a5:8d:80:44:0f:f6:9d:a0:7d:fd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Validity
Not Before: Jun 14 04:00:40 2025 GMT
Not After : Jun 15 04:00:40 2025 GMT
Subject: CN=40c381cce94ac654119a43f48c0053edf70c9b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:59:90:2d:af:b6:18:0e:1c:b5:24:ef:3b:44:
9a:cb:c0:8c:d4:c3:b3:4e:8b:d9:42:f9:38:19:c4:
31:b2:ec:1c:57:eb:31:0c:63:32:26:d9:a6:c4:71:
d4:64:6b:f6:4c:f2:6c:8f:da:a5:97:eb:a3:03:e3:
d2:0e:bd:f5:5b:b0:6b:6d:b7:7a:41:3c:8e:d2:3c:
7f:91:61:2b:3f:25:a2:0e:f1:50:5b:75:fd:08:ba:
54:59:38:ce:01:57:68:2f:50:a4:8d:10:a4:af:cd:
e5:7c:17:9a:d3:fd:61:5d:93:5b:95:8b:27:e1:68:
a3:48:ca:8d:2e:e5:65:de:cc:df:c3:b9:b6:0b:9b:
62:ed:bd:36:e4:a0:74:e8:fc:32:15:87:9f:00:4e:
43:38:ad:4f:c0:98:a1:19:ff:76:56:05:3a:e6:13:
4d:6a:9d:5d:52:59:46:b7:3c:ef:2a:33:a4:48:1e:
df:5b:2a:74:93:b8:29:99:02:c3:03:dd:99:c4:af:
d8:26:2a:24:38:7c:de:78:da:1d:1f:56:04:c9:c5:
1d:60:0d:af:03:8e:5e:98:7f:93:ac:90:8d:61:5d:
bd:56:99:48:b5:0d:12:5c:a5:d4:51:17:36:80:8d:
69:26:59:e0:04:d6:78:74:35:b4:0d:85:0d:38:75:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C3:81:CC:E9:4A:C6:54:11:9A:43:F4:8C:00:53:ED:F7:0C:9B:64
X509v3 Authority Key Identifier:
keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:99:8f:60:e1:48:b5:fc:cd:33:2b:45:6b:77:7f:b3:c2:2d:
a7:ab:76:e5:90:aa:26:96:31:7d:19:f2:03:cd:68:a7:6c:e8:
40:3f:e6:4f:aa:b6:f5:2a:f2:3d:f0:8b:47:8a:b9:e8:8e:ca:
0c:35:b1:fe:10:25:b7:95:67:c4:25:46:31:13:18:ef:a9:f4:
68:56:bb:ea:7b:c3:4d:ff:c2:62:c0:e9:6e:f9:a7:6e:e9:88:
4c:59:6b:6a:e2:c6:80:e8:d0:ef:c1:9e:6c:06:e1:e3:02:78:
e3:cb:09:2e:06:82:cf:c2:4f:5a:fd:2b:b1:6b:01:48:a1:75:
57:ee:b6:c8:8d:1a:58:ab:70:44:af:8f:43:ca:81:b2:73:61:
8e:b9:2f:6f:47:8b:8c:aa:78:76:45:b1:2b:24:72:81:22:0d:
cb:87:5a:c1:c6:97:6c:19:95:6b:0c:10:af:e2:dd:be:ef:26:
30:fd:a7:e6:44:d0:90:93:4b:bf:8f:68:a5:e2:e0:5f:98:c3:
c1:87:57:b7:06:8e:2f:17:36:16:c8:81:03:6d:36:d4:b4:72:
f3:a5:ff:88:e0:d9:e1:ef:86:64:72:e2:70:d4:cf:3a:ad:d7:
15:10:2e:4f:23:8b:fe:29:4c:53:51:e6:b6:24:a1:18:ab:bf:
8d:c8:cc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:47:49 2025 by rpki-client