Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: UnPTOLHFOGhdvICdwzRoSHD/NfS1XCcnFPwDLa2LqxI=
Subject key identifier: 67:2F:14:F6:21:C8:DD:D1:A7:C1:B2:06:03:E6:48:07:71:86:50:29
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 01976929E16E380D81D16842227E950F214B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 0F8B
Signing time: Fri 13 Jun 2025 12:00:41 +0000
Manifest this update: Fri 13 Jun 2025 12:00:41 +0000
Manifest next update: Sat 14 Jun 2025 12:00:41 +0000
Files and hashes: 1: V2EVjCh2XvTTuPUY0Ak-ADU0N0o.roa (hash: VWCe010VtFOUbqTmIo3pVm3sseFcd/9FPMczSAveexo=)
2: VPlTFU2v9_-5Ue2KnHe2hWSrbvU.roa (hash: xjvDPgjYTpNfIICBZo+KKv8oMM12S2D874qBPcDZFuw=)
3: YhHxsxNH4RP_FfePdq8SlQdgZyg.roa (hash: K3fGfKE/dBh+cdQFHO8biNnAdH/Glpbr/rysigKy5PI=)
4: jFc_wlQoiHbPyXbisyroWRENeu0.roa (hash: ITqThjHQNWEDIzaupfeF4coOz5rZPmtce8EoNUCuRBY=)
5: lCJmZzkmjXSr7FEoBdA3ylq1U04.roa (hash: STzWF0AEDLQ8FI+DmmWhhzxn4hvpubeIokmYgyoJVoQ=)
6: zVdth24X5nqjsfHBDas52yk14is.crl (hash: NzmNUliiOX7yjS4GI7LB5GtLxR3pBFRc2w2JQrv5czk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:e1:6e:38:0d:81:d1:68:42:22:7e:95:0f:21:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Jun 13 12:00:41 2025 GMT
Not After : Jun 14 12:00:41 2025 GMT
Subject: CN=672f14f621c8ddd1a7c1b20603e6480771865029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2a:63:09:b9:f8:80:65:7f:0a:5e:69:e1:f4:
81:c8:bf:bd:6b:b7:db:f1:91:3d:c0:45:ff:10:57:
26:ec:a9:86:bf:89:48:4e:22:87:03:bb:a0:3e:43:
4c:fe:87:ce:d1:3f:04:9f:83:ca:65:bf:f9:3f:02:
f6:79:59:24:60:a9:e6:34:db:0d:35:48:88:5d:e7:
c7:35:56:18:aa:c4:d2:56:b1:a1:cd:e9:c8:64:fb:
ec:da:f8:24:2e:87:9a:33:19:ab:ee:ee:59:f3:d5:
ac:af:0d:f6:2a:df:c9:3f:dc:d1:4f:d2:38:8f:9d:
c3:70:4c:b9:b6:45:30:bc:3d:8c:64:c9:60:04:95:
6b:41:cd:dd:a8:a5:e8:57:47:85:7d:9b:42:ed:da:
26:a1:81:2c:91:66:80:07:a8:9a:6c:7f:ef:ce:d9:
e1:30:7e:c2:0f:be:01:d8:2b:4f:8f:0e:fa:6b:fc:
74:49:c9:3f:d6:f9:f9:45:73:6a:e9:54:b2:be:6b:
ef:73:f5:fd:d2:df:bb:b9:98:94:98:a6:34:eb:b5:
b8:96:8b:03:1e:ac:a5:5c:0c:03:b4:b2:b4:19:28:
0c:88:7f:7b:a1:ed:d1:38:e2:83:ab:6e:79:45:e3:
71:e1:38:40:f5:0a:b3:12:ee:5a:fa:d9:bf:51:8b:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2F:14:F6:21:C8:DD:D1:A7:C1:B2:06:03:E6:48:07:71:86:50:29
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7d:73:58:2d:79:20:f2:49:36:22:62:3f:c8:3d:33:d3:b6:
7c:db:b2:13:36:a6:d8:42:9f:8c:70:7c:74:7e:60:1d:5b:3a:
aa:e3:ea:a5:2e:e8:bc:c0:82:9c:e3:94:34:4e:97:d1:bf:c2:
65:c8:78:be:0f:5a:6b:a8:16:76:b1:3c:27:da:b0:c7:9d:5c:
10:9d:c3:24:df:67:32:7e:e6:d3:0f:13:45:16:d6:df:7b:18:
ec:f1:99:9f:dd:29:8e:41:31:66:f6:e5:fa:a8:8d:0f:8d:c8:
82:28:53:72:da:cc:d7:76:ac:07:29:be:06:ed:0c:44:f8:ba:
32:1d:4f:cc:42:3b:4f:50:ac:6c:31:72:37:54:ce:fa:2b:69:
d0:ad:2f:95:7e:1b:56:38:58:8b:32:c5:df:f3:26:7d:68:d3:
54:36:d2:05:53:cf:be:6d:9d:71:cc:6e:7f:20:72:30:78:1b:
76:e4:8f:17:3b:b7:6a:45:ee:38:e2:53:84:cd:8f:f7:1e:86:
f8:cf:21:2d:36:3b:36:b0:71:8f:ee:ed:45:e8:99:7a:02:68:
34:10:b2:a3:57:dc:02:41:81:4b:cb:4b:80:fb:db:db:95:2b:
66:27:b4:a3:14:f2:bb:f1:8d:65:86:3e:7c:fc:1b:f3:e5:bd:
23:ef:11:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:39 2025 by rpki-client