Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: +a/Yn2QcKGPlylvcd/CW3i5zvfVSHLOlbTPKQkcMLH0=
Subject key identifier: B9:E7:54:7F:73:9C:91:AB:AB:45:38:37:9E:B0:43:0A:AD:EB:46:DD
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 019768F2B554F2009A861DD7DB6D734EED04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 056F
Signing time: Fri 13 Jun 2025 11:00:25 +0000
Manifest this update: Fri 13 Jun 2025 11:00:25 +0000
Manifest next update: Sat 14 Jun 2025 11:00:25 +0000
Files and hashes: 1: UMWovwfUscq8UXa7HcOk99jOyUw.roa (hash: qIZD+/8tTRjxnDRolqscZk7I94oyVCzhMP8LFn0HeeI=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: Aref6/ZI0XOSZMaNhjKhNPjcAOCe1qsWk/8r2oURa5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:b5:54:f2:00:9a:86:1d:d7:db:6d:73:4e:ed:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: Jun 13 11:00:25 2025 GMT
Not After : Jun 14 11:00:25 2025 GMT
Subject: CN=b9e7547f739c91abab4538379eb0430aadeb46dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:f3:93:08:14:c7:10:6e:d0:31:ee:af:27:
c1:68:61:ce:00:5a:e6:68:1a:f0:4c:84:6e:5b:1c:
8b:79:27:9c:6d:d7:5a:51:7e:fa:40:48:d8:47:35:
5b:e1:88:64:46:3b:65:27:58:52:9d:5a:8a:55:70:
a7:87:b0:37:e0:fc:0a:20:16:e5:b6:2a:29:80:b6:
43:24:a9:15:4f:39:d9:8e:7e:a9:0c:1f:c5:3f:5f:
d8:34:7d:88:98:a0:55:ee:50:a0:d5:e8:59:13:ec:
0d:ee:3b:98:01:62:4c:cd:af:fb:5f:4a:99:7d:fc:
ac:56:32:dc:2f:f8:0b:ba:a7:5f:80:2e:af:82:6e:
ce:56:68:5b:dd:ce:4d:60:a0:e8:45:ef:f4:be:35:
c3:02:f0:b4:23:ff:75:e0:8e:96:dd:2a:13:29:53:
0a:6b:ef:1f:39:df:73:3a:82:c2:b2:75:78:26:b0:
c5:7d:34:37:56:91:31:22:56:a5:22:0a:96:0c:8e:
cb:c6:02:f6:79:54:42:a7:16:f1:6c:b1:4c:7f:76:
d0:1e:73:45:6d:6a:78:47:45:ce:fe:b2:ee:46:c0:
39:5d:9f:05:a5:10:4a:3b:07:fd:3f:51:7f:df:dd:
fe:3f:14:4a:09:6d:21:3b:84:d6:87:54:f0:bc:e5:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E7:54:7F:73:9C:91:AB:AB:45:38:37:9E:B0:43:0A:AD:EB:46:DD
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ae:57:c2:a7:3d:0d:17:11:b6:64:2e:cf:0a:f0:f2:2b:56:
a0:45:8d:35:8a:fa:2c:f0:2c:1e:40:e2:59:57:f9:b3:9d:b5:
fb:fe:cc:7d:4a:ee:46:29:70:3f:25:32:22:aa:e6:3f:59:38:
fb:95:d0:8c:6a:d1:0d:fe:f7:9d:5d:cf:15:6a:17:86:fd:62:
b0:ad:54:3f:e5:e1:5d:74:64:33:69:02:f4:24:d1:78:d9:0f:
c2:4f:b7:77:32:e8:ab:2c:ab:42:c3:f0:6e:15:33:60:e0:8f:
3f:80:9c:f7:a8:51:43:97:32:34:1d:ba:f7:64:3d:08:60:73:
ae:2e:c7:8d:93:f9:24:63:fa:05:9d:d7:2b:b4:d5:c4:27:82:
f0:2d:f0:1c:d0:70:4c:d0:d9:11:01:38:d3:33:64:c1:65:ae:
e3:f3:8b:cb:77:f9:1c:93:db:c6:4a:53:07:84:a2:c6:43:fe:
c9:f0:dd:df:55:53:99:4f:8c:31:0e:03:7f:63:97:b6:37:bd:
e7:a5:89:65:3b:6b:0e:cb:11:98:b3:f6:a1:99:8a:5d:08:6d:
07:48:e2:5d:20:f5:fb:1d:2a:da:e4:ac:ea:8e:d3:d8:a4:58:
86:0c:f1:f8:64:8b:e3:55:f1:77:ff:14:a3:e5:a8:77:a0:9a:
ef:e6:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:25 2025 by rpki-client