Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
File: zkP-lNpK73rfscFih1rxysfLpLE.mft (raw, json)
Hash identifier: mfn2OC97T11kWYKLvs6q8T6FuE8dsziUx/iZbEHD56U=
Subject key identifier: F9:19:FA:B0:A8:77:15:4F:93:42:77:16:06:9C:71:A1:BE:71:1B:96
Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
Certificate issuer: /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Certificate serial: 01976F630F52AE4056E123C00A147A94E02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 17:00:52 +0000
Manifest this update: Sat 14 Jun 2025 17:00:52 +0000
Manifest next update: Sun 15 Jun 2025 17:00:52 +0000
Files and hashes: 1: VI-dWQcY37xUT1kUINfwRf4ITOY.roa (hash: /K+hbbpjK6p98+FcPVOwuQPFXuHi6fBZ7x81PS6CuTg=)
2: zkP-lNpK73rfscFih1rxysfLpLE.crl (hash: k2dCZ8rm3frmYi5j/XkEJMWRohNm8Q9zs54BDS9LPa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:0f:52:ae:40:56:e1:23:c0:0a:14:7a:94:e0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Validity
Not Before: Jun 14 17:00:52 2025 GMT
Not After : Jun 15 17:00:52 2025 GMT
Subject: CN=f919fab0a877154f93427716069c71a1be711b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:1c:20:54:17:5a:96:03:30:fd:f7:cf:b3:
d1:71:e8:79:4b:5b:0a:45:f9:1a:ff:a7:fd:e2:bb:
38:85:57:b7:a5:f2:b3:b6:22:5f:42:42:7a:5b:19:
78:a5:ce:31:cc:04:e7:57:c3:5b:8b:14:61:74:ba:
e9:b3:9f:b4:70:60:b8:3e:46:b3:db:82:8f:46:4b:
46:81:99:9d:84:bd:b1:98:6d:6a:10:64:ad:8c:7f:
b8:03:d4:1b:b9:46:59:f0:cf:0b:57:89:0c:75:78:
0a:58:64:cf:1f:de:38:db:37:ee:34:03:75:83:4e:
cf:7a:66:48:6f:48:29:23:e7:fa:d9:90:d6:03:d6:
4e:c5:ad:0d:74:dc:c1:4a:ff:3b:6f:80:65:f5:a0:
5f:13:0a:cb:cd:b4:96:a5:f2:84:bc:fa:8f:52:6b:
13:4a:02:12:ca:17:ae:99:6c:ee:e8:a1:3e:ec:97:
1f:21:a5:5c:12:6b:c4:e4:d4:c4:6a:6f:a2:77:e4:
31:d4:b9:e9:82:3d:76:f8:0e:fe:d0:83:2a:6c:54:
35:1a:e6:07:4a:d6:28:95:32:72:57:f5:8b:58:ef:
29:6d:50:a0:0d:93:25:5d:27:a1:a6:48:0e:83:b1:
ac:eb:6f:6b:5d:48:2a:01:bc:45:82:4f:56:07:70:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:19:FA:B0:A8:77:15:4F:93:42:77:16:06:9C:71:A1:BE:71:1B:96
X509v3 Authority Key Identifier:
keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:09:6c:74:03:2f:15:ea:02:ee:88:e1:62:a1:8a:26:8e:2c:
6d:92:f0:64:1a:82:52:e0:80:04:1c:1f:45:e8:07:bd:13:12:
24:af:54:92:c7:34:b4:e5:b9:c9:16:47:6d:fd:3a:48:95:14:
27:f1:a3:cd:e7:79:b4:8c:ba:30:4a:85:11:78:e8:01:78:e5:
b0:76:f9:1f:29:99:1a:3c:60:66:3f:f3:dc:c8:0c:23:c9:ff:
b1:04:6f:83:0d:5f:89:94:93:b6:bd:2e:cd:d0:6c:3a:84:d6:
d8:fb:95:14:70:73:2b:a5:8e:61:3e:61:1c:26:0e:5c:0d:ee:
d0:86:06:9f:7a:0a:42:b2:db:f2:0f:5c:3f:67:da:1e:ee:b4:
9f:57:cc:9a:26:16:2a:15:8d:91:13:b6:06:89:ec:84:b1:c3:
7b:31:f2:04:00:82:9e:e6:e4:e0:e3:7f:e0:d9:a0:03:01:e8:
b2:7d:3e:0d:e3:23:d5:20:eb:d1:4a:b2:17:15:2b:f3:14:f8:
50:54:9e:5a:0d:a3:08:d7:67:0e:08:bb:7a:a8:22:03:f4:6f:
a3:61:29:78:ef:11:f8:2d:13:ab:b2:5c:9a:95:15:16:a5:79:
f3:0f:a4:4b:07:41:3d:ec:e8:4f:f9:54:24:bb:ff:ad:c8:65:
3f:57:fb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:58:00 2025 by rpki-client