Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
File: zqedzVo97kUOrz-TFS7W2oBrv3E.mft (raw, json)
Hash identifier: 5P/lkiT+xS1J4DeBLIL7HVMX8hZwzCISIbYkc9Dgnzg=
Subject key identifier: B9:39:F3:2D:BC:57:C9:27:1F:4B:B0:F5:5B:7D:FF:13:37:67:EA:2D
Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
Certificate issuer: /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Certificate serial: 01976D7443619C0BF813BFCBE113F502BAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
Manifest number: A8
Signing time: Sat 14 Jun 2025 08:00:25 +0000
Manifest this update: Sat 14 Jun 2025 08:00:25 +0000
Manifest next update: Sun 15 Jun 2025 08:00:25 +0000
Files and hashes: 1: I646M_btsSzN2hgU43In8XScCvM.roa (hash: XbiElIXeBAvzCXqiHxg3yiWmZinPZ2P2LAOYB8cFUtk=)
2: VEDYX_cUfJzMWRyMM4Dauca7wqY.roa (hash: emvPGd/BGNmoaOgiTJawr2YtCEYZXYHWYyhS2hE0sKg=)
3: YSMyo0r9Sisa_qEUD5bNOCn6J7k.roa (hash: 2e6jr3gF4oxshJJOD15Mpry9Shp0v5NKkIGpPv8Ct7k=)
4: lSi0kTGzn2fZQ79DDpFPyNvNhWI.roa (hash: F0jv7qe5DmHgW7kJgMByEcK9/LyeESyPvMnKoboRIjc=)
5: zqedzVo97kUOrz-TFS7W2oBrv3E.crl (hash: 1MzQGacct2qG88bQUxtjp9Ayree7uldV9XABuJ25yRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:43:61:9c:0b:f8:13:bf:cb:e1:13:f5:02:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Validity
Not Before: Jun 14 08:00:25 2025 GMT
Not After : Jun 15 08:00:25 2025 GMT
Subject: CN=b939f32dbc57c9271f4bb0f55b7dff133767ea2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4b:86:69:37:07:68:22:7c:47:98:50:28:69:
ad:67:57:de:d1:14:b1:bb:78:d8:fd:2f:f6:51:46:
8d:ca:31:fe:98:ef:f8:e3:cc:07:fd:53:cf:db:67:
ff:e7:c0:08:f8:36:41:26:7e:8a:4d:9c:cf:38:a3:
3c:d6:f9:46:8e:c0:bb:d1:2b:3f:54:61:25:3e:66:
22:08:55:20:77:8f:8e:a1:89:e2:67:29:3f:71:34:
a5:27:fb:58:21:9c:31:8c:5c:17:2b:38:19:c2:40:
51:e9:43:6e:ca:04:9b:b9:d0:ef:b8:16:f0:ca:ff:
a7:1b:b1:02:eb:62:f9:55:7f:1d:d1:10:cf:f9:b1:
08:3b:ad:2f:82:56:c8:2e:44:1f:b0:81:76:48:bd:
cd:1c:b2:0e:b1:7b:82:30:ff:bf:d3:ec:65:83:f0:
0c:e4:a1:72:31:e3:c2:3c:8b:23:88:54:6c:9b:3d:
f2:26:75:6d:fb:fe:02:93:a2:4b:b7:64:7c:ca:4e:
38:e6:6e:99:e7:53:e8:08:c0:3c:ca:50:ec:e8:5c:
6e:56:e7:d2:1a:5b:b8:b8:38:25:e4:dc:fc:69:3d:
fc:2f:e1:c8:66:d0:c7:dd:a4:a9:29:bd:2b:8e:dd:
cd:f5:3b:d8:9d:00:c6:7c:69:ec:68:6c:a6:da:65:
3d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:39:F3:2D:BC:57:C9:27:1F:4B:B0:F5:5B:7D:FF:13:37:67:EA:2D
X509v3 Authority Key Identifier:
keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:30:e6:2c:8a:49:91:5c:1c:30:95:78:07:57:75:6a:d4:66:
df:d8:15:05:77:da:76:19:41:ab:db:f0:f1:06:de:86:f9:35:
08:81:6d:c4:d3:f5:80:7d:1a:4b:50:91:36:80:1a:d3:44:20:
04:f7:24:a8:99:e7:bf:ff:44:be:31:16:b6:d0:a1:c7:ee:ae:
e6:c3:39:36:8b:a7:7d:9f:f5:ff:a3:e0:39:12:bc:25:c4:79:
8e:1b:4a:70:66:b4:7e:51:27:64:ce:18:b8:ef:fd:4e:e1:0b:
28:aa:85:f0:c0:bb:db:cb:92:90:df:ef:b9:a3:7e:7a:74:84:
60:b2:f5:37:53:ab:b7:9f:5d:62:ae:44:f6:8d:88:04:73:d7:
c1:43:25:02:82:53:02:be:5f:28:2d:cc:43:d1:40:52:66:87:
97:9a:88:96:d4:2e:5a:52:59:5f:d1:ea:0a:88:dc:9c:ac:09:
5c:7b:f6:e1:14:ff:1b:5f:43:51:1e:af:e2:3a:bc:58:a1:63:
67:26:6b:5c:23:50:a3:34:63:20:32:1d:52:95:aa:5d:98:d8:
96:7f:36:e4:05:e5:cf:00:46:17:e6:b7:5b:36:7f:1b:66:12:
73:29:56:29:5f:ce:31:f3:be:ac:be:a3:b4:7a:9d:4f:ec:b7:
a8:e7:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:00:42 2025 by rpki-client