Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: E6RhUy6Z/BPNYKT8Dggruz1yUljJAtDHwdudVmJAC6A=
Subject key identifier: AD:65:9E:12:95:52:4A:68:A2:1F:98:03:82:86:3E:FE:EB:D9:D3:7D
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 019779E6822C85B2C4624370C05B373E6AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0A4C
Signing time: Mon 16 Jun 2025 18:00:39 +0000
Manifest this update: Mon 16 Jun 2025 18:00:39 +0000
Manifest next update: Tue 17 Jun 2025 18:00:39 +0000
Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: Ieh64d4zhSVDHau0v3kfDPb9Q2JvGL8ZzeyZzabSolY=)
2: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (hash: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=)
3: wSK3TEqaONdwtqYByktpLoC9XxM.roa (hash: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:82:2c:85:b2:c4:62:43:70:c0:5b:37:3e:6a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Jun 16 18:00:39 2025 GMT
Not After : Jun 17 18:00:39 2025 GMT
Subject: CN=ad659e1295524a68a21f980382863efeebd9d37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:70:4f:b2:d7:6e:a9:c6:71:68:39:1f:6b:
08:08:11:c8:6d:ab:a6:f1:ce:71:7d:9f:0d:50:39:
e1:7b:d1:12:aa:4c:00:a2:d2:53:be:19:6d:92:4b:
8d:66:a7:2a:bc:17:ea:a4:cf:2e:7d:b1:19:39:7f:
50:c6:a8:32:9c:c6:39:02:ea:cd:44:3f:94:ba:a0:
15:83:ce:de:e5:63:92:b2:fe:06:54:d6:82:32:c5:
04:d6:17:6d:8f:0b:63:e8:15:75:64:f6:0f:56:db:
0f:04:1e:5f:a2:57:30:bd:8b:6d:01:5c:9e:85:66:
38:5e:d5:0c:54:d8:c3:94:09:07:00:af:4b:e6:2e:
21:4c:d7:c1:2d:41:64:95:7b:d9:8f:9b:57:55:28:
30:3c:d3:91:2b:b5:e2:df:53:cf:43:53:2b:e3:cd:
49:d7:1f:de:90:38:35:53:b3:13:f3:37:6b:f9:8d:
d2:6b:b5:ff:9a:f4:73:5d:d0:f1:f8:05:61:26:c2:
21:f5:cc:72:78:1e:39:f4:48:ff:5b:7f:d8:57:a5:
6b:45:99:2a:4c:0d:d3:eb:c8:c2:61:16:e8:73:b7:
35:c7:7d:23:da:0a:51:db:47:55:b2:34:86:fa:35:
12:e7:dc:7a:3a:8d:ac:01:5b:37:e2:a5:34:e2:0a:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:65:9E:12:95:52:4A:68:A2:1F:98:03:82:86:3E:FE:EB:D9:D3:7D
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:92:88:38:73:6b:cd:d4:9e:e7:10:0e:ff:16:3b:92:81:4a:
2a:f1:30:0f:c7:05:e9:82:a1:72:85:b6:10:5f:38:7c:f4:14:
5e:3e:48:c3:57:57:28:df:c3:90:93:ea:d4:4a:d7:4a:71:34:
7d:0a:68:4f:d0:5d:00:4f:74:bb:ba:ee:4d:c5:d8:54:9b:47:
28:87:7f:85:1c:10:4a:74:e6:74:25:a0:94:d7:a9:b4:46:6b:
b2:3b:00:f2:8a:6f:90:50:ec:53:65:70:ba:06:77:4c:b7:cc:
a7:71:db:14:2a:b2:11:08:26:66:7e:7f:89:bd:20:fd:66:14:
ec:5f:ae:00:17:33:46:04:25:ae:ba:32:8f:b7:8b:3a:0b:76:
eb:6c:0b:9d:4b:40:bc:e9:98:8b:8e:0b:eb:5b:b1:6b:06:9b:
6e:6d:b0:3d:8e:cf:96:24:4b:93:07:fd:21:f5:2b:11:d4:27:
48:3d:b7:39:a2:36:35:74:4a:ce:e8:9e:8a:bb:39:60:5d:a8:
c7:bb:44:0b:91:4c:54:5e:ea:cc:7f:97:f0:30:de:e9:dc:b2:
a6:fb:da:85:6d:7c:a7:67:e5:f6:22:a8:5c:57:a1:73:d3:52:
20:21:21:4e:c8:5f:28:f3:64:77:57:d3:93:0c:1a:a4:2f:29:
ba:00:ef:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:56:18 2025 by rpki-client