Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
File: zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json)
Hash identifier: xza0vtA+1kWQ79ZV/37Cb4l8PcHDlZzcppvhZaILwaw=
Subject key identifier: 42:8A:AA:A0:E6:54:65:E7:2C:82:6D:CD:BD:FE:E5:B9:DA:4E:38:4A
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 01976D7439710D7FB1BBEA955D016B2FC564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 08:00:22 +0000
Manifest this update: Sat 14 Jun 2025 08:00:22 +0000
Manifest next update: Sun 15 Jun 2025 08:00:22 +0000
Files and hashes: 1: VeyJDEEty7IaphGW3rZRjoHUojg.roa (hash: nlnkQXVcXOy604OjeWWR6cJfH3A2u1gS0XEnkUUPxgU=)
2: ZJT0zr7m2y5wt4gW9bKEzmGI1ow.roa (hash: G77N1gA2nJ38QCQzMuuTUjtsbNVh+2EuSfRtrFna6jE=)
3: grKIm7Lo2eZE2vteQMGt4oHjtOE.roa (hash: 2kq2MqRQm4HSGsYIQVdRn5p0QWWgpGXBFjPu/GSW7ak=)
4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: WTxF6+JENy3umyqSbV5LukMQ8gtijTvaqHFgptpyStQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:39:71:0d:7f:b1:bb:ea:95:5d:01:6b:2f:c5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Jun 14 08:00:22 2025 GMT
Not After : Jun 15 08:00:22 2025 GMT
Subject: CN=428aaaa0e65465e72c826dcdbdfee5b9da4e384a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:cd:f9:e6:35:0e:8a:6a:c6:a8:61:c1:4b:
41:f4:14:8b:7b:b4:51:12:fe:c4:6e:44:ad:95:14:
d1:02:87:05:32:e6:8c:27:ea:9e:72:b7:f2:84:67:
d1:e6:1d:f1:92:76:1e:39:73:ec:ee:b3:75:9e:e3:
d2:09:68:06:8b:df:1b:c0:a8:8d:52:c3:a0:ec:13:
8b:5b:53:a0:e8:2d:a3:50:ca:87:5b:33:8b:7e:3a:
ab:76:e3:6b:bf:6b:31:83:1b:87:fe:63:d6:99:ed:
12:c6:c2:4a:dc:d3:b5:c2:7b:5b:87:8c:b3:03:7f:
8b:b4:fc:2f:1b:50:41:9d:10:5d:13:7b:10:3e:4d:
f2:9c:87:93:99:67:ea:84:f1:40:b2:df:ad:ea:53:
99:5a:aa:cb:55:e2:00:b6:a0:a1:e2:25:76:16:0c:
c4:d6:39:01:e8:2f:fd:c7:f1:61:c6:bd:9a:fb:79:
d2:d8:e4:a0:16:71:aa:bf:c6:0e:02:f8:e5:04:92:
8b:83:98:69:1f:ce:fd:1c:c5:4c:57:b8:f9:fe:fe:
38:0a:4a:4f:9e:80:f1:b9:e4:6f:9c:5f:bf:60:8a:
f4:f3:5f:f5:ae:28:08:d5:bc:dc:80:44:43:e7:a4:
8f:60:28:22:a1:f7:ce:de:50:21:78:8d:b8:27:97:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8A:AA:A0:E6:54:65:E7:2C:82:6D:CD:BD:FE:E5:B9:DA:4E:38:4A
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:95:40:09:cb:f3:a1:65:12:17:11:22:b4:ca:3d:7a:6e:8b:
20:aa:d2:88:74:0b:89:c6:45:b0:53:3a:a6:f6:63:2a:63:64:
42:dd:8f:b4:87:7e:b8:d6:26:f5:de:a3:b3:2b:23:d1:47:8f:
68:32:3e:6c:ab:a7:e1:27:d4:9a:80:c3:0c:03:d0:33:4c:ea:
74:2d:61:bb:ff:9f:e9:50:74:c8:1a:40:45:bf:f9:05:78:c2:
27:a2:f6:26:c7:14:7d:fb:19:50:45:d0:a8:37:8c:f5:95:6f:
1a:6e:fa:3e:19:6d:de:b2:8f:76:da:c8:c8:15:8c:0e:4f:93:
28:a6:ac:a4:f9:b9:aa:03:98:11:b2:f0:c5:4c:ca:f0:ed:a7:
50:ca:76:b9:b9:05:73:4b:9e:60:aa:31:a0:29:f1:d6:10:c7:
bb:7a:2e:a0:8c:38:be:7c:19:0d:22:92:61:f5:63:9d:51:87:
99:5d:9e:53:56:54:5f:eb:2c:7a:28:94:66:57:c9:7d:69:19:
d4:d2:b0:4d:80:e3:2a:67:57:5c:48:b0:60:1e:e7:5a:cb:6b:
b3:d0:9b:63:72:ce:d7:4a:37:da:08:6d:91:d3:f5:bf:94:e0:
7a:dc:83:75:c9:40:8e:43:44:00:2c:fd:70:a0:9f:ee:65:6f:
90:44:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:33 2025 by rpki-client