Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
File: zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json)
Hash identifier: Pwa6WK02bXfYp6AxAwD5VeGpmyq0CzG8aEEykxKqadk=
Subject key identifier: 99:2B:2F:4B:20:BE:B2:04:43:4E:18:19:71:46:A2:80:0E:42:53:13
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial: 019771BF537D46144166980AE915C5C8FC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
Manifest number: 0E8D
Signing time: Sun 15 Jun 2025 04:00:53 +0000
Manifest this update: Sun 15 Jun 2025 04:00:53 +0000
Manifest next update: Mon 16 Jun 2025 04:00:53 +0000
Files and hashes: 1: O1GYVhxFS0M7H20Hoh1Atb3eLaE.roa (hash: tCVke6K7TW9gUgASV8dTundK+jeF3bulXbwfPaxFtHY=)
2: SWAth1mKD6FwJVqaJWtV6D-F51Y.roa (hash: REJDhZOwFyr4wdpkCheBE0DhoqN625ViwDnudBYPico=)
3: Sc-FyfdVDPaQqHGz-GI3fsuN6cM.roa (hash: zSZi5viNxy6Qez2EVg97kMrTwqojW2kb2exfumMpwjg=)
4: hkuhpnMVVYRgPxAr-LQ10OakoTI.roa (hash: oAtibnQ6KN2VeS7D1IHVgfHz1J3VS/wtW0fPG2i0OP0=)
5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: b699QsT7f/jZvEd35k9m3GpmZW2kNikv9RyhLeHwnmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:53:7d:46:14:41:66:98:0a:e9:15:c5:c8:fc:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Validity
Not Before: Jun 15 04:00:53 2025 GMT
Not After : Jun 16 04:00:53 2025 GMT
Subject: CN=992b2f4b20beb204434e18197146a2800e425313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:97:8a:11:74:15:5e:62:12:f3:15:3a:ef:
01:31:8c:c3:03:51:3e:c5:c6:16:5b:60:cf:48:5e:
0d:f3:6d:48:f4:b7:76:78:c3:47:4d:1d:c1:39:65:
78:33:a1:f7:52:e7:27:ac:6a:a9:3f:e4:42:57:d9:
1a:03:a5:a7:8d:8d:3f:e3:d2:51:9c:8b:16:23:a9:
d3:9e:cc:31:01:e2:58:79:db:d2:67:21:dd:88:ba:
05:80:7a:20:06:59:b1:3e:6d:77:c7:94:ce:03:15:
b3:7f:2b:b8:5f:6e:b9:61:93:53:4f:9f:bb:40:a1:
a5:20:1f:61:1f:98:69:c4:2b:db:6e:1d:ae:16:94:
6d:31:aa:63:f7:6a:0e:db:e1:56:e1:7c:05:57:31:
b1:ad:e8:44:73:93:14:b3:ae:e1:65:e1:ef:f8:ef:
55:50:24:64:f4:1c:7b:64:81:70:16:4a:63:3e:24:
7d:44:74:ee:b0:c0:42:12:81:fe:dc:91:f0:39:80:
f5:e3:03:a4:c0:2b:d7:1d:2b:fd:ae:a8:40:7d:2c:
94:66:53:11:0e:d4:32:ab:49:30:e2:08:99:90:d7:
91:4f:f6:fc:71:ce:57:25:2c:21:12:9a:4c:97:6d:
38:f8:4e:84:f6:94:41:8b:2a:cc:51:f1:9d:ab:75:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2B:2F:4B:20:BE:B2:04:43:4E:18:19:71:46:A2:80:0E:42:53:13
X509v3 Authority Key Identifier:
keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1e:3d:f4:36:2c:91:4b:c1:70:03:63:46:95:d7:f4:ce:3b:
a0:2c:cf:db:98:9e:78:88:2a:39:a7:46:52:e6:42:ed:d9:26:
ce:e6:08:4d:7b:4f:77:16:a1:e0:2b:29:8e:0c:a3:ed:99:2e:
47:8d:04:83:d8:8d:4b:87:c7:8e:3d:7e:18:86:0c:7d:fb:f4:
89:e4:ab:cb:f3:91:03:1a:ce:e8:b6:d5:1f:73:f5:35:83:df:
d7:eb:8e:98:48:e1:8f:e9:18:fc:74:8d:ae:3a:aa:18:e1:fc:
a6:65:d8:bf:6f:bb:62:ec:01:41:f0:cd:33:14:e8:2f:b0:ed:
c0:25:55:9c:84:0e:37:11:67:ee:46:dd:51:cd:10:95:e8:7d:
0b:17:0e:81:12:f2:d1:71:e1:83:da:db:c5:d0:d3:f1:5b:36:
9b:a9:37:2e:a7:9b:59:dd:ca:ee:d3:da:ef:f1:9b:c0:f1:46:
d4:63:86:1c:8e:93:41:30:78:38:a8:78:cf:a1:a0:f9:18:0c:
a7:93:fe:ac:ae:78:ee:10:e6:f9:2d:a9:46:6e:f9:a9:85:28:
06:23:5a:d8:a7:23:a9:32:a3:87:c2:61:00:d9:01:a4:17:a0:
14:06:46:36:b5:d1:f7:e8:ec:99:40:76:f2:36:b2:b5:4d:e5:
bb:c8:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:20:09 2025 by rpki-client