Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: Y/LPBE+cjBMmwCynbV+VlEVxRKSJGFII0vLy2SfrCc0=
Subject key identifier: 8C:48:74:D7:1B:2E:4D:F7:6A:55:FD:BE:01:7F:A8:D3:96:A8:60:C4
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 01977150F60F2409890B07396A75A19F9E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0C79
Signing time: Sun 15 Jun 2025 02:00:20 +0000
Manifest this update: Sun 15 Jun 2025 02:00:20 +0000
Manifest next update: Mon 16 Jun 2025 02:00:20 +0000
Files and hashes: 1: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (hash: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=)
2: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (hash: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: naSBuUx/ufrXWNIFD/OlhZUmSgMLF651zOdjqMqtbCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:50:f6:0f:24:09:89:0b:07:39:6a:75:a1:9f:9e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Jun 15 02:00:20 2025 GMT
Not After : Jun 16 02:00:20 2025 GMT
Subject: CN=8c4874d71b2e4df76a55fdbe017fa8d396a860c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:f8:64:a9:9b:d7:e2:35:6d:a2:37:e5:67:
7b:22:9c:99:e4:ff:e7:42:df:7b:8f:62:ac:49:ee:
4e:93:c7:62:61:15:f3:2b:7a:af:7b:df:18:26:2d:
c9:de:0c:7b:db:95:b1:39:2f:70:5b:1a:46:da:39:
14:91:76:07:e9:6f:2e:0b:5a:97:00:0a:b9:29:a2:
9b:99:d7:95:09:89:55:6c:3f:06:ca:43:df:7d:04:
6a:f9:36:86:fa:71:55:75:12:5d:81:12:22:f1:98:
d5:1e:60:6b:9c:50:d1:c6:8c:d4:c3:a0:05:7b:be:
a8:06:f8:14:21:7b:15:65:2d:d1:b1:5f:8b:4f:04:
7a:6a:1b:54:68:f5:56:77:6c:f3:21:11:16:7d:14:
96:5b:ee:45:a7:1c:12:e1:36:86:e9:76:f6:c0:89:
78:71:f9:cc:62:b1:8a:76:10:00:c9:6a:14:58:cd:
ba:db:1e:e9:c9:a3:17:b8:01:c7:0c:e6:87:ce:70:
b6:f0:f0:7c:88:73:43:b8:1c:d3:c7:58:40:26:53:
2e:85:e9:0c:a7:79:10:90:b0:98:a5:53:31:6b:83:
7c:80:3a:05:a8:07:b9:af:0c:bf:25:fb:7b:af:5b:
d9:3f:d6:fe:1f:60:34:4b:97:b2:fe:d8:cd:81:f7:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:48:74:D7:1B:2E:4D:F7:6A:55:FD:BE:01:7F:A8:D3:96:A8:60:C4
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:49:6c:09:a4:24:a7:24:94:28:92:cd:2c:f3:b6:4b:c5:e6:
13:5c:0d:f6:85:0f:e2:f6:a2:36:70:e5:32:18:31:f2:96:03:
a4:69:66:03:e1:dd:cd:ea:06:e6:ba:8a:02:4a:c1:29:e6:fa:
2b:6e:4c:ef:cf:5c:fe:ca:61:5c:c8:09:71:f2:04:ee:de:f9:
63:5c:a7:7d:cc:52:19:58:7e:ab:b0:bc:c3:9b:31:e2:3f:38:
b5:9f:f5:6d:9c:c9:62:30:4c:51:70:fe:cd:2c:4e:09:32:6d:
11:0a:9c:2a:1e:52:9f:3d:e1:d8:70:9a:7e:81:cf:f4:72:68:
bd:f6:34:1c:be:32:b1:39:0d:d8:31:22:f0:2d:4b:b2:e5:d4:
1a:bd:d3:47:ac:4b:5b:66:55:3f:4a:b9:d4:6a:ac:99:1f:0f:
fb:46:03:51:42:95:71:dc:09:c6:39:0b:4e:8b:4e:1b:c6:55:
68:ba:19:4a:06:97:ff:f5:5f:72:ef:53:94:ea:5b:49:fd:f3:
42:91:f0:2e:ca:8e:46:31:47:4e:0a:74:ed:e0:53:cb:96:2f:
c6:5b:cc:f8:06:55:d5:8f:a6:f3:6b:34:fb:71:e4:fe:f2:30:
5d:ac:f3:c0:1b:33:6c:bd:83:dd:36:49:20:23:fc:e4:3b:48:
cd:30:53:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:34:20 2025 by rpki-client