Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: IUHQ03sDQ33fCVAQWrnTiXqiTxTcwAcq7rnMqGLJZ+4=
Subject key identifier: 30:13:D2:03:9A:50:0F:60:04:68:1E:E2:C5:28:8E:4D:D4:FC:64:16
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 019770E35370B75779133D4BA7080C024FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 159A
Signing time: Sun 15 Jun 2025 00:00:35 +0000
Manifest this update: Sun 15 Jun 2025 00:00:35 +0000
Manifest next update: Mon 16 Jun 2025 00:00:35 +0000
Files and hashes: 1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
4: DLVyMXEFc4HCeGjKSW4Cx2Pnr78.roa (hash: ZQmXU2vc4afgIjjUGFHs8aXtb7R/hrU5Q7fUBkSefzs=)
5: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
6: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: Sh6Nv10ihmdFznJ5TqMk//yrktv02aKW2+d3xgIlixY=)
7: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:53:70:b7:57:79:13:3d:4b:a7:08:0c:02:4f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jun 15 00:00:35 2025 GMT
Not After : Jun 16 00:00:35 2025 GMT
Subject: CN=3013d2039a500f6004681ee2c5288e4dd4fc6416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:9c:9b:28:21:62:5c:aa:d4:80:d2:6a:c8:
8e:47:34:25:8a:d0:a2:5b:26:95:22:bd:03:6a:af:
39:24:c0:96:d7:c6:00:9e:7e:f6:cd:61:0d:c7:cc:
cd:6f:ba:24:61:5e:d6:8b:06:17:b1:67:34:9a:84:
f3:37:8b:d2:11:42:9a:67:db:5a:30:24:f7:6b:75:
9b:6c:ee:fc:3d:00:a5:f4:33:f1:c6:92:3c:03:5d:
fe:35:66:aa:91:14:a4:c1:0e:35:37:3f:4a:b4:ba:
5d:1a:aa:b3:8c:3f:5a:73:28:35:15:95:ec:66:90:
46:74:17:8d:dc:67:48:7b:88:cc:32:74:0f:a1:b3:
4a:d1:00:86:81:93:34:56:f0:a0:85:74:bd:f2:99:
fa:f5:32:11:b6:0c:d5:f0:5d:1b:7e:24:9f:e1:cd:
0b:dd:f5:8b:4b:9a:b0:c4:a4:81:18:0c:fb:f7:ac:
6e:6c:09:e3:83:ed:76:99:93:99:70:21:b1:df:46:
d0:66:9a:1e:df:fe:b4:84:65:d6:ed:64:b6:3b:ee:
9a:c5:ba:69:ee:b1:8f:16:cc:0e:ab:3c:9b:b6:56:
b5:f2:84:df:f8:0b:08:d2:ad:c4:4f:45:9a:e0:f2:
35:c5:91:a8:34:02:db:a6:c3:a0:07:38:75:2a:dc:
9a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:13:D2:03:9A:50:0F:60:04:68:1E:E2:C5:28:8E:4D:D4:FC:64:16
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b2:00:2b:76:da:88:e6:dd:0f:38:d7:24:1f:ca:a6:97:32:
3a:9a:26:8a:04:94:f9:5c:36:50:03:ba:1d:7b:2c:f3:84:1b:
b3:9c:da:ef:9f:c8:5b:c0:0b:2f:79:0c:f0:48:93:44:11:8e:
c7:6a:6c:c8:65:3c:a1:64:86:60:24:9e:1d:a7:b9:0c:65:1d:
11:29:02:0d:53:df:50:a4:80:49:fc:e7:88:3d:e3:c5:19:87:
e4:97:f9:00:4f:f5:f8:c7:94:36:56:31:c3:48:b3:ad:f3:8a:
ab:a2:cf:24:e0:10:a9:e7:87:3d:b3:b2:77:b3:76:99:76:ce:
ad:65:b9:ea:be:8c:54:35:82:27:9e:3b:5b:e8:5f:80:0a:c3:
47:5f:b0:55:08:ef:cd:3d:04:a6:61:af:a3:99:57:57:b5:94:
93:33:df:88:f1:05:6e:d0:f8:fd:bd:1e:4b:0e:84:5f:cb:90:
8d:7f:21:86:a3:6b:ca:ef:aa:e0:e5:7e:8f:b1:a6:ac:1d:3a:
38:9e:a4:cb:44:f3:83:23:75:fb:d8:4c:fb:b7:a4:d4:50:8a:
9e:82:b5:65:df:96:a3:78:ff:a4:3d:0c:c6:89:db:ba:aa:63:
06:5c:f7:c2:f8:6f:e7:99:ec:a7:da:ca:eb:57:7a:bb:e7:2c:
16:7e:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:28 2025 by rpki-client