Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: LAzxmSgnVfA82f0zY4ul2UsnztE7V/msEFx61omGU/Y=
Subject key identifier: A7:22:71:8F:2F:49:4B:06:91:FE:59:79:B6:1B:46:87:46:2A:E0:E1
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 019770AC68861EFBBA5938716C1CDF9FB674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 0FAF
Signing time: Sat 14 Jun 2025 23:00:36 +0000
Manifest this update: Sat 14 Jun 2025 23:00:36 +0000
Manifest next update: Sun 15 Jun 2025 23:00:36 +0000
Files and hashes: 1: l0ahmTF7VU-jM66pydmyaaFWBpI.roa (hash: kRKJwUHD3kMQk4tSNCj0K9HqnVNFjpJ2azvHqDtCdr0=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: wVzPZnQFgPkijuUf/nC0lg6KDns5nVNS2zQ4zmlibmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:68:86:1e:fb:ba:59:38:71:6c:1c:df:9f:b6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Jun 14 23:00:36 2025 GMT
Not After : Jun 15 23:00:36 2025 GMT
Subject: CN=a722718f2f494b0691fe5979b61b4687462ae0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:6a:f7:97:02:df:e6:61:c4:8b:d0:8a:40:
08:fe:a7:84:3a:0b:fc:90:8d:11:f6:cc:9e:29:31:
1a:08:3a:bb:b0:0b:7f:18:56:3c:4a:42:aa:e8:43:
1f:93:b8:10:5a:a8:45:31:a2:2c:24:4f:68:0a:ce:
0d:36:db:a9:a1:fa:b5:66:25:3d:11:cc:4a:c6:01:
a5:9d:89:43:14:17:db:08:51:53:8e:c0:ff:70:87:
87:fc:9e:9b:1d:27:ea:3b:c7:00:66:d3:6c:61:f9:
e4:3a:fc:0a:3f:00:d9:50:cb:92:f2:39:23:3d:37:
c1:0a:4d:f4:e2:f9:b9:a6:fc:87:55:fd:0c:48:a3:
3c:73:d2:a6:ae:35:b8:85:d5:23:f9:a7:ea:c3:6a:
50:a1:12:dc:e6:a0:d3:2b:f1:da:62:c8:29:fe:ec:
f8:05:64:6d:e6:e9:ea:45:b0:fb:36:b8:72:8e:b1:
57:4b:72:7d:7f:25:0c:b2:f2:31:27:49:78:c7:eb:
1e:0a:c1:06:5b:b7:0b:0a:25:82:05:5c:16:44:ab:
c1:51:db:f8:60:f3:fd:54:f2:a0:26:19:2d:85:02:
8b:be:ea:3a:4e:2d:a8:a4:7a:68:d5:a2:69:29:64:
7d:89:3c:ad:a1:89:f9:fb:94:83:47:56:8c:87:1b:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:22:71:8F:2F:49:4B:06:91:FE:59:79:B6:1B:46:87:46:2A:E0:E1
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6c:97:58:23:f3:6d:6c:78:2c:5f:26:b3:62:8a:56:39:d7:
fc:64:35:a7:70:54:a7:f2:21:9e:f9:d8:06:9d:ab:88:f8:4a:
4d:ec:2c:41:ff:fd:6e:b3:9b:f2:8a:97:07:2e:7b:37:cb:18:
93:57:79:09:6c:ab:5a:e7:40:61:38:bf:a3:bb:75:f8:0e:b3:
47:26:40:c9:3e:e3:bc:65:1c:9a:76:7e:99:0a:d6:50:0b:75:
93:ec:f3:23:d7:34:cb:fe:58:5a:50:ae:90:86:39:63:f9:86:
16:8a:84:c7:cf:34:57:e1:73:d2:31:00:cb:29:ca:63:a9:cd:
e9:1c:7e:72:7e:dc:79:10:a8:7c:3e:81:7f:1e:4e:03:e4:2d:
82:e0:7a:83:42:22:d6:14:f5:10:6c:ab:bf:c5:3a:df:18:87:
d0:5d:30:2a:44:ea:17:02:ba:4c:54:3b:f5:a7:f8:c5:9e:a9:
9a:7c:22:78:1e:10:cb:5a:07:8a:6c:fb:49:35:d7:ee:ed:95:
55:a4:d5:27:75:67:36:84:ad:71:42:97:41:f6:68:79:df:c7:
20:4c:41:fa:b9:1f:22:ab:6f:e0:fd:a2:a8:ca:0d:fb:1c:07:
cf:a2:ab:22:48:37:bc:83:d9:65:1c:3b:e5:41:02:5e:f8:55:
38:a8:4c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:12:12 2025 by rpki-client