Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
File: zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json)
Hash identifier: 66xaMyvJ3JV4iieN6Y6m1RGRhQ5PHerq+XRL7D+5IQA=
Subject key identifier: AA:AF:F7:35:50:5F:12:F7:44:14:0B:57:E8:30:1E:12:6D:38:9F:E3
Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de
Certificate serial: 01976CCFEF2EBB8FDE1E697B3CE77CE1E2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
Manifest number: 129E
Signing time: Sat 14 Jun 2025 05:00:55 +0000
Manifest this update: Sat 14 Jun 2025 05:00:55 +0000
Manifest next update: Sun 15 Jun 2025 05:00:55 +0000
Files and hashes: 1: cNg_w6FNDPxXpKdIkq9A_UpQRD4.roa (hash: syLuSdgaorQGcBipXNeo5+gDHDzPudwTqzWzLW2dWo4=)
2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: jDJf+8ZDznrOZgA9C5eUXMmozdbs98mqf1YBxhxb9v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:ef:2e:bb:8f:de:1e:69:7b:3c:e7:7c:e1:e2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de
Validity
Not Before: Jun 14 05:00:55 2025 GMT
Not After : Jun 15 05:00:55 2025 GMT
Subject: CN=aaaff735505f12f744140b57e8301e126d389fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a2:05:18:c9:2f:96:57:9b:76:c8:ba:a5:87:
9f:57:d2:0b:32:6c:22:40:53:54:c7:46:47:5d:93:
21:7d:27:7f:31:8c:a3:1e:3f:dd:2f:e4:ee:29:08:
d9:a6:60:5c:97:aa:2e:d0:b6:ba:63:bb:d0:a2:20:
e2:21:ee:4d:99:92:e6:73:87:c3:e8:e2:59:0f:a5:
13:40:17:11:af:9e:35:09:1c:4e:cc:4a:8c:12:31:
ec:fa:4f:f8:19:88:4d:91:fb:76:12:5d:61:7f:c8:
38:18:72:5e:68:a8:83:7b:99:f3:b2:03:bf:60:8c:
83:60:cc:f4:b6:8e:11:05:87:02:82:41:63:ec:a3:
29:0a:f4:7b:78:3c:0d:7f:ec:3c:68:ec:06:ed:25:
5a:8f:83:c5:3c:90:1f:df:c5:ff:a4:b9:4b:8f:99:
64:32:bb:3f:ba:c4:dd:89:9f:10:3b:4b:f9:9f:37:
0d:f0:b1:d2:5d:88:ee:cd:81:a7:8f:c8:c5:af:35:
e1:60:01:19:9a:4b:54:0d:38:9d:93:b8:ba:dc:e7:
b7:37:6e:57:e1:a9:e5:c5:be:1e:eb:20:d4:03:66:
93:b7:0c:6e:e9:6f:ee:39:54:ee:f8:74:fa:76:af:
3a:eb:02:b6:00:b9:12:52:fb:c7:af:ac:64:6b:92:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AF:F7:35:50:5F:12:F7:44:14:0B:57:E8:30:1E:12:6D:38:9F:E3
X509v3 Authority Key Identifier:
keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:23:74:86:02:28:7d:a6:c4:f1:69:91:b0:fa:57:ec:86:97:
9f:53:60:4b:b9:17:fd:81:1a:f1:47:df:f9:ee:d4:b3:df:97:
8b:f1:14:7e:40:a1:fe:6b:68:17:93:2c:8c:9e:a7:53:84:0a:
73:f1:ea:0d:fa:2b:f5:83:6c:ad:c8:d1:1b:8a:fb:e8:3e:59:
1a:66:4f:fd:c7:96:b0:86:bb:df:47:4b:dc:38:d1:d7:e5:9a:
33:ba:4b:b5:04:4e:76:2a:1b:15:f0:4f:d6:af:ea:94:34:27:
e6:81:13:17:73:ae:1e:4e:d5:64:39:f7:bc:8b:d6:c0:1a:2c:
77:a7:68:93:7d:eb:39:68:88:6b:58:22:9a:ad:15:fb:66:18:
cf:4e:9a:c2:49:05:b5:b9:e0:68:c4:d5:e1:ea:87:45:03:b8:
9f:ed:ea:4e:4f:4e:da:09:03:68:ed:fe:e1:32:38:f2:3a:84:
67:23:d1:56:91:da:34:d3:9b:29:32:15:d3:e9:a3:1a:f8:7c:
f1:d9:44:4c:7a:4b:a6:fc:be:a4:f2:2c:4e:e3:ba:df:9c:b0:
21:b4:40:24:68:3e:da:f4:46:6e:72:45:13:f3:27:1d:4d:f8:
83:6b:82:f6:02:9e:db:bd:3d:eb:92:ee:bd:30:4e:13:4a:b9:
92:6f:47:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:54:14 2025 by rpki-client