Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: mnAeteG0UE4vwVgQLyHKro9wkpJBmSiBYdxKJoaulrk=
Subject key identifier: 59:2C:69:9D:9B:7A:B7:11:92:86:9E:CF:EA:01:D0:7E:87:A0:CC:CB
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 01976C6254626A775FC15382387B23A58543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 03:01:12 +0000
Manifest this update: Sat 14 Jun 2025 03:01:12 +0000
Manifest next update: Sun 15 Jun 2025 03:01:12 +0000
Files and hashes: 1: Y-fN4fkHcPUKcQjj7Sr2XkGHl3k.roa (hash: AGm7a+karsGXj1brZJla0akLv16UGZ06w+N3Iht2PgI=)
2: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: iVR5WU8HXttw48gwmYQxOzwqCsH8ESVy1zzwtfHzvz4=)
3: vGzl2XHn-ouqEIIGqbsxm7i08EY.roa (hash: 4VVUoLGm+xrN9laAHbyRRBjWaA/AqDg3mY1vTaPgAZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:54:62:6a:77:5f:c1:53:82:38:7b:23:a5:85:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Jun 14 03:01:12 2025 GMT
Not After : Jun 15 03:01:12 2025 GMT
Subject: CN=592c699d9b7ab71192869ecfea01d07e87a0cccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:30:6e:e3:2d:4b:fd:8d:67:b5:d0:49:a5:
50:2f:75:11:42:ff:b5:db:ff:99:1b:ba:7d:34:09:
68:35:57:5a:48:da:42:ec:ac:9f:99:07:f1:22:10:
ad:ca:81:7f:50:66:c6:0e:37:2e:de:69:1c:fc:49:
dc:0c:ed:60:b8:af:4d:0c:1c:19:e9:02:e1:41:14:
5d:9d:a9:7f:9e:0e:96:25:3e:23:dc:19:22:7b:48:
10:fc:40:89:03:a6:28:f6:14:2b:29:6a:d4:37:fa:
31:85:9a:25:41:19:c8:ae:98:52:38:11:2a:46:98:
71:09:6b:fd:89:4b:2f:dc:7f:19:5d:8c:1c:93:3c:
5e:bd:0e:e6:a8:64:4f:7e:8f:54:0f:b5:af:c5:c3:
93:76:07:38:db:c9:b3:4a:d3:23:d2:c0:f8:ee:c9:
97:2d:36:71:56:c0:3c:d2:f3:e8:aa:4a:06:b9:ed:
9c:62:6c:c1:ce:7e:72:66:fb:37:6b:0e:16:3a:e5:
dd:0b:17:eb:e6:4c:29:a2:85:16:5b:f7:f5:46:ad:
26:62:87:5f:24:b6:1f:53:86:b5:81:11:4a:ec:5f:
99:59:15:fa:f7:6b:24:00:fb:1d:71:86:28:0b:8d:
73:cf:85:3b:e1:0e:94:8b:2d:62:52:fd:f2:e2:55:
8f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2C:69:9D:9B:7A:B7:11:92:86:9E:CF:EA:01:D0:7E:87:A0:CC:CB
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bd:c3:6c:3d:d0:ef:64:f5:cf:34:95:4a:f8:31:bc:42:ff:
4e:2b:01:3a:09:27:8b:c5:59:73:16:1c:0d:9a:4e:64:fe:1d:
0a:0e:66:a5:ce:26:f1:e1:6c:93:d8:a9:13:df:ee:c2:1b:bf:
fe:1c:e3:4e:ad:2f:e3:a2:4a:26:1e:96:3f:c3:33:42:ee:2e:
5f:23:6c:b0:5a:f1:32:0c:da:45:a0:17:20:3b:ce:41:b5:21:
bb:f2:85:7d:90:af:21:7d:cc:5d:fa:e9:b3:d8:f5:4c:1d:0a:
42:63:c4:02:ee:ea:70:10:53:0a:9f:4a:49:91:fd:9c:06:be:
59:86:32:d9:54:55:24:46:8e:22:a1:01:84:64:89:d7:f2:cb:
56:ea:48:a2:e4:61:b6:c7:89:4e:3c:cb:0d:d6:0d:e2:74:20:
09:c8:15:1f:d2:8d:f9:86:29:b8:a9:b3:67:2c:f4:6e:2a:22:
3e:60:50:22:2d:66:18:21:c6:4c:5d:39:af:e2:1a:4c:19:7e:
71:0b:ad:10:7d:fe:ad:02:d8:d1:34:df:aa:81:82:f8:5c:8a:
73:33:70:29:cd:86:b5:2c:dc:33:8c:07:00:4e:e1:7f:f6:c6:
a1:a4:fd:96:b7:39:81:60:87:20:b6:97:4c:f5:82:17:52:12:
57:3b:9d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:07:22 2025 by rpki-client