Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: DFjD1pmz5vQdKVgNFMwcuUKCBTrwCHE+98N9EEnoezw=
Subject key identifier: 0A:62:5E:16:EA:09:0C:B9:AA:26:57:06:AA:0E:E6:C3:84:7A:F9:2A
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 01976D746DD20259F30694CC3FEB94CE46CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 1521
Signing time: Sat 14 Jun 2025 08:00:36 +0000
Manifest this update: Sat 14 Jun 2025 08:00:36 +0000
Manifest next update: Sun 15 Jun 2025 08:00:36 +0000
Files and hashes: 1: 45oepcPp24ddD7U9F9fgcfRE2_A.roa (hash: JFFqkItzCIGw3eiTO4eyZ8lxk2ns3Bweomn6UBCbaB0=)
2: 6NfPgvm2R-DEhD59RilUaEstXMs.roa (hash: nHYetpjWCpzfXvmA5NqKKNkZO4+XknrY7xhjpxJgzio=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: y5ZEyS4WLWDKfBhtkPFLx/oohCdkNGkq4cRrYxNg574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:6d:d2:02:59:f3:06:94:cc:3f:eb:94:ce:46:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Jun 14 08:00:36 2025 GMT
Not After : Jun 15 08:00:36 2025 GMT
Subject: CN=0a625e16ea090cb9aa265706aa0ee6c3847af92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:f2:9a:89:b9:f6:f3:dc:c2:bd:b3:e6:cd:
d7:3e:42:1e:d6:a5:f2:bd:58:d9:d6:ea:da:0a:28:
29:d7:86:20:8e:50:2d:c7:a4:b1:25:01:94:d6:c5:
1f:fa:35:f0:fd:fa:e7:90:d1:c8:73:7e:be:22:b8:
a8:91:37:8d:8c:39:46:b4:73:8c:1b:15:ff:18:2f:
c0:6e:47:36:51:44:60:6e:29:aa:3d:ca:92:39:df:
45:b4:4b:91:ed:4b:e1:fe:56:f9:25:ee:cf:1e:cd:
12:8c:9c:4f:60:e4:b7:86:74:ae:3a:7c:03:80:ae:
f9:9a:57:bd:f9:f6:24:66:d7:5a:74:c7:2a:bf:bc:
b5:c9:1c:7b:30:49:11:81:36:aa:3e:85:38:86:1d:
23:c5:95:31:82:87:3e:7c:ce:63:39:c8:e9:5c:23:
64:68:83:90:ed:09:41:36:c1:b3:dd:ed:5e:02:fe:
c2:20:9e:46:aa:c3:f0:d4:62:df:ae:32:f0:c8:50:
f8:f3:32:50:e3:3b:e1:1b:73:9f:c5:53:f2:36:75:
77:ca:71:97:15:2b:65:85:02:0c:9b:e4:14:c5:61:
bf:3c:45:39:e7:d2:8a:cc:98:ff:b6:73:41:bf:c9:
62:5a:0f:83:85:b3:20:e8:06:81:09:90:fc:0f:f2:
11:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:62:5E:16:EA:09:0C:B9:AA:26:57:06:AA:0E:E6:C3:84:7A:F9:2A
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e9:ff:41:6e:54:b9:33:7b:6a:17:19:93:f8:d9:8c:c2:4b:
38:00:5d:4e:14:92:f6:ee:f9:d2:bb:53:e8:0d:f9:94:49:5b:
cf:c4:85:a8:2a:de:12:d5:d1:11:f8:86:c2:44:a4:d2:d6:b8:
54:af:13:25:d6:c5:80:93:a5:3c:83:57:0f:00:75:d7:1d:b7:
e2:2e:5b:59:ed:0d:b4:dc:08:ba:a4:64:9b:8b:2a:2c:18:e6:
0c:e2:ed:b6:b6:8a:51:db:b5:15:da:23:33:13:fb:3f:e7:81:
00:32:54:c1:cf:c7:f2:41:b5:ce:e0:50:bb:16:fe:c0:1f:9a:
f2:21:7a:49:51:b9:3f:02:de:39:d4:ba:10:3f:18:b3:e4:15:
d1:80:48:fe:c3:ff:36:9a:85:64:10:0e:ac:24:64:25:c3:e9:
4f:a5:fb:b3:3c:8b:a2:ca:82:1e:c8:04:c6:da:69:d7:2b:3d:
22:25:34:24:62:db:49:df:a6:e1:0a:09:ac:ad:23:f1:91:84:
97:30:78:0c:a5:c4:8a:53:9b:c3:37:d7:3e:cf:0c:a9:ff:d8:
04:ec:8e:38:20:72:5a:94:d8:e8:3f:a0:ba:5d:96:bd:19:c5:
17:26:d9:1c:f5:c9:ab:6e:16:e0:08:1a:1d:57:5c:d9:cd:ed:
64:51:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:17:04 2025 by rpki-client