Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft (raw, json)
Hash identifier: /Uh8HU9gJz6mueloYsseO56oIWgXyUmSCUWhbwLCkbY=
Subject key identifier: AE:43:30:43:15:DB:53:C7:1E:CF:9D:63:E2:25:1E:A8:D7:BC:53:AF
Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d
Certificate serial: 0198496597FA008FDD973BC1D28147A3F454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
Manifest number: 0519
Signing time: Sun 27 Jul 2025 01:00:51 +0000
Manifest this update: Sun 27 Jul 2025 01:00:51 +0000
Manifest next update: Mon 28 Jul 2025 01:00:51 +0000
Files and hashes: 1: Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl (hash: QCdUnnhQ4PVqyNjk0ZRkGKG1BzIhLcgXFYYcfMMIQE0=)
2: e9CofsvHtUd9nOdIWFYukSYHblY.roa (hash: bRaoXZzCxY/+WP3cSFPKma8SeEgItuQDnpy+HQsr3lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:97:fa:00:8f:dd:97:3b:c1:d2:81:47:a3:f4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d
Validity
Not Before: Jul 27 01:00:51 2025 GMT
Not After : Jul 28 01:00:51 2025 GMT
Subject: CN=ae43304315db53c71ecf9d63e2251ea8d7bc53af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:9a:6a:b4:70:be:87:e7:de:72:b0:60:18:
b2:5a:26:ca:69:4b:3f:a6:9f:02:97:4f:f6:22:1d:
f9:f9:61:9c:28:55:ac:38:72:62:b5:63:27:ae:3d:
03:20:9b:a1:09:64:10:32:ed:b7:85:ab:26:67:02:
b2:10:a2:8d:f2:2a:4d:39:9d:74:75:c1:4f:de:38:
42:4a:55:48:d6:04:41:da:94:e9:cf:7c:12:18:13:
63:21:01:9b:0f:ae:e7:67:25:a5:23:6b:b1:b3:1a:
c0:e8:8c:f1:fa:d3:08:73:b2:62:00:a9:16:ca:c7:
7f:7c:79:88:a1:98:df:e8:af:23:da:f3:1e:d2:ef:
e6:b3:75:ab:c1:36:8a:82:ab:fd:17:92:98:cb:4c:
d2:a1:a3:91:e0:26:a1:b6:f5:9f:f5:f4:e2:2c:3a:
b4:64:ed:7b:95:ae:f6:f3:a0:37:64:9d:5e:91:1f:
56:be:be:0c:76:8f:6e:c8:7c:64:6b:45:5f:1d:65:
5b:59:d2:02:de:50:e8:f4:d5:be:65:81:d3:51:5e:
e3:a5:b5:65:b6:4d:50:9b:54:66:73:07:e1:1d:33:
17:11:3b:b8:1a:ec:24:30:67:24:d5:6a:08:24:66:
31:3e:c8:10:1f:69:36:88:3e:bc:17:21:19:39:ce:
71:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:43:30:43:15:DB:53:C7:1E:CF:9D:63:E2:25:1E:A8:D7:BC:53:AF
X509v3 Authority Key Identifier:
keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:22:ae:54:8e:07:d0:26:ca:44:de:d8:51:6e:94:31:41:bf:
44:3a:89:08:2f:05:8b:dc:8e:2b:28:f1:47:de:18:d9:a6:e6:
df:64:37:41:60:c8:3a:7e:cb:f7:a3:92:8d:eb:8e:ac:67:2f:
99:78:52:31:42:1c:91:d7:b3:3a:94:a2:3a:81:a6:cd:cd:eb:
f9:fc:05:76:9e:e6:ca:f7:bc:2f:ea:1e:ba:71:b8:ed:b5:11:
ff:c7:c8:43:4b:7f:43:81:55:c2:1c:c4:4d:09:e8:36:07:be:
17:4f:c7:45:72:cc:3e:c4:bc:da:63:80:56:be:6c:8c:dd:68:
4e:b9:e0:8c:7f:20:bc:00:c6:2c:0f:77:1a:b9:08:17:c8:34:
67:ce:34:90:90:06:7d:3c:49:10:72:71:4d:b5:c3:53:20:4c:
79:00:74:c4:cf:b4:b9:6b:9a:20:d2:a0:6e:84:9a:45:70:9d:
84:09:57:c8:cd:93:a3:41:bc:6c:b4:48:ff:cb:76:40:f4:cf:
d6:36:26:53:cf:e0:e4:48:2d:a8:05:06:6f:7c:7f:4d:80:57:
5b:85:ae:6c:11:79:ec:d1:62:5f:ed:fa:38:e4:7d:fc:40:13:
82:28:79:5d:52:0c:07:9c:8b:0d:e4:90:64:04:ea:f1:a8:87:
31:79:5f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:59 2025 by rpki-client