Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: K/rYu/huy3WhTdslMK9I9PhBmhPrNt8plbD8s73d4WQ=
Subject key identifier: E3:67:BF:DB:B3:E9:34:83:BD:20:5F:37:A0:48:56:D1:AC:05:EC:12
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 01975C4AA3F2FC86943E78C6EFD49CB92266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 00:01:24 +0000
Manifest this update: Wed 11 Jun 2025 00:01:24 +0000
Manifest next update: Thu 12 Jun 2025 00:01:24 +0000
Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=)
2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: K8nF9QtKZY2EwsO6awqxKsMwz6wPu38JgnZjNeQeeY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:a3:f2:fc:86:94:3e:78:c6:ef:d4:9c:b9:22:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Jun 11 00:01:24 2025 GMT
Not After : Jun 12 00:01:24 2025 GMT
Subject: CN=e367bfdbb3e93483bd205f37a04856d1ac05ec12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:2f:8e:03:cb:7d:2f:c8:a4:1a:d8:dc:ae:
06:e4:e1:64:d5:1f:34:c4:ee:ce:95:cd:11:ca:f6:
cf:b6:26:93:9e:0c:15:78:34:71:d4:52:1a:05:6b:
ea:24:5c:28:b6:0b:1d:5e:3c:e8:86:4e:a3:a9:60:
c1:f9:db:a7:b3:a1:f0:e7:f2:02:cd:f3:b3:7b:6a:
c8:1d:2b:e7:53:bd:39:de:a7:2f:fe:e0:85:09:4e:
a1:fc:40:2b:80:2e:e0:b9:54:5a:53:07:28:c5:b2:
73:44:40:c2:36:11:19:7b:47:b7:3c:ba:25:f1:f7:
e5:55:16:ee:8f:ac:04:b4:82:06:07:a1:e1:7e:1b:
28:38:c1:e9:7a:02:e1:c0:1e:12:d7:b7:c3:2c:97:
73:4c:82:84:18:a3:5a:9d:3e:e3:3e:8a:9f:4a:62:
82:9f:7c:44:48:79:8e:95:14:c0:3d:d1:45:79:24:
f5:0f:8b:b3:d9:63:90:62:51:68:66:67:86:a4:04:
63:36:bf:9a:dc:40:07:e0:9e:2f:28:6f:e3:d3:10:
4b:dc:aa:a4:a5:90:5c:51:30:cc:7a:db:58:b0:b0:
42:0c:e7:47:29:79:0d:1a:68:f0:d1:ed:dc:57:10:
da:b9:57:3f:54:b7:6c:9b:b4:99:f1:e9:2b:85:4d:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:67:BF:DB:B3:E9:34:83:BD:20:5F:37:A0:48:56:D1:AC:05:EC:12
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:53:bf:cc:73:e4:49:88:d7:68:47:21:88:83:db:25:d5:d1:
3f:98:71:41:1f:0d:a8:cb:35:01:5e:41:5a:8a:49:ef:a6:ec:
3b:5d:74:f0:80:28:63:38:c3:c2:98:1f:67:76:a0:6e:5a:1b:
b7:bb:0e:10:96:80:b7:f7:2f:71:e6:c6:7d:bd:b5:0b:41:70:
7b:11:35:2c:ed:26:b2:d5:60:40:5e:2b:5a:8e:2b:ea:2f:da:
89:dd:78:00:23:6d:04:2c:b4:dc:7d:59:a9:0f:90:80:28:12:
5d:31:35:fc:73:73:52:64:fb:ce:a3:6c:a2:06:1a:d4:56:fe:
9e:ce:81:a5:0b:70:d5:f1:65:35:37:e0:a7:c0:64:4b:4e:e0:
34:be:31:eb:da:9f:9d:61:53:65:76:22:40:f0:bd:c9:2b:8f:
6a:34:73:79:d5:28:46:ab:69:8c:1f:dd:76:5f:24:92:43:e0:
63:5f:c9:41:ee:8d:73:25:45:a2:ed:27:3c:9b:46:9b:88:9f:
1c:e5:23:6d:7b:8a:50:bf:db:8d:08:e2:3c:1e:0f:6b:86:31:
66:bf:4a:5d:94:48:14:3a:40:1c:ca:97:b9:5a:fa:8e:49:cd:
93:ee:cb:e7:34:c9:11:6f:76:56:68:dc:8a:f1:9d:26:80:7f:
f5:00:73:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:32:48 2025 by rpki-client