Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: MRYgTHb6YAmD/1vFl2Fpq71Vbo7WEQfwGXjwYA5Frq4=
Subject key identifier: BF:C3:30:5F:F7:A8:FA:0A:66:1C:09:75:B3:14:DF:87:86:0A:79:7C
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 0197586DDE2DE5CE9C0850E2B2874423844D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 1587
Signing time: Tue 10 Jun 2025 06:01:24 +0000
Manifest this update: Tue 10 Jun 2025 06:01:24 +0000
Manifest next update: Wed 11 Jun 2025 06:01:24 +0000
Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=)
2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: QbE3a/y+UDNmEiWrKkjezv+SJK1aEb0fM3ux0WM37ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:de:2d:e5:ce:9c:08:50:e2:b2:87:44:23:84:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Jun 10 06:01:24 2025 GMT
Not After : Jun 11 06:01:24 2025 GMT
Subject: CN=bfc3305ff7a8fa0a661c0975b314df87860a797c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:be:71:cb:f8:48:ff:bc:4b:7d:89:c0:da:
20:ec:47:53:83:cc:3f:38:42:36:20:7b:85:28:0b:
47:e0:8a:15:a1:96:16:6b:65:65:38:b3:0b:e3:c6:
a2:8d:ac:62:c6:2f:18:f4:be:9e:d7:0a:fe:67:b3:
c5:f0:0b:0c:82:f5:24:1c:94:dc:28:cd:ce:7d:2f:
e3:79:0a:77:b4:a5:d5:d7:e0:92:d6:7e:20:6b:83:
2b:3e:7f:a6:f8:d1:a6:84:8a:04:86:90:73:7c:43:
48:b8:a2:f4:31:af:9a:f1:c8:62:ba:91:71:24:6f:
eb:6a:f8:05:a0:6f:35:74:ca:a8:62:05:71:4b:90:
ee:3d:79:f6:be:32:da:c7:e6:b8:c5:2b:12:a5:57:
61:5b:63:71:ef:20:75:bf:fe:16:2b:ba:5a:79:58:
cc:a7:03:f2:90:34:58:9a:e6:2a:b9:e4:86:b7:29:
1f:49:0e:9f:34:4e:7d:3a:cd:40:4d:de:8c:c1:6a:
e1:28:f5:fc:f2:f5:58:b2:cb:6c:e7:8c:1c:25:31:
01:e7:62:2f:9e:b2:52:2a:5e:40:92:73:13:40:c0:
71:dd:94:93:14:27:dc:b0:7d:6c:c1:ce:db:92:b6:
99:a2:cd:86:72:5a:9f:f7:f4:c7:52:cf:8e:21:44:
65:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C3:30:5F:F7:A8:FA:0A:66:1C:09:75:B3:14:DF:87:86:0A:79:7C
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:46:cc:bc:27:a7:c7:94:1e:89:5a:b9:0e:d3:a7:fe:b8:6a:
6e:8f:d1:02:b8:f7:4e:e4:e8:4e:07:05:5c:60:c4:e3:f1:48:
7c:8e:a9:07:3b:8c:1a:15:d3:89:dd:04:63:04:bf:5b:d6:a0:
ee:a5:6e:61:97:fc:97:fa:b8:06:9a:f3:5e:84:57:18:fc:89:
3b:61:5b:d2:30:2d:e1:d4:89:5f:69:83:67:ac:fb:f2:4c:d7:
bc:62:eb:95:53:36:42:ac:17:39:2d:78:0e:e3:ff:fb:db:12:
a0:00:e1:0c:ce:01:1d:b2:40:bd:90:24:8b:a4:7c:50:9f:72:
a3:da:e7:01:a2:82:96:3c:93:8f:f9:8a:09:a1:00:c9:95:0e:
01:1e:13:9b:97:2a:97:e9:93:f1:49:a8:66:ee:c8:31:dc:77:
13:8d:2c:7f:f8:2a:29:3a:9d:e5:ba:75:3a:38:82:44:e0:fa:
80:af:0c:ea:87:a7:61:17:df:ea:d5:f8:8b:16:3f:21:6a:a3:
0e:4b:ed:74:8d:58:90:c9:e8:67:a4:c6:a8:80:2c:b1:70:3f:
be:24:2a:e8:a0:97:30:3e:b9:1b:99:fb:7e:89:ef:f0:8a:e4:
fa:93:03:39:81:3d:28:08:38:57:bd:11:03:bb:c3:f1:bc:ca:
fa:e6:cd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:29:10 2025 by rpki-client