Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: ztFz/Rui768iq5tii4Wd4tFFrOF9e5yTKqzpQ6iIloM=
Subject key identifier: A0:84:C7:03:15:6D:6E:E9:DB:E6:AA:60:BB:12:01:F9:BB:2C:3F:B2
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 01976403F541B5973B530C041839C335EF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 158D
Signing time: Thu 12 Jun 2025 12:01:10 +0000
Manifest this update: Thu 12 Jun 2025 12:01:10 +0000
Manifest next update: Fri 13 Jun 2025 12:01:10 +0000
Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=)
2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: 3ylsnqz2ONrsZxD0JRJg+HZ29CQIKA1grC6tPAtRBFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:f5:41:b5:97:3b:53:0c:04:18:39:c3:35:ef:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Jun 12 12:01:10 2025 GMT
Not After : Jun 13 12:01:10 2025 GMT
Subject: CN=a084c703156d6ee9dbe6aa60bb1201f9bb2c3fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:90:08:a6:70:4a:1b:ec:26:55:9e:70:3f:
12:42:fc:2b:a8:59:19:82:27:bb:a6:68:0a:e4:eb:
9b:5f:e6:dd:80:30:53:0a:90:50:2e:f6:1e:5a:03:
5b:32:de:e8:03:5a:5b:2a:0b:db:d3:25:49:01:23:
22:02:48:98:c6:0b:d4:39:ff:60:b2:bf:78:21:37:
17:2c:ed:5d:2e:87:4d:f4:c4:41:32:ff:b7:e7:59:
4c:70:53:d0:78:2a:a6:cd:f6:4d:fa:3f:8d:46:2b:
35:66:9d:23:79:69:9f:04:2e:ae:b4:8d:f1:18:39:
0c:4d:b2:09:af:55:d2:72:f2:1e:7a:98:9a:fe:34:
e0:23:ee:01:84:8a:d5:57:e1:9c:88:71:9e:6c:50:
f5:23:81:c6:98:fc:4a:8f:30:b5:0b:e0:0e:6e:60:
a3:2b:bb:cb:6a:0f:d4:14:4b:80:cf:a0:aa:ee:a3:
4d:ee:e6:c3:cc:2a:09:2d:18:41:5c:ea:d5:76:89:
9e:cb:0e:61:cd:4f:42:8c:f4:ef:8c:db:2a:c9:6a:
3b:b6:e4:68:ac:25:04:09:17:60:d4:86:f0:a1:c1:
49:6a:ec:93:8b:78:06:c3:c2:0d:78:dc:db:28:44:
71:3f:89:c1:c6:df:67:d2:27:50:ad:b0:6c:0b:81:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:84:C7:03:15:6D:6E:E9:DB:E6:AA:60:BB:12:01:F9:BB:2C:3F:B2
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ae:2d:e4:4f:72:7d:a7:2d:b5:f0:4b:25:23:c3:16:60:ca:
84:f3:4f:0f:e5:b0:90:3f:ed:01:b7:53:13:09:1c:84:62:b1:
95:b6:3a:f9:1c:41:b7:43:cd:68:4c:47:7e:2d:c1:88:8e:8e:
f1:72:42:64:3d:f2:6b:d9:60:1d:4d:02:e5:17:e3:0a:e0:a3:
40:2e:02:47:ae:4d:c8:82:11:2b:87:96:fe:61:d8:9c:c8:7f:
e9:5e:54:f3:cb:74:53:b8:18:29:61:6d:7a:da:1e:15:a1:7d:
c3:f2:b6:a1:fd:05:f2:4c:b0:c8:cf:3c:f5:f9:4b:3c:ca:86:
53:4a:8c:c6:01:55:cf:21:f5:cb:62:18:11:21:b5:9d:0b:85:
50:56:c1:70:e7:c3:5a:93:6b:2f:3d:2d:a0:51:03:61:96:09:
e7:e7:bc:b6:99:b7:da:e9:b0:36:cd:e3:ee:82:a5:d5:ff:c9:
cb:b0:50:40:de:80:e8:06:d6:fe:1c:ab:93:84:07:0e:d0:cd:
4b:9c:b2:bd:ff:f3:6e:75:21:59:e2:6f:ea:a2:16:5d:fa:43:
a9:e7:0d:c6:88:6d:da:a9:66:cc:4c:12:69:38:c4:67:dc:0d:
7d:24:cc:4f:e1:9e:0e:13:d3:37:d7:d1:a3:ae:63:82:1c:73:
ba:e6:9b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:51:14 2025 by rpki-client