Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
File: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft (raw, json)
Hash identifier: flHdJ9Dr3Qs6GlSAqk0bGq6YnrHuNv1fzg74MyQuaPw=
Subject key identifier: 8B:08:39:1A:67:6B:97:A0:BE:6A:AC:EF:79:36:A8:6F:A5:11:22:76
Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Certificate serial: 0197499EF8FD0F0FB9380EEB254955AD9672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
Manifest number: 0295
Signing time: Sat 07 Jun 2025 09:00:44 +0000
Manifest this update: Sat 07 Jun 2025 09:00:44 +0000
Manifest next update: Sun 08 Jun 2025 09:00:44 +0000
Files and hashes: 1: seG0cSvUmJpa8tNqX_V-DMKTXGE.roa (hash: 0BF0vQ0Y+DaO6qvrnPzJ13hBughhON940nySfXNNYFI=)
2: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl (hash: HggBZJRUSCehJZRtGQH/aCYkxVp4vYnuSysV+pAF40U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:f8:fd:0f:0f:b9:38:0e:eb:25:49:55:ad:96:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Validity
Not Before: Jun 7 09:00:44 2025 GMT
Not After : Jun 8 09:00:44 2025 GMT
Subject: CN=8b08391a676b97a0be6aacef7936a86fa5112276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:3f:6f:38:95:01:86:4e:b5:b0:ed:eb:29:
71:bd:36:40:c6:3d:76:27:3c:06:11:51:75:87:6f:
f6:bb:b7:8f:5e:43:df:ba:b2:05:87:9a:b1:6b:83:
cb:2d:d0:df:a5:39:f8:02:50:2d:db:3e:4e:d3:4e:
c2:a2:48:c6:e6:24:65:94:d5:a5:50:8a:c2:0d:21:
ee:f8:1a:f1:47:7a:9f:f2:81:de:2f:62:b2:cc:a3:
80:90:96:b6:e3:c7:75:ff:86:87:3e:43:b6:ed:6e:
a4:3e:5b:d8:34:e0:1f:fa:50:a8:86:fe:4b:58:b0:
8c:3a:33:7c:d8:9e:17:d6:51:00:b6:33:5d:b7:95:
2a:39:b5:33:ae:52:f2:b1:1d:df:1a:2e:a0:64:59:
e1:3b:e1:ab:b6:f6:c3:31:1d:32:a7:b5:33:78:98:
b8:89:a8:22:1d:7b:54:50:1b:3e:ec:d6:59:7c:7a:
ad:b7:7a:d6:83:c4:a6:78:00:cf:fb:f2:6c:38:00:
e3:61:43:c2:98:f0:7a:3f:ec:08:33:9e:ab:e2:ec:
73:7e:20:1a:75:d2:1f:81:2b:2a:12:1f:df:26:95:
b2:fd:05:ad:9a:d5:14:eb:2c:4b:5a:ed:07:6c:a7:
d7:65:fd:a7:7c:2a:b4:4f:85:7a:f5:b7:c3:81:b2:
0c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:08:39:1A:67:6B:97:A0:BE:6A:AC:EF:79:36:A8:6F:A5:11:22:76
X509v3 Authority Key Identifier:
keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e7:3e:17:88:66:35:2e:9e:fd:9c:f8:f5:71:c7:b9:f9:ab:
12:e9:6d:9f:24:b3:27:2a:1a:ea:3d:26:87:ab:9e:2a:f0:68:
92:3c:26:46:8c:ba:88:46:82:ff:bf:d0:ef:26:22:bd:eb:09:
c6:90:fa:d9:6e:a0:0e:34:74:cf:9d:c1:b3:c3:e9:cf:49:47:
00:4b:45:72:99:86:66:9e:99:aa:e0:d8:75:64:3a:06:cf:4b:
37:d9:72:3f:37:8a:57:4e:17:ed:ee:61:22:f1:aa:be:50:7b:
7f:42:fd:38:4c:f0:ed:80:6a:62:23:98:1b:2b:0a:02:8b:50:
de:74:9a:d1:da:af:5e:15:cf:c7:d7:83:44:dd:3e:94:c3:7b:
27:26:de:25:ec:a0:b6:4b:e0:84:99:62:48:bd:24:08:66:ba:
fe:05:98:c6:50:34:95:79:2b:40:96:e8:8c:1b:59:15:ca:03:
40:2d:ba:cd:da:42:16:eb:a2:ef:f9:9d:79:8b:98:d9:06:9a:
2f:82:02:ec:56:3d:04:ee:da:39:72:b9:b0:59:1f:68:00:30:
a9:d4:3e:2c:cd:58:12:40:c5:3a:3e:2f:a9:cd:9a:77:7d:81:
8b:cc:9c:0c:dc:18:51:a3:a0:dd:ef:47:bd:83:2d:e0:bf:fe:
2e:c0:01:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:03 2025 by rpki-client