Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft (raw, json)
Hash identifier: DrzhZP0UJ8cWzh83kaglyR76mkhGFPFhpl+c5ZVH9S4=
Subject key identifier: 8A:74:96:C8:8D:9B:D8:C0:80:3E:B7:6C:4B:C3:11:8E:FC:5E:37:3C
Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d
Certificate serial: 0197466735A8CF0B9AFBEB98EFB813267D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
Manifest number: 0493
Signing time: Fri 06 Jun 2025 18:00:58 +0000
Manifest this update: Fri 06 Jun 2025 18:00:58 +0000
Manifest next update: Sat 07 Jun 2025 18:00:58 +0000
Files and hashes: 1: Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl (hash: E1xc4ytuSnssJXmE9+AuNOGy5hlNshKoN8DRZ8Ui5HY=)
2: e9CofsvHtUd9nOdIWFYukSYHblY.roa (hash: bRaoXZzCxY/+WP3cSFPKma8SeEgItuQDnpy+HQsr3lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:35:a8:cf:0b:9a:fb:eb:98:ef:b8:13:26:7d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d
Validity
Not Before: Jun 6 18:00:58 2025 GMT
Not After : Jun 7 18:00:58 2025 GMT
Subject: CN=8a7496c88d9bd8c0803eb76c4bc3118efc5e373c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:f2:42:9d:33:20:11:17:06:b1:f9:c9:1a:
c7:42:27:b1:3c:31:d2:d7:5d:c3:41:92:26:48:d1:
0b:7d:00:9e:a1:47:30:ea:05:0d:68:3b:a0:90:fc:
9b:27:b4:be:7f:0d:29:d3:ae:7d:8d:d9:f9:00:e8:
93:fb:e5:7f:9c:81:c6:48:b1:78:ff:ad:f9:90:69:
2f:3b:e2:bb:19:4f:86:c8:fe:9b:f4:38:e4:4b:e3:
ff:65:40:2d:ab:a8:5c:ed:d9:b3:fc:1a:5c:00:05:
50:ec:23:15:06:b2:5d:08:70:b0:1f:0b:58:af:94:
31:4a:5d:37:5d:7e:20:d8:6f:be:f6:2a:79:d0:2b:
f9:89:4e:a4:1a:6e:0e:f5:69:06:8e:5e:94:f7:ba:
7c:8f:00:cf:aa:3b:09:ad:68:11:89:9f:b4:1d:0c:
79:79:7f:85:24:61:03:85:d3:b7:5d:d6:92:2c:2c:
6d:83:40:ef:6e:07:66:22:23:bd:ad:80:a7:bf:ae:
a7:8b:ee:e4:f1:55:e0:72:98:b6:b1:d5:9f:cd:7d:
f4:3c:37:d5:d8:ea:c3:0c:a6:71:39:30:d3:05:52:
86:fc:93:4f:cf:2f:6c:45:bf:aa:bd:aa:82:47:16:
34:b0:71:41:1f:0b:7b:59:67:c8:f2:f6:d0:75:48:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:74:96:C8:8D:9B:D8:C0:80:3E:B7:6C:4B:C3:11:8E:FC:5E:37:3C
X509v3 Authority Key Identifier:
keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:12:2d:37:c8:bb:9d:db:ad:c9:14:82:2a:a5:9d:6c:fd:f6:
4a:5d:19:41:e2:68:49:bd:1c:a2:68:4b:32:87:91:27:69:3f:
82:54:08:12:ad:f3:4f:46:64:e9:ab:73:b7:0f:0a:d0:38:ca:
d9:89:be:c5:ad:b4:56:4a:ce:a8:12:79:eb:0f:43:8c:96:e9:
87:aa:f0:88:6d:ae:b4:a3:0c:35:1b:4b:d6:92:c3:6a:aa:3b:
88:d3:c0:da:94:c4:f2:50:54:4a:37:99:09:c7:1b:40:05:ce:
f5:df:e4:90:5f:08:cc:64:a6:6a:6f:c2:b1:93:4d:36:f9:05:
60:4d:f9:53:c2:03:72:61:41:c0:1e:5e:8e:28:d3:15:20:68:
9e:26:f6:b9:99:d7:d9:39:1c:c0:dd:c5:22:27:66:0c:44:3e:
10:9f:21:5a:c9:ac:33:7e:8f:0e:89:54:0f:c3:68:2e:48:2e:
22:83:52:e5:52:82:4d:34:b0:25:74:a9:13:e6:ca:cd:0c:24:
30:a3:44:d3:4e:43:9d:4d:d7:ba:76:bf:d2:6b:8c:73:bf:12:
00:aa:51:76:21:79:84:9b:bc:13:f5:ba:d6:60:79:bc:04:03:
a9:b2:dc:07:a3:38:03:00:82:a9:3e:22:0e:ea:58:0f:21:56:
ad:55:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:25 2025 by rpki-client