Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: a3ntgp9C4rGnQwpNE359rqy0e6PJ0ekdZ10HhOk/6dw=
Subject key identifier: 5F:EB:40:EB:EF:4A:40:CF:14:02:84:52:F1:9F:BA:BF:AB:29:39:FF
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 019749313385CB699145B46931EC23F96B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 150D
Signing time: Sat 07 Jun 2025 07:00:50 +0000
Manifest this update: Sat 07 Jun 2025 07:00:50 +0000
Manifest next update: Sun 08 Jun 2025 07:00:50 +0000
Files and hashes: 1: fqj1j_FDhTxK5wCrypWCi5_Wlwc.roa (hash: /ZrSpI+gwPBK/gmIVmYYxFTakYRnjJvL4Gztj8QVd0c=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: val+FG6A0G3gt8llVns6lQtcmsAW0DX9ibRDuqzUnc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:33:85:cb:69:91:45:b4:69:31:ec:23:f9:6b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Jun 7 07:00:50 2025 GMT
Not After : Jun 8 07:00:50 2025 GMT
Subject: CN=5feb40ebef4a40cf14028452f19fbabfab2939ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:41:35:c2:33:50:84:b1:c7:51:0e:6b:c4:
f3:a5:f3:75:57:f6:1f:48:68:ec:dc:b1:1b:e2:bf:
c9:f1:a8:4f:2c:3a:c8:c9:0f:ef:6b:db:5b:9a:3c:
5f:fe:6e:5e:90:e1:e6:5b:5c:7a:b2:61:06:a6:66:
01:4a:ab:05:fe:fc:07:24:43:c4:44:6e:c5:d6:f9:
ad:65:02:5b:4e:5d:aa:37:00:76:65:27:31:81:a2:
26:2c:e0:e6:2a:b1:3d:2b:80:ab:4a:2f:4e:69:3b:
47:8d:9f:71:57:b1:19:0d:d6:c4:18:ae:41:af:af:
26:99:84:c6:52:9d:21:09:e7:5e:b2:6b:c3:be:3d:
5f:f6:16:17:e8:7f:5b:ae:be:25:a8:c9:71:c4:d1:
03:53:a7:1f:50:cb:4e:88:27:26:0c:0e:ed:7c:32:
a0:e6:89:ec:ad:09:20:2f:b2:a5:aa:64:99:00:0f:
ae:d6:8d:5c:05:f0:00:f9:87:7a:1a:9b:e3:19:f9:
4d:7e:7e:d9:d4:eb:87:76:f3:38:2d:4b:80:e3:84:
23:c0:93:e5:55:6f:cf:59:47:cf:e1:e3:83:da:65:
6d:47:ad:9f:d9:77:26:51:fb:8b:00:08:de:bd:7a:
4a:4d:ca:09:14:9b:9a:36:a9:f1:c3:29:7c:56:c3:
1d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EB:40:EB:EF:4A:40:CF:14:02:84:52:F1:9F:BA:BF:AB:29:39:FF
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:01:88:ed:0f:5b:c6:e5:83:ed:d0:ff:dc:3b:d3:4f:f3:8c:
0b:19:f4:ea:34:9a:3c:90:10:a5:3b:4a:b0:b0:1a:78:0e:f2:
05:5a:b5:f5:93:be:3c:85:47:1e:dc:d8:3f:03:ce:e0:6d:48:
89:05:16:f4:ff:ef:ce:47:da:3e:d2:ea:5b:fb:82:b8:ae:04:
6e:c8:5e:a6:77:ac:f3:49:c0:39:74:21:2e:83:58:63:ad:78:
3e:54:e9:0b:4c:52:ed:2e:b9:c4:e8:6b:0b:f4:ea:58:9d:d4:
2a:52:61:f8:06:20:f2:41:3b:aa:64:f3:a1:14:d6:72:03:a7:
65:b1:72:08:98:95:c2:65:1d:fc:33:fb:91:e0:80:1a:c1:10:
b5:cd:99:aa:de:f5:51:88:72:52:b5:84:c0:30:95:ab:bd:9c:
8b:79:08:ac:b5:41:35:13:a0:84:d7:22:db:23:12:a1:a8:9e:
40:f7:9e:b6:ce:5d:4e:ba:f7:40:8d:d6:1f:31:38:50:f4:3e:
9f:c3:d1:50:ec:67:3e:06:49:ce:ca:79:27:10:3e:79:fe:d8:
1e:86:31:75:c5:5e:05:ad:e4:0c:00:58:ca:d7:d7:85:15:70:
07:08:da:46:36:e8:a5:28:ed:81:6d:f1:5f:7b:f6:db:a4:1f:
fe:37:6a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:58:39 2025 by rpki-client