Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
File: zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json)
Hash identifier: PIci0EXWvpqQJubX7SocIlFgHOGFr8Ol/Gx5637ghZ8=
Subject key identifier: FE:84:62:56:C6:45:0E:A6:C7:FA:01:BE:75:33:1A:14:E2:AF:2C:89
Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Certificate serial: 0197488BF359E6883A711DE96C8490952C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 04:00:20 +0000
Manifest this update: Sat 07 Jun 2025 04:00:20 +0000
Manifest next update: Sun 08 Jun 2025 04:00:20 +0000
Files and hashes: 1: oi2OU2MII40wJvGP04NHRArOFvs.roa (hash: VTkXyNDb4jg5wGXFkKirwnltERuwe0Q4j4rmz+H0ul4=)
2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: aNGk/6WIrCXcEEsSUQyGzBSucPGkqiqfnpI0ipTW1a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8b:f3:59:e6:88:3a:71:1d:e9:6c:84:90:95:2c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Validity
Not Before: Jun 7 04:00:20 2025 GMT
Not After : Jun 8 04:00:20 2025 GMT
Subject: CN=fe846256c6450ea6c7fa01be75331a14e2af2c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:11:e4:b5:4d:fb:0e:57:ce:85:5a:36:c9:e7:
47:3b:84:86:83:a3:61:c7:e7:07:58:34:df:b8:95:
94:1b:8b:56:d1:a0:db:c6:24:45:b1:75:92:e9:1b:
9d:9b:d1:26:3e:48:92:c8:62:3d:e9:5b:b1:4f:f4:
43:7c:e6:de:04:48:dc:b7:73:e7:c8:7b:2a:63:2e:
64:67:02:a6:3d:6f:3a:be:58:d3:04:dc:4e:77:10:
01:0f:37:dd:06:b0:96:a5:61:e9:1e:56:3e:ad:b0:
e7:e4:76:72:e2:1e:3b:ee:de:35:23:c5:8e:3e:de:
3d:cd:b9:1a:e9:d0:2b:32:5c:92:e8:1e:7c:3f:7e:
1a:09:04:e3:4d:58:94:89:84:4d:40:b8:da:ea:b2:
45:aa:ce:ac:a1:71:75:64:2d:97:5c:0a:8f:0b:d6:
5e:59:7d:b1:68:20:b1:54:d8:40:89:f7:7d:f5:b4:
9d:4f:db:b6:4f:a4:dd:2d:be:ea:dc:b9:01:f7:d8:
1f:ec:fb:2e:7d:b6:44:c0:e9:ed:ba:02:56:9b:11:
85:0c:78:98:58:7c:c5:33:db:d0:bf:46:36:83:d8:
ad:1d:04:8a:7f:f6:7f:1f:0a:29:1b:38:89:39:2e:
8e:2f:d2:7a:7d:af:3f:f3:60:14:aa:23:7d:a0:4a:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:84:62:56:C6:45:0E:A6:C7:FA:01:BE:75:33:1A:14:E2:AF:2C:89
X509v3 Authority Key Identifier:
keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3c:98:bb:d9:8b:88:15:5d:0f:39:90:54:4b:7c:86:d9:09:
56:83:b0:58:f6:00:25:37:01:7f:81:7d:68:2c:e5:b8:15:c3:
84:2d:7f:83:d6:86:78:36:60:f4:ce:ab:e2:cd:cb:fe:2e:60:
e5:09:4c:55:6c:5f:d5:60:33:7d:72:f7:2b:c1:c8:60:2f:40:
bf:16:3a:b3:30:3a:93:0f:db:7a:fb:35:dd:65:f2:01:2d:6a:
ca:54:f8:98:fd:92:28:96:f9:0d:45:13:b2:bb:52:14:df:7f:
17:2d:a6:68:96:14:82:fe:e6:d2:5d:4d:19:b7:2e:d3:01:fc:
85:f3:27:97:da:0d:2f:df:ae:47:5f:fc:60:84:7b:29:bb:81:
69:e1:33:c1:d5:7b:ef:30:77:5c:97:83:27:6f:2b:f9:b2:32:
8c:93:41:d1:68:4a:8b:ff:0c:37:aa:7e:5d:69:36:80:49:79:
3b:fc:e1:9a:09:31:5f:bf:9f:61:c8:c4:22:91:52:70:5d:a9:
00:e3:f4:23:9c:9e:6a:e5:05:88:72:7b:4e:f0:bb:04:06:71:
89:88:08:13:72:13:5c:a9:f5:50:4c:5a:d0:6c:05:22:2b:e1:
2b:15:f1:97:d4:e6:f3:6c:7b:48:b0:9f:77:a7:c1:39:bc:a8:
55:8e:8d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:27:26 2025 by rpki-client