Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: OidZXUBw15wgDGFDt5KYhvmIWTmsslyxs/WS5KIosZs=
Subject key identifier: FE:73:0B:76:B1:79:E3:68:C8:F2:A0:C4:11:61:7A:04:27:F0:83:ED
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 01974B8D7068CA28037E8EF92F70A533B5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 11BA
Signing time: Sat 07 Jun 2025 18:00:49 +0000
Manifest this update: Sat 07 Jun 2025 18:00:49 +0000
Manifest next update: Sun 08 Jun 2025 18:00:49 +0000
Files and hashes: 1: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: 4xSoORH/EADITM0frYyx5s9Skg78IuBEY/X7qNPG9dc=)
2: c_W11dB19ZdeKd0Hkukk0DBHzss.roa (hash: IfJHrCf86EMC8/UaqV8PdsGmuBe2nBvxRntFhIs50zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:70:68:ca:28:03:7e:8e:f9:2f:70:a5:33:b5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Jun 7 18:00:49 2025 GMT
Not After : Jun 8 18:00:49 2025 GMT
Subject: CN=fe730b76b179e368c8f2a0c411617a0427f083ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:3e:a3:30:ed:d5:aa:2d:6d:0c:8e:32:79:
5c:8d:05:59:eb:89:cb:41:4a:c1:17:c2:6c:66:4c:
39:1a:0e:49:8b:7b:e4:b5:15:6b:93:db:6c:ed:86:
ac:e4:a7:53:44:fe:6f:9f:ad:52:94:da:54:53:c4:
5c:6e:a1:0a:72:93:29:f3:8c:9f:e0:68:7f:40:d5:
03:07:00:7e:3a:e3:7f:46:24:2c:7f:78:92:5f:3a:
e4:9f:13:5a:9e:21:90:76:e4:01:9d:fa:90:74:a7:
6c:9c:20:0c:07:39:44:9b:35:ce:10:35:d7:4e:4e:
31:9b:4b:cb:1c:5d:77:26:dc:2d:b5:69:7d:78:3f:
02:d1:21:a4:f8:1c:9b:8b:25:1e:72:4a:36:df:a8:
6d:68:f9:e4:90:73:e6:f3:aa:99:c6:c0:08:3c:0d:
8a:1d:40:2b:a2:5d:e2:85:e1:64:0d:67:e4:4d:85:
ac:87:a9:80:97:b4:15:34:8c:51:cb:d5:d3:09:02:
34:4b:8a:60:19:8d:66:09:32:5a:2c:79:66:b4:3a:
af:8d:b9:6d:b9:91:fb:fd:eb:e5:f2:93:63:06:d8:
19:d5:8c:6e:5f:40:dd:9b:70:7e:fe:8f:0b:8c:ca:
40:74:b3:7e:02:ed:b2:0e:4f:c8:d1:71:c7:1b:18:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:73:0B:76:B1:79:E3:68:C8:F2:A0:C4:11:61:7A:04:27:F0:83:ED
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:74:59:ad:ff:11:24:fc:37:ac:c2:f0:ee:81:57:47:9d:46:
6d:34:07:31:d6:7b:93:33:73:18:bb:89:7b:7d:25:b9:e5:0a:
91:a9:58:ec:4f:cb:5d:c3:cd:a7:78:ce:90:17:62:fa:4e:5f:
03:f0:bd:23:ad:95:18:24:19:f8:0b:02:7c:e1:d5:c6:55:02:
6d:c0:46:8a:0d:2a:cc:4b:5a:e0:a0:13:18:1d:79:5c:b9:f0:
68:c6:c7:03:85:11:db:b2:27:e2:fd:7c:bd:33:66:64:9d:3e:
60:38:77:96:7f:c0:ca:93:b7:87:de:11:8a:c6:1d:27:5a:92:
0b:86:11:37:e2:ea:78:4d:81:fc:f8:f1:80:cc:5f:17:b2:bb:
00:91:ce:da:ef:d5:68:e4:fe:a9:8c:c8:bc:dd:a6:48:00:1d:
cc:77:b9:25:9a:a5:8a:6e:02:f8:31:00:be:c2:35:ee:24:ed:
02:4b:f8:2c:b9:24:ed:7c:d0:39:5b:20:58:ee:2d:92:a6:85:
d1:78:cf:92:b1:ee:07:a0:12:08:1d:c4:21:0b:66:0b:ea:5d:
c3:f4:aa:50:38:9d:9e:77:31:79:60:26:5c:92:0b:d2:57:90:
bd:1b:ca:88:f1:4f:3f:50:09:02:5c:40:ab:d3:93:83:f7:6e:
d8:a7:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:42:06 2025 by rpki-client