Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
File: RZzMG7ARYGhoBts1qTNRshs-YNw.mft (raw, json)
Hash identifier: AnOOaulK6o2TrwAql2YBxZ1ZWQObf3YlQeI4K40RfCY=
Subject key identifier: A3:4E:69:0D:27:25:E8:0E:EE:FD:DC:55:1B:57:FF:AA:80:BB:89:EF
Authority key identifier: 45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC
Certificate issuer: /CN=459ccc1bb01160686806db35a93351b21b3e60dc
Certificate serial: 019766CDD2E75BB4F856FB7FA5846627B7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
Manifest number: 1301
Signing time: Fri 13 Jun 2025 01:00:54 +0000
Manifest this update: Fri 13 Jun 2025 01:00:54 +0000
Manifest next update: Sat 14 Jun 2025 01:00:54 +0000
Files and hashes: 1: RZzMG7ARYGhoBts1qTNRshs-YNw.crl (hash: gS1LnoMWV1+ryuYhUn+ZcMAB5/5hFMNFo9pAEqWRLcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:cd:d2:e7:5b:b4:f8:56:fb:7f:a5:84:66:27:b7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ccc1bb01160686806db35a93351b21b3e60dc
Validity
Not Before: Jun 13 01:00:54 2025 GMT
Not After : Jun 14 01:00:54 2025 GMT
Subject: CN=a34e690d2725e80eeefddc551b57ffaa80bb89ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:c0:ea:0a:b1:54:05:5f:e0:f2:80:ae:ab:
4a:74:d9:08:bf:da:ac:5b:66:12:cd:4e:33:d2:86:
69:55:e3:95:3d:54:f1:f4:77:cc:28:09:0f:e1:49:
4e:a4:28:ac:5d:57:af:57:06:88:8a:31:fc:59:6c:
cd:91:90:20:84:93:ff:18:63:ae:5f:75:58:b0:02:
e5:e0:7b:6a:ee:54:00:91:02:b5:fc:a2:92:07:d9:
30:b7:92:1d:de:d7:67:3d:fe:f6:da:80:65:95:94:
6b:b1:6b:3d:1a:6b:20:b2:db:f7:9f:72:38:a5:9d:
35:c1:8e:16:d8:9b:f4:c2:7b:84:b4:f6:58:be:8d:
9b:c6:31:88:96:6a:87:ba:72:47:5b:99:05:0c:88:
d7:4c:b2:21:20:de:1d:84:3c:22:59:cf:89:51:fa:
06:ff:a1:90:05:3f:c3:74:ad:3d:c3:7c:a6:d2:5a:
e6:6f:57:f9:dd:da:77:23:82:62:cb:ab:34:f5:dc:
4e:4d:5a:e0:96:c4:00:f4:f6:2f:9a:cc:62:77:78:
b7:c8:34:71:9d:95:c9:19:cb:65:82:b5:39:f5:9f:
a6:64:8b:b7:69:75:5c:61:9d:0c:48:0f:51:18:5a:
a6:58:a9:d3:f4:60:a6:8c:eb:d7:e7:19:62:61:2c:
34:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4E:69:0D:27:25:E8:0E:EE:FD:DC:55:1B:57:FF:AA:80:BB:89:EF
X509v3 Authority Key Identifier:
keyid:45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ca:8a:e2:9a:19:9e:74:9c:9c:f6:ec:54:6a:39:07:68:bf:
99:77:9f:9b:c1:e8:b6:be:77:d5:e3:c9:b1:2b:b2:d7:24:e5:
38:73:90:4b:20:d7:fb:bd:08:19:df:20:3c:c9:47:df:5c:c9:
ff:59:0f:c0:a8:f2:5c:67:04:d7:69:b4:83:06:0c:2b:13:a2:
8b:84:f8:4b:94:a3:a9:cd:9f:8e:70:33:ae:e8:50:04:73:55:
f8:e6:22:d5:91:f4:ee:05:bb:b3:26:fe:3b:5e:e8:2d:30:cd:
59:2c:b5:12:c7:48:b2:e8:b8:7f:d4:88:7b:08:a8:5f:1f:16:
6e:6b:1f:59:c9:77:5a:13:2d:28:09:ac:c2:48:1c:cc:14:2a:
2e:7e:d1:2c:59:9a:58:9b:78:57:8b:37:bd:a2:ad:19:83:a8:
5e:58:97:f9:45:e7:11:49:b8:97:4c:f1:e0:2b:e9:13:f6:28:
e1:76:d5:6a:cc:f8:2c:6e:31:a9:48:ad:4a:15:04:87:0c:5c:
4d:d6:73:f4:0e:da:4a:41:b6:a7:a5:81:3b:c6:2d:a2:b3:b8:
42:2f:11:d4:ea:2a:33:fa:09:2e:b4:e4:74:00:2f:72:77:4a:
be:06:83:f8:f5:47:70:d4:38:ef:61:ab:c7:48:83:c8:28:71:
07:6b:46:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:07:42 2025 by rpki-client