Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: KnESSc3LYPJh7LMMS0wFMc0lawPBgDoHSqJLeW/hkvc=
Subject key identifier: AD:77:C6:51:34:7A:47:8E:35:50:A8:CB:FE:96:21:C2:37:63:16:82
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 01974630047941B0AB1E08730D958B2541E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 0521
Signing time: Fri 06 Jun 2025 17:00:41 +0000
Manifest this update: Fri 06 Jun 2025 17:00:41 +0000
Manifest next update: Sat 07 Jun 2025 17:00:41 +0000
Files and hashes: 1: GnRBgfOJgqgbCKfVmItzXv5DJ54.roa (hash: MiCCH7uvupnb1UHdVT5mWDwROiRyBunRSB+jjWhogas=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: POFvzeQcxg64E038uR8DwTCMFJw3VZw4BtkYRpmMnIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:04:79:41:b0:ab:1e:08:73:0d:95:8b:25:41:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Jun 6 17:00:41 2025 GMT
Not After : Jun 7 17:00:41 2025 GMT
Subject: CN=ad77c651347a478e3550a8cbfe9621c237631682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:0e:13:22:2f:c0:87:e0:6c:5b:eb:d6:8c:
b2:ce:1f:ea:c7:62:97:6d:a7:9c:fe:17:35:52:5c:
a4:0a:a1:87:01:92:4d:4f:2e:51:ff:2d:76:de:00:
ba:23:97:2b:f9:b1:9a:c6:26:8f:98:9d:b3:45:61:
57:a4:06:76:6d:f1:73:9d:2e:d0:25:75:97:53:20:
c0:56:d2:d2:2d:74:ed:46:3c:e0:e7:a6:94:c7:4f:
a1:d8:e1:3e:af:c8:76:ea:c3:ad:58:3a:ba:3c:95:
f6:0f:f9:c4:fa:8a:3e:cc:77:38:4d:7c:c2:9f:68:
0a:41:a9:35:1d:7b:08:ec:c3:d5:15:97:4d:bd:b6:
53:39:ad:6f:be:ea:1e:15:b4:d0:e8:0f:d3:f2:fb:
98:a1:a3:c1:90:a9:01:f9:2d:8e:fa:8d:ed:98:f5:
5f:f2:56:35:e2:d6:c5:4f:b1:45:f2:4d:b6:ab:90:
59:3f:de:c2:d5:6d:15:69:d0:c8:0d:70:c2:1a:e1:
96:b1:06:37:98:c2:ba:99:a9:fe:08:2e:15:f6:27:
50:62:88:6b:96:23:cb:ea:a0:b6:cb:a5:fb:26:8d:
f1:44:74:c2:08:b9:86:bc:86:f8:b9:01:41:05:2f:
09:83:59:15:18:24:39:61:30:ac:e0:94:3d:44:90:
f1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:77:C6:51:34:7A:47:8E:35:50:A8:CB:FE:96:21:C2:37:63:16:82
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:1b:4e:b1:cf:00:57:ed:b0:ad:53:96:a8:4a:6e:a0:ed:4a:
1d:73:f5:49:e4:49:3c:2f:2c:6a:55:e8:6d:31:39:69:15:c3:
7f:8c:3e:1d:71:20:fa:bf:a8:9b:ed:f1:e2:99:41:b3:c8:74:
4b:2e:10:94:4e:e7:d4:22:d4:e4:ab:db:d8:98:17:ed:2f:4c:
64:75:c1:82:f0:1e:b6:17:52:ee:96:27:69:5f:54:87:33:64:
ea:1e:f5:ad:da:cf:0d:55:25:91:bc:bf:32:b0:1d:dd:de:03:
49:22:06:90:c5:75:0d:12:09:6d:20:7a:c5:03:be:be:9e:a1:
3f:b2:9d:28:af:d4:47:f8:3e:8d:fc:a1:79:2f:1d:6e:79:51:
d1:3b:16:90:28:d7:60:a6:65:f7:1b:60:af:2e:85:fc:c5:a2:
90:24:3b:fa:c8:6e:ad:c2:e6:08:30:81:ad:1f:de:64:a3:ff:
9c:ff:65:90:89:ef:a6:c1:e9:66:ed:3b:47:12:0c:00:50:5b:
31:32:2c:54:bd:ef:e2:4f:75:7b:79:01:54:58:65:64:6a:34:
64:bf:d3:95:52:ca:7b:f9:ba:bf:eb:f9:5f:64:30:47:25:26:
6e:5f:73:94:9d:7c:ac:89:75:b7:47:33:9c:1e:8a:52:d1:0d:
c3:25:53:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:02 2025 by rpki-client