Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
File: Z1Zd_fZrIS4XodmKf14rCzJkza4.mft (raw, json)
Hash identifier: /3/LGYUYT+pR4oj8gtB0UikDzOp+s/P5v0Mzt8DdIvI=
Subject key identifier: 82:C5:9A:1B:40:08:02:39:02:A9:B5:C9:D7:AE:5F:95:24:26:D7:98
Authority key identifier: 67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
Certificate issuer: /CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Certificate serial: 0197469E54150551E67D048ADB47BEAE5CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 19:01:10 +0000
Manifest this update: Fri 06 Jun 2025 19:01:10 +0000
Manifest next update: Sat 07 Jun 2025 19:01:10 +0000
Files and hashes: 1: Z1Zd_fZrIS4XodmKf14rCzJkza4.crl (hash: i4P4pLIzsElIerTl2lIF2MgsLN10loipn0uiGn1OPNw=)
2: edLAr30NQ2j1eS2szlFoVf6cZ6k.roa (hash: YX6gw5+qXpVJdrJ3QtQM0C2faqlrGQ4u2zGhs6Hy6CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:54:15:05:51:e6:7d:04:8a:db:47:be:ae:5c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Validity
Not Before: Jun 6 19:01:10 2025 GMT
Not After : Jun 7 19:01:10 2025 GMT
Subject: CN=82c59a1b4008023902a9b5c9d7ae5f952426d798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:9b:74:14:80:ee:5c:4b:a2:b2:6f:20:65:
04:90:e3:95:62:1f:03:a2:30:50:45:76:6d:29:7f:
12:4b:42:7b:cd:a0:d1:4b:8a:81:f6:87:cb:39:31:
f8:74:5b:a5:8a:21:5c:a6:cd:f0:d6:63:b2:87:64:
c8:1d:78:30:2e:3f:63:ee:2a:63:4e:f9:3f:5a:9c:
f2:be:23:8c:38:0a:c5:a5:cd:35:0f:c2:c3:16:22:
f1:a5:03:86:f8:bb:ab:fc:43:41:c7:c8:6e:1d:fd:
aa:ac:64:8a:58:fb:65:9c:ee:d5:93:4b:3c:eb:af:
2e:b2:cf:c4:4a:28:9f:07:35:d8:8e:68:1a:a5:eb:
c0:00:28:22:d7:33:bb:40:d7:b9:99:01:de:ae:ba:
37:b5:fe:17:63:00:55:00:f3:8b:a3:21:b6:97:f9:
0b:dd:2f:a6:1f:85:d4:0a:3f:9a:ad:6d:40:99:e9:
67:77:c8:5a:ea:3c:3c:5d:58:b5:3b:7a:67:78:2d:
d0:24:e5:07:3a:ac:29:f8:2a:f1:14:49:9b:20:7b:
5e:e7:13:4b:20:b8:e3:47:04:07:fb:7a:7e:4f:b1:
b7:aa:ca:2d:cd:ba:63:e3:57:e4:82:2a:dd:49:54:
d6:fe:c0:cf:a5:51:c8:a0:4a:a9:6b:dc:39:0c:b3:
dc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C5:9A:1B:40:08:02:39:02:A9:B5:C9:D7:AE:5F:95:24:26:D7:98
X509v3 Authority Key Identifier:
keyid:67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:34:fc:6c:a4:ab:49:b5:32:48:98:b5:80:93:87:e2:ed:4f:
5c:d7:0e:77:ae:31:2b:4e:8b:8e:93:17:42:46:f9:96:08:56:
13:f0:5c:64:c1:e6:ee:30:1f:52:10:e4:d9:54:39:bc:de:a1:
e4:3c:6a:21:67:a4:30:c1:36:eb:b9:b3:9e:89:aa:23:8a:e2:
db:26:c5:3a:ec:19:ba:ca:cb:cb:89:7d:b8:65:5d:5e:f1:5d:
39:a9:e3:8f:d4:56:e8:c8:2a:d8:57:7c:4d:29:7c:bc:12:d5:
9e:e7:37:9a:ef:2c:84:36:7a:dc:2d:54:d8:a8:60:67:11:0e:
ce:6b:83:a5:ad:02:3d:f8:2d:ca:1e:3b:bb:60:2e:75:de:91:
11:43:d7:5d:1c:6c:38:3d:96:a1:30:c3:ad:79:55:47:90:1d:
95:5f:08:ee:a8:42:c2:31:38:8c:09:81:3c:05:52:d9:d4:e5:
69:9b:5f:8c:13:7c:af:ec:2a:da:83:76:01:f5:65:bd:24:eb:
02:6c:09:c8:f4:9f:4b:ac:f6:d5:21:91:4f:26:a1:82:b2:dc:
04:54:34:6b:08:08:1c:a4:f8:2d:74:84:c2:50:c0:9b:09:1f:
b3:a2:2e:9c:46:14:3e:44:87:c2:22:e3:7e:b0:ad:b1:6e:66:
ca:bd:b7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:28 2025 by rpki-client