Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File: z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier: xnuCZOjb2mQVY9JUd8T3ySZdTTqXwBIRJdsp/WCjCoI=
Subject key identifier: D1:5E:0F:68:63:9D:66:DB:81:5D:AE:D8:9B:AB:4B:9A:58:B0:7A:95
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial: 01976D7437D3AB7E1D0DE0DC5B27C206EDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number: 1123
Signing time: Sat 14 Jun 2025 08:00:22 +0000
Manifest this update: Sat 14 Jun 2025 08:00:22 +0000
Manifest next update: Sun 15 Jun 2025 08:00:22 +0000
Files and hashes: 1: 4LDf3BAWYj8mO4n0cpZaSTYNCgQ.roa (hash: 2PsEN5j0ePjCMadYZW/XY72E9eg7u91QL60wRji2nxY=)
2: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: kwKu8bGqTVpJHVvzNk2bhpk3pJ6HuOcfzXHwJQfqmKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:37:d3:ab:7e:1d:0d:e0:dc:5b:27:c2:06:ed:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Validity
Not Before: Jun 14 08:00:22 2025 GMT
Not After : Jun 15 08:00:22 2025 GMT
Subject: CN=d15e0f68639d66db815daed89bab4b9a58b07a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:71:2b:3f:70:52:d1:1f:1d:31:cf:92:66:
18:82:e8:b3:33:02:30:f8:3c:63:3a:df:54:90:a0:
2e:44:bc:b5:fe:89:3d:16:76:a4:55:98:ae:02:26:
d3:d2:d8:5a:f7:2a:fb:e6:57:14:49:cc:76:90:51:
cb:fc:4f:56:f6:94:f5:d6:0a:ec:dc:36:db:b2:5f:
23:20:6f:fc:31:ab:7d:5e:ab:46:75:3d:7c:ea:1c:
d0:75:e0:91:90:30:2a:7c:ad:7a:dd:76:cb:58:e6:
f9:ab:e0:c7:fa:75:75:38:00:04:d8:f5:7e:d9:e0:
2d:1f:d1:4b:8f:73:26:59:1c:2f:f4:71:f4:8c:4d:
7f:cc:e5:6f:77:f0:78:50:b6:38:a3:a7:0a:49:df:
c3:a6:0c:94:78:4f:07:2d:64:2c:89:bc:1a:db:37:
5a:00:55:ca:78:83:76:e0:c1:2e:f4:10:60:47:7c:
92:3f:db:ea:b6:cb:cf:3e:02:7f:32:2b:c8:54:32:
fd:b3:b2:8c:9c:82:d7:35:6a:74:ef:b1:0e:bf:c5:
cd:8e:95:89:80:6e:9a:7c:a3:f5:f4:e3:45:21:8c:
26:c8:47:37:db:14:a6:4d:e8:4a:90:56:af:d7:b7:
11:b1:44:60:1b:23:66:dd:00:5e:8d:9b:3f:a7:57:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5E:0F:68:63:9D:66:DB:81:5D:AE:D8:9B:AB:4B:9A:58:B0:7A:95
X509v3 Authority Key Identifier:
keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e5:7e:b8:e4:aa:d7:44:62:da:72:00:df:40:e4:58:8a:3f:
bf:e9:0a:6f:7a:02:53:5f:24:0c:34:69:66:ac:f0:b1:bf:69:
6a:92:e1:38:40:93:bf:9f:06:ce:ea:1a:7e:76:0c:8f:66:b8:
50:4d:0e:6d:69:2b:62:82:bf:4b:28:93:10:af:7d:f9:35:90:
07:bf:4e:21:22:60:e2:08:4b:dc:bc:c6:c5:bb:aa:58:81:fc:
1f:72:27:cc:1f:de:e0:6b:59:11:77:8c:38:5e:e0:ef:64:a5:
64:fc:34:89:e3:e3:ce:e7:ca:94:88:06:d4:16:c7:a4:c9:d5:
c7:36:60:16:a9:a0:92:72:29:c9:de:0a:6a:e1:d3:b3:8e:67:
8f:e9:23:c1:d6:3c:16:c9:7b:be:3d:99:16:91:74:2f:9b:82:
25:62:5b:6f:83:5e:a9:1f:c3:6c:9f:26:9b:00:07:b5:19:05:
73:9a:8f:64:55:38:08:22:c8:6d:43:cb:92:fd:7d:d3:3c:a4:
68:ff:42:79:33:2a:59:94:47:b1:36:47:6f:cb:ee:16:96:14:
d9:4f:f1:28:aa:ca:07:65:fb:ce:cf:49:37:25:33:8d:fe:c1:
01:39:d5:21:1c:02:97:67:85:3f:11:ab:9a:e4:71:37:bf:1c:
c1:a2:87:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:36 2025 by rpki-client