Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File: z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier: taAyBmu4qpPowiiRm+cB7CMcczSdQ6rqbUhDFeIPDhg=
Subject key identifier: 94:DC:0C:48:A9:88:12:E5:AC:89:29:F0:68:56:A9:01:55:2D:61:F1
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial: 01975459A29DB835110AA60D92D45088C75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number: 1116
Signing time: Mon 09 Jun 2025 11:00:49 +0000
Manifest this update: Mon 09 Jun 2025 11:00:49 +0000
Manifest next update: Tue 10 Jun 2025 11:00:49 +0000
Files and hashes: 1: 4LDf3BAWYj8mO4n0cpZaSTYNCgQ.roa (hash: 2PsEN5j0ePjCMadYZW/XY72E9eg7u91QL60wRji2nxY=)
2: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: HQN3jIk7FU1xYIAnTl9MoTaafx3JDWeAyrI8Z/K1HZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:a2:9d:b8:35:11:0a:a6:0d:92:d4:50:88:c7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Validity
Not Before: Jun 9 11:00:49 2025 GMT
Not After : Jun 10 11:00:49 2025 GMT
Subject: CN=94dc0c48a98812e5ac8929f06856a901552d61f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:97:a7:55:ce:b2:96:98:6e:67:bd:be:53:
8d:15:7e:57:a4:cc:c4:b0:87:dd:63:71:7e:ed:c3:
79:4d:37:c7:11:33:0a:fd:0d:f5:f7:3b:9b:5e:2b:
88:89:ee:b0:f0:54:64:69:67:1b:1b:ca:ad:53:59:
12:de:c4:68:f7:f1:43:50:22:5d:b9:41:15:aa:16:
48:a1:f0:77:34:eb:44:49:13:5c:c8:13:71:cb:1a:
1c:04:da:bf:94:fa:64:1d:28:ae:fe:86:83:18:d5:
ee:7a:d9:b6:e9:3c:42:a7:d6:18:a2:d5:7a:a1:4c:
33:96:f4:27:45:85:19:d2:80:1f:fd:cd:be:83:21:
cb:e7:27:74:ba:46:eb:b3:d9:89:3e:e9:6d:f9:a6:
44:f8:b6:4f:94:10:f3:10:b6:65:62:f2:5b:3d:2b:
de:5d:98:ea:51:72:5f:81:b0:29:67:bf:9d:4a:79:
31:cf:4c:10:ec:c7:7f:3b:d2:87:e1:ef:68:2a:05:
9e:5b:22:9f:b7:19:73:35:6f:3b:90:bd:6a:30:b8:
bd:bc:89:3f:c2:9c:cb:f2:17:b8:ff:95:88:be:89:
39:88:8d:2b:ad:ce:e4:92:d1:64:a8:a0:ab:f8:b8:
f6:32:7a:ef:4a:9b:4b:31:da:9f:11:9f:f2:42:64:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DC:0C:48:A9:88:12:E5:AC:89:29:F0:68:56:A9:01:55:2D:61:F1
X509v3 Authority Key Identifier:
keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a6:8e:82:89:0a:e0:29:4e:4e:63:c9:9a:e0:02:4e:6c:1f:
43:55:e4:5c:9b:ac:07:f3:3c:80:6e:5a:67:a9:4d:61:0f:9b:
3c:a6:6d:37:da:63:d8:be:bf:06:82:5e:78:b9:43:fe:06:fa:
54:83:41:0a:45:49:5c:0a:15:b9:16:85:79:d3:d4:95:c0:0b:
54:8e:e1:d4:b1:ec:ad:9d:f2:26:79:f0:1a:ea:b9:30:a1:74:
29:b2:e5:86:97:1c:61:5b:db:57:ee:00:2d:78:61:90:12:b2:
f5:2b:1f:40:bf:b9:13:9c:ff:ce:d5:86:f2:90:88:3d:36:0d:
30:f1:85:f9:c2:7a:65:c6:7c:61:b2:b5:cf:ae:4e:96:a8:3b:
a5:03:12:3f:87:2f:e7:b0:41:59:ff:d0:2d:9e:d7:5f:3c:9c:
71:b9:9a:18:20:da:60:59:42:13:c3:0b:81:0d:d9:4d:54:7b:
a9:82:ce:db:ea:d6:37:ff:67:a1:02:ef:e6:72:be:fa:33:be:
d0:1c:1a:6d:e3:b0:28:11:58:6d:cf:74:73:b6:83:70:86:ec:
3b:ea:e2:0c:94:23:13:79:31:2f:47:2d:5d:5a:72:ba:3e:8e:
c7:00:61:d2:5c:1d:fd:15:24:06:e2:72:fd:91:c2:ab:11:e4:
28:98:f4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:13:49 2025 by rpki-client