Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: dlJ4PGCWPSbRUT1reXAb43jaPP7HCCwsvZUVzWaCSxk=
Subject key identifier: 2B:C0:6A:2E:0C:AF:6B:FF:4C:71:90:C1:FB:47:2F:51:A0:BA:49:4C
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 019759B68CDEFE6C81408389961A674557C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 12A1
Signing time: Tue 10 Jun 2025 12:00:25 +0000
Manifest this update: Tue 10 Jun 2025 12:00:25 +0000
Manifest next update: Wed 11 Jun 2025 12:00:25 +0000
Files and hashes: 1: S0pNJSWXYYXq-25eb1GwpN3HQK0.roa (hash: m9B8zg7UBpImnvUAy09vDVUi2G4915DaZZi26V5t6xo=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: R62gWniKxQ5HL2X2f2PAtk8rWQexAYQ8ZFECFC37RPo=)
3: bXUvwPEgFNH1kM9-zFhBBlN0jGo.roa (hash: 3Ie6IrqVMtZvkUhbCRibjgIELU/61w4y/T2SSNFuyr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:b6:8c:de:fe:6c:81:40:83:89:96:1a:67:45:57:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Jun 10 12:00:25 2025 GMT
Not After : Jun 11 12:00:25 2025 GMT
Subject: CN=2bc06a2e0caf6bff4c7190c1fb472f51a0ba494c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0a:62:78:c5:2b:82:e7:fb:22:c2:2b:a5:8f:
4d:27:b3:2d:ad:e1:6b:1d:32:3c:93:b0:05:37:50:
8a:db:ab:0a:1f:61:68:d5:11:ab:f1:8c:2f:bf:45:
76:4a:e4:4f:b1:2a:6f:8a:db:7e:dd:e5:c3:1e:65:
9b:12:34:4c:f1:15:40:a1:50:3e:82:e7:1a:10:43:
6c:d7:99:fc:33:0d:a0:73:5d:ba:d5:fe:05:d4:e3:
d9:69:fd:7b:00:85:3f:3f:cf:94:26:99:50:ac:32:
0d:da:a4:a7:19:6a:7b:52:39:85:4e:90:2d:17:6f:
12:72:5a:77:82:ab:e1:76:3e:a0:d2:c9:54:32:4f:
fe:cb:d5:0d:94:47:0d:ee:9f:a9:de:55:1b:ef:84:
36:2f:6c:e2:29:95:da:43:be:8a:57:b9:ad:2d:b9:
ce:61:d5:e4:ba:b7:f0:ab:f9:d5:cc:45:4f:21:6a:
b1:f1:9d:3a:42:90:3b:91:e5:7a:a3:70:7c:39:91:
80:32:53:da:76:e1:09:5f:de:38:f7:71:39:da:30:
52:67:ce:bb:6a:05:85:96:7c:a7:33:16:b5:9d:b8:
5f:c2:04:1f:f7:f2:13:2f:89:c2:36:f3:45:c0:90:
7a:f9:ed:9a:26:71:5e:72:00:66:95:6d:82:12:e6:
d6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C0:6A:2E:0C:AF:6B:FF:4C:71:90:C1:FB:47:2F:51:A0:BA:49:4C
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0c:3e:10:fa:18:04:b7:90:b9:cc:b0:16:25:1b:99:8b:b8:
c4:12:75:5b:7d:3a:9e:a3:8e:14:20:85:64:93:73:62:d9:5f:
51:6c:76:0f:eb:e1:a8:75:4d:a4:72:a5:e6:b2:26:8e:37:2a:
f9:a6:e4:27:8c:99:fb:2d:cb:91:6f:f4:ed:cc:17:91:e4:ab:
40:c4:59:83:8f:3c:c3:0a:6b:fe:1e:b2:6f:69:e3:6a:bc:74:
29:a1:ff:9c:83:6a:6b:6e:a1:d8:e8:d8:de:4d:49:a5:c8:c0:
16:32:ed:27:a4:ed:35:1a:e9:73:4a:8a:a2:ff:85:1c:b5:31:
73:69:36:f7:24:d9:06:99:c6:f6:dc:24:2a:34:0e:f3:35:aa:
b3:59:5f:c0:8b:c9:0a:02:8b:2e:d6:8e:14:e6:8c:92:1e:53:
d9:fd:2c:53:21:bd:04:f0:61:a3:aa:9f:ae:83:4c:6f:5b:07:
54:01:a3:11:17:ce:b3:7e:a4:38:0c:05:5a:c0:ba:5f:c0:fa:
e5:25:ef:ac:2c:e6:f9:cc:d2:46:3f:fd:db:2c:a5:93:3d:5e:
49:c8:03:17:e7:d5:a6:97:1c:67:78:0f:bb:4d:c3:3e:7a:a5:
f2:15:df:45:39:e3:c2:0c:69:be:e2:5c:c4:7e:c2:df:5d:7f:
e6:9f:44:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:13:59 2025 by rpki-client