Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: kkLZGJLtyMqIztUyaFZu0TCoFghV7P1rv3BW2Vfii+8=
Subject key identifier: A9:87:21:C4:B5:49:AA:08:5C:AD:28:78:02:EF:B8:43:2A:18:22:7C
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 019761705FEBB5D6BED7F05EAFF8127DD0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 12A5
Signing time: Thu 12 Jun 2025 00:00:43 +0000
Manifest this update: Thu 12 Jun 2025 00:00:43 +0000
Manifest next update: Fri 13 Jun 2025 00:00:43 +0000
Files and hashes: 1: S0pNJSWXYYXq-25eb1GwpN3HQK0.roa (hash: m9B8zg7UBpImnvUAy09vDVUi2G4915DaZZi26V5t6xo=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: gSXf3xPuX7/QefnjpZj0TmnJN9/mJQJT8VuxFywh5Qs=)
3: bXUvwPEgFNH1kM9-zFhBBlN0jGo.roa (hash: 3Ie6IrqVMtZvkUhbCRibjgIELU/61w4y/T2SSNFuyr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:70:5f:eb:b5:d6:be:d7:f0:5e:af:f8:12:7d:d0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Jun 12 00:00:43 2025 GMT
Not After : Jun 13 00:00:43 2025 GMT
Subject: CN=a98721c4b549aa085cad287802efb8432a18227c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:ba:d0:49:bc:24:d1:20:66:cb:68:a1:4f:
a2:0a:81:db:a2:fe:ab:88:8f:d6:26:cd:e6:8b:b0:
a7:27:bd:c8:7b:ad:53:5f:f3:77:d9:41:45:23:5f:
e9:90:fb:87:66:a7:80:f2:ee:11:b5:d5:e9:4c:0d:
d4:e9:6d:a2:90:d1:54:8d:cf:0e:cc:c1:ad:d8:fa:
31:30:d2:ee:37:f7:1c:f3:0c:32:cc:9e:f0:ba:9d:
a2:37:67:3a:02:4d:d9:00:08:5a:ee:4f:c7:64:00:
44:39:a3:a5:74:bd:91:b6:1a:b3:fc:b4:4e:1d:da:
72:35:ba:e7:5c:c4:fa:ab:5f:78:01:7b:b9:5e:8c:
08:d4:17:40:6e:13:08:7f:ff:c7:50:fc:bf:c6:f1:
51:9a:ca:65:4c:45:36:76:8e:41:9f:69:79:94:7f:
1d:5e:1e:34:dd:01:4f:bc:1d:4d:01:49:f9:b8:e3:
e1:ae:df:89:9d:aa:f8:5d:bc:64:9e:95:38:b8:80:
c1:e0:ff:cd:9c:a8:90:af:2e:49:d2:72:d5:45:eb:
5f:c3:28:65:3f:c9:e0:f5:97:8d:e8:4d:98:1a:00:
02:fc:64:2e:13:c9:22:26:c1:ff:b8:89:29:7a:b1:
0c:e2:e1:69:e6:6e:35:15:95:ee:6f:83:e3:27:35:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:87:21:C4:B5:49:AA:08:5C:AD:28:78:02:EF:B8:43:2A:18:22:7C
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1c:51:9d:e3:67:2e:e8:66:d0:16:d1:9c:b7:9b:54:24:df:
23:be:a5:93:86:88:ff:46:81:d7:48:d2:63:30:20:7b:c1:79:
dd:ee:89:51:09:f6:60:8f:62:d7:d5:fd:56:62:8a:94:2b:31:
9a:10:2f:c4:b9:46:a8:c8:0f:45:40:55:28:96:53:22:db:3f:
d4:07:5d:47:1d:c6:11:7a:43:47:7c:11:b8:60:6e:e5:59:bf:
c7:4d:90:c4:fe:db:f1:fd:49:79:32:74:50:c6:e5:d4:83:0c:
63:8a:a3:31:43:29:53:9e:20:81:80:91:b7:bf:ea:50:8f:1f:
85:49:16:e1:ff:b2:fc:73:d2:e7:c4:5b:bc:4e:3f:eb:cd:c4:
96:87:35:c5:d0:3e:70:8f:98:e3:a1:cd:09:e3:b1:61:fc:99:
c2:05:43:f9:d7:41:7a:84:84:c2:c9:eb:15:9d:73:19:6e:47:
6f:fe:0d:d9:9d:e9:f2:9a:6f:57:6d:76:b4:b8:c7:20:56:c8:
d8:44:bd:5f:c8:3e:e4:91:a3:4f:ac:19:f7:b8:dd:79:f9:05:
59:be:3e:0e:65:ba:43:d1:78:41:95:36:85:82:c3:98:94:1f:
78:0e:2a:b7:ba:73:64:4d:f3:d2:78:ee:08:fe:46:85:7a:09:
89:ff:59:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:26:52 2025 by rpki-client