Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: HRHHwUfWnVHs8wfBoDrTRU5n7oWrc69Dh8mLi3aW3jA=
Subject key identifier: 7E:87:BC:5A:C9:B0:78:D8:D5:5B:BC:26:B2:5A:3E:AE:3C:27:59:08
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 01975121DD7D8C4CFF8B8788123BA937E4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 1594
Signing time: Sun 08 Jun 2025 20:01:03 +0000
Manifest this update: Sun 08 Jun 2025 20:01:03 +0000
Manifest next update: Mon 09 Jun 2025 20:01:03 +0000
Files and hashes: 1: 3CMB0mE1xTb-XY0wsKNGKjk0bFk.roa (hash: lQQ7mzHc9z9XCmBgSmyDJlA6JGPYMp41l5No4NnlwB0=)
2: bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa (hash: 9Cz0tiQS8/nDaglgPuFlELicHHSaEtfkwdT1X8AgbOU=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: h5A3XQl2TNtNDzldAua6qzonKgFP1miRd2LGjLxUyso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:dd:7d:8c:4c:ff:8b:87:88:12:3b:a9:37:e4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Jun 8 20:01:03 2025 GMT
Not After : Jun 9 20:01:03 2025 GMT
Subject: CN=7e87bc5ac9b078d8d55bbc26b25a3eae3c275908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:78:06:9c:86:34:8f:fc:20:9c:86:61:26:
8c:24:a5:a9:38:7b:ef:2b:d2:08:8a:69:9d:3b:3b:
91:7e:52:b7:75:5d:d0:41:d0:49:d3:1b:6c:67:58:
d0:eb:17:9e:8e:df:45:d7:e3:68:d8:00:60:82:19:
dd:d0:d6:97:3e:ea:8d:00:f3:8e:cb:a9:70:5b:ca:
3c:9b:fb:ab:3e:05:25:25:6d:72:83:de:87:9b:16:
97:ec:d4:7b:39:47:0f:d3:0e:a0:d6:44:bf:fb:fd:
a7:a5:79:14:d1:3b:56:52:37:f1:e6:85:18:1f:8a:
c8:66:1d:42:1b:48:9d:5a:42:d1:d8:35:6a:ed:35:
5d:4d:ed:34:1f:b8:59:07:01:89:69:67:10:70:d3:
38:83:ad:b1:53:52:6e:87:78:7d:bf:4f:72:c8:7b:
53:4c:9c:9c:e3:ef:80:e3:06:0d:40:23:16:1c:81:
a9:11:cb:4c:44:eb:4e:fb:8b:7c:2c:3c:a7:3c:8c:
3f:85:bb:f2:0d:97:db:da:da:4f:45:23:fe:26:e1:
03:06:fb:09:bb:93:d1:82:79:54:d1:96:cf:96:75:
d2:13:10:d4:29:04:85:e0:ec:62:10:17:74:27:ce:
83:4a:7e:74:20:8d:b6:bf:01:7d:9c:16:c7:86:f3:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:87:BC:5A:C9:B0:78:D8:D5:5B:BC:26:B2:5A:3E:AE:3C:27:59:08
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:80:61:f1:bb:3f:e4:9b:ee:98:92:b8:b8:d6:b2:8b:ce:21:
5a:9a:c2:3d:2a:7c:c5:e0:90:63:06:f8:a7:af:d0:fe:d7:0b:
40:7e:4d:65:07:58:45:dd:99:66:24:c8:0d:a2:f7:e7:9e:9f:
db:24:7d:55:44:31:e9:08:94:c6:b3:cf:11:31:ba:18:52:a7:
f3:c5:3e:95:04:55:f9:62:07:13:33:9e:d9:e0:75:fd:57:65:
38:c9:5a:0d:96:cc:d3:81:42:ae:6d:91:b7:91:2e:84:d2:5e:
08:d3:09:64:d9:db:1c:c6:fe:26:af:aa:63:df:de:22:7f:18:
ae:33:d3:cb:5c:48:d4:25:29:45:d9:b9:e8:eb:65:8a:85:7a:
ea:f9:df:e1:1c:ae:a3:c1:80:74:10:96:30:c9:b6:44:6a:33:
05:82:4f:3b:08:a7:fd:d2:3b:cf:26:cd:b3:bc:a1:bf:9b:24:
9c:53:85:ca:df:3a:67:f2:2e:f6:4e:75:bc:45:6b:6e:f1:46:
49:37:16:9a:90:97:aa:97:c4:08:34:6d:eb:66:00:db:01:19:
66:56:b3:01:a5:7b:bf:e0:99:01:71:49:d2:6e:82:99:61:61:
00:cc:a5:1f:45:49:ce:a6:40:64:1b:4c:7a:dc:9e:8c:49:af:
83:72:51:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:32:19 2025 by rpki-client