Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: bp7xt7kNrnCdV98/x/N9VTLmYji38nbQ++yA96Vnyx0=
Subject key identifier: 89:54:2F:91:0A:19:63:7D:4A:62:D7:21:0C:19:29:56:1C:21:FC:53
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 01974CD792A935A5BB8816D722783BEE7940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 0485
Signing time: Sun 08 Jun 2025 00:01:25 +0000
Manifest this update: Sun 08 Jun 2025 00:01:25 +0000
Manifest next update: Mon 09 Jun 2025 00:01:25 +0000
Files and hashes: 1: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: aLY9Jm9tnllC88LtJUWNR6e+nsPZSaRONSlzb+EMQyw=)
2: kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa (hash: nZGxHnLNLZrVTyKCjSNF3LxCV+ntfcbITfflKKEl2WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:92:a9:35:a5:bb:88:16:d7:22:78:3b:ee:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Jun 8 00:01:25 2025 GMT
Not After : Jun 9 00:01:25 2025 GMT
Subject: CN=89542f910a19637d4a62d7210c1929561c21fc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:3c:7b:9c:9b:4a:5f:59:54:dc:69:a9:12:
a9:c8:e1:b3:0a:36:0e:50:db:1e:0e:7d:d8:2e:ff:
b2:b5:1a:79:aa:86:11:c1:d8:31:07:58:55:9c:09:
63:20:f3:5a:07:8e:ad:bf:a1:0e:c1:b4:10:78:72:
ed:26:21:34:f2:91:3b:be:28:79:03:69:02:8b:bc:
84:53:bb:34:3b:ba:b6:15:c1:17:cd:11:26:1a:29:
3c:44:4f:56:f6:00:48:8f:8a:f3:35:57:6d:87:8f:
e0:8f:97:db:34:da:8b:3e:72:e9:a7:16:68:2e:83:
7a:ff:f7:ae:a0:06:42:b7:6b:46:0d:9d:7a:08:73:
06:dc:bf:3f:c4:d4:ea:8a:57:e4:88:23:00:bb:28:
e8:ce:ad:9d:93:18:06:0d:51:e6:1c:06:c0:2a:c5:
0b:17:dd:4b:08:c0:5a:d9:d6:ec:7a:8d:8b:98:7f:
a4:45:73:78:71:50:cf:12:c5:33:40:6e:77:f8:67:
e4:f6:49:77:02:e3:e9:58:59:8c:ea:fc:da:93:5d:
eb:4a:13:55:49:51:c2:bf:ae:99:ed:b2:7c:63:85:
87:ad:ee:b3:6b:ba:04:3b:ed:bf:51:ca:89:97:b9:
45:92:2b:f4:ba:da:13:61:24:a4:28:c3:ff:0a:64:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:54:2F:91:0A:19:63:7D:4A:62:D7:21:0C:19:29:56:1C:21:FC:53
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:87:35:28:7a:87:63:3d:a3:8f:1a:68:ab:fa:64:8b:0b:23:
7f:ff:00:89:e8:8a:ea:9f:ee:93:d1:c4:1f:81:ca:bf:3b:73:
0f:90:91:6c:e7:16:ee:d0:ae:04:ef:cf:dd:4d:b8:f0:27:16:
8f:68:1a:80:1d:35:5f:98:6b:99:a7:6d:7d:ef:c2:e4:6e:ae:
a7:a5:61:44:eb:02:32:1e:c1:2d:d2:46:1a:20:df:cb:45:3b:
b0:d9:15:1b:9e:6f:d5:b8:fa:76:8e:b4:ab:0c:46:03:8c:0d:
21:fb:83:8d:47:83:5e:60:c1:36:f5:ae:52:2e:62:c5:4f:d0:
7a:2a:bb:fa:24:f0:86:8a:88:1d:89:ba:05:29:a3:f9:86:4a:
33:74:e5:b8:94:3c:1a:f8:e3:5f:25:e5:0f:03:3c:6f:b5:88:
4c:a1:89:94:58:99:cb:55:e1:f4:74:47:47:b0:dd:0f:1e:dd:
ac:33:ec:33:7b:e6:39:0c:37:7d:6f:56:2c:db:21:69:6b:84:
51:0a:f4:c8:9c:f4:46:42:d8:9a:bd:9a:e2:ee:5e:4a:4d:fc:
5b:e0:09:1d:3a:55:ce:e1:de:49:f2:b2:e4:17:3d:86:88:00:
60:c8:eb:0a:ef:6b:a1:e7:ae:08:cd:20:32:b9:a2:ae:eb:cc:
85:33:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:54:57 2025 by rpki-client