Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: HzIXIuLYEv0N7L62tBEq/jgTrXsevS4xz9HdBf3FWFs=
Subject key identifier: 92:34:AE:80:74:66:43:8D:D0:91:7C:CC:23:19:89:9D:A5:B3:B5:4E
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 01974AE8C2990B317111201FAEAB24E7EEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 15:00:57 +0000
Manifest this update: Sat 07 Jun 2025 15:00:57 +0000
Manifest next update: Sun 08 Jun 2025 15:00:57 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: fiQPjMXDjxlNiQjnBszngHXaZfteWDL8l+MNAZP37xU=)
2: Tpjw3Nc3KI-z5sFPTugglehoVro.roa (hash: hQVvNBqIbdUFIzp+3WsVNIaxhLKQfbJlxs6hdH4n1Uk=)
3: diSC8nPgEABB-CJx_ksMgSsNles.roa (hash: P6nuoJWWHEaEC3HR83/5oy/90/lUhtiTHhAwuDUVMMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:c2:99:0b:31:71:11:20:1f:ae:ab:24:e7:ee:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Jun 7 15:00:57 2025 GMT
Not After : Jun 8 15:00:57 2025 GMT
Subject: CN=9234ae807466438dd0917ccc2319899da5b3b54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:d5:8e:b4:e6:b7:92:08:32:1e:98:f6:e0:
09:d5:28:62:4b:e9:e6:96:88:ec:1a:77:0c:50:04:
e3:6a:f9:38:00:a2:36:78:ec:d2:e1:d2:e9:3e:fa:
d0:d0:6a:6d:5a:f2:06:0a:ed:56:23:e9:08:ff:69:
85:ce:03:28:4f:4d:94:d8:1b:21:63:25:a0:da:09:
43:f4:06:d1:14:14:94:c4:05:a4:a1:9b:e3:49:74:
f9:c0:52:82:33:08:c4:cb:ac:84:fa:80:ba:a5:56:
51:bc:17:25:d9:48:37:cc:7b:0c:09:4d:28:fa:27:
d9:f6:fc:72:da:88:d1:c8:70:ac:6b:dc:22:a7:fc:
90:16:90:cc:6b:d3:ec:f2:79:cf:27:f3:e1:18:33:
e8:98:a2:fe:5c:99:04:4a:a9:07:32:c6:12:23:9a:
6f:df:e9:6b:36:e2:f1:39:39:e9:7a:55:83:fd:3c:
92:2f:46:35:9c:9e:9f:66:02:91:74:fd:f2:66:8c:
18:85:39:c5:46:da:43:a7:66:68:77:c3:70:b3:60:
e5:6c:1d:de:3d:a7:48:0b:73:75:a8:e8:23:f5:53:
40:02:28:86:bc:b8:af:3a:a4:17:e5:82:79:34:81:
7b:dd:dc:07:c9:64:c7:c8:ad:a8:05:34:14:0e:03:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:34:AE:80:74:66:43:8D:D0:91:7C:CC:23:19:89:9D:A5:B3:B5:4E
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1e:a8:6b:37:54:0f:f2:ce:6a:c5:c0:0e:d8:54:3d:9b:3a:
68:82:9f:ab:7a:fe:fc:6d:13:4c:f8:48:64:77:83:dd:d6:bb:
f1:37:77:55:3a:53:4c:f0:e9:57:21:70:4c:a5:e6:e7:88:2c:
f4:ed:ad:b9:03:b7:33:11:c9:2b:dc:ed:c9:af:e5:a8:7f:ec:
d7:43:2e:0e:b5:3f:3b:0a:d1:1d:ae:d7:d5:b3:f2:b1:ba:19:
68:a8:de:f9:96:f6:63:f6:96:59:65:f8:ee:c6:d7:6e:0a:42:
40:a0:af:68:c9:4f:23:ce:fc:10:b3:01:46:6d:29:c9:7b:6a:
3e:f8:d8:98:08:d3:15:11:20:6c:6c:4a:a9:92:44:47:ba:9f:
d4:ee:4d:e0:cb:6c:63:58:a4:d9:c9:e8:66:f6:80:79:35:d4:
c4:7d:64:9f:ec:94:7e:ac:78:b7:00:c8:66:76:d1:3e:38:50:
a8:1e:f0:27:01:c6:29:07:ff:26:f5:80:70:72:ad:69:9d:90:
c5:d6:87:ab:c0:12:02:11:2a:6e:18:87:6f:46:ea:13:1d:1d:
2d:3d:2d:73:56:60:e4:11:06:4e:49:90:2a:b7:e6:4e:5b:25:
78:e2:81:89:ad:bb:14:58:79:bf:d6:3c:fc:53:41:ed:b9:b4:
cb:98:18:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:36:39 2025 by rpki-client