Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier: 1KXSydRoZHimoHCBFlHVIhIibf5Y2Y9CDB6Derct9SI=
Subject key identifier: E7:43:41:50:19:3E:5C:29:FD:95:00:D2:41:34:AB:A1:B5:11:8A:9C
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 01974D0E18B32E564D61D6DEEECD9C33262B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number: 036C
Signing time: Sun 08 Jun 2025 01:00:58 +0000
Manifest this update: Sun 08 Jun 2025 01:00:58 +0000
Manifest next update: Mon 09 Jun 2025 01:00:58 +0000
Files and hashes: 1: ks8iWy1FilD9kiiIcgz0a9tcMkE.roa (hash: xbOsfKBCXele8prh5n/9hZCYsk36tRLAfw19ggRv57E=)
2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: RBOVpnk5hEeFszjAYI+1qrfwGKNRxbXQFtH1/U1C1L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:18:b3:2e:56:4d:61:d6:de:ee:cd:9c:33:26:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: Jun 8 01:00:58 2025 GMT
Not After : Jun 9 01:00:58 2025 GMT
Subject: CN=e7434150193e5c29fd9500d24134aba1b5118a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:67:b1:ce:69:15:db:60:1d:b4:6a:64:6f:93:
78:e9:2d:59:de:ae:ea:30:7b:6e:9c:e5:1a:fd:62:
f7:74:98:88:5d:ce:55:8c:13:e7:59:b7:7d:eb:03:
2b:0c:6a:22:3b:fa:a2:e5:b2:ec:5f:6f:cf:a3:08:
1c:42:18:4b:9f:29:8b:ed:a2:a7:5e:f0:98:69:9e:
2a:c1:5d:2d:25:e3:4f:fa:be:0d:b2:c9:f4:0e:17:
2f:7a:b9:e0:81:6e:8d:9f:72:3b:e2:c5:97:38:61:
cf:10:4d:8d:bc:de:e7:fa:80:ee:78:28:22:9c:89:
38:db:96:d9:1f:e2:3d:92:36:a7:f2:4f:c2:b9:7d:
3e:78:03:a9:d9:bb:4d:91:3f:d3:a0:0a:a2:b0:6c:
97:08:e4:dd:67:01:d0:cd:12:4d:8c:ac:f8:32:1c:
bf:16:c3:ef:a4:b5:7d:65:b6:b6:51:a7:de:92:48:
f8:fc:5c:3c:2a:ba:61:43:7a:fb:95:71:66:8c:b1:
93:c9:17:69:2d:97:7d:22:b3:73:27:ad:f8:ac:39:
2d:e7:ef:d6:85:93:f2:42:d0:8f:7d:08:c8:88:ec:
f5:af:59:b3:2a:d8:38:b6:86:5c:17:9e:65:95:a0:
b7:0b:40:46:0f:f6:b3:02:bf:18:27:3b:5e:d1:a3:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:43:41:50:19:3E:5C:29:FD:95:00:D2:41:34:AB:A1:B5:11:8A:9C
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:03:d9:9a:aa:87:ac:84:a1:07:dc:e1:50:07:2e:43:bb:db:
12:e6:32:02:84:24:7a:f7:c3:ca:1b:0d:46:ff:9c:d4:0e:64:
70:62:d1:41:3d:61:0a:a1:76:51:64:05:49:a8:48:93:38:cf:
c4:5a:99:50:ac:84:e1:3c:59:fe:ed:98:dd:7f:7d:21:7a:13:
6b:bc:45:f4:49:a7:d8:3e:5d:57:8b:9d:ce:94:15:40:35:5e:
86:51:cb:84:a8:d2:1f:5c:84:50:3f:71:9c:45:e1:b7:ec:63:
f9:c6:95:95:22:4a:0a:4c:59:68:b0:6e:38:62:57:ac:96:0a:
c9:d0:82:53:de:13:f1:7a:a9:06:13:36:08:18:b7:ec:75:f1:
02:64:b0:89:e0:db:63:6f:52:3c:d2:58:4c:f2:0d:67:08:93:
ea:8e:c9:d4:22:18:6b:26:0e:99:2c:cc:d1:cc:47:ad:7a:39:
6f:ef:94:b4:cc:3b:5b:f1:35:b8:e2:0a:0c:b0:f3:95:12:14:
df:3b:13:46:ac:95:84:0e:a4:e4:1d:0a:c0:68:05:fc:aa:fd:
4a:25:80:6f:87:be:8c:e3:09:cb:70:45:f2:de:cb:89:96:16:
24:4e:c7:b1:0d:4d:31:90:8f:10:57:9f:c6:70:ec:fc:3a:da:
eb:72:a5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:50:55 2025 by rpki-client