Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
File: zQzH_YiYsPffS53wuZMZvLKewkM.mft (raw, json)
Hash identifier: avYM+gU5aFQeDqbFp+w8LkhH+PMWIbFYFFDPRtSlR+c=
Subject key identifier: 43:8C:BE:74:A3:C3:13:B6:A6:C8:DA:6A:61:A3:7B:2A:F9:39:78:87
Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
Certificate issuer: /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Certificate serial: 019747B11DC99E19FD57CA45DF9471A5E132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 00:01:19 +0000
Manifest this update: Sat 07 Jun 2025 00:01:19 +0000
Manifest next update: Sun 08 Jun 2025 00:01:19 +0000
Files and hashes: 1: Wkz81xMUDLClFehnNcO08jklh9k.roa (hash: BKlpXBQEP/op0lp2TcMqqMdmqdUhy61w00wNP+uB+Zw=)
2: zQzH_YiYsPffS53wuZMZvLKewkM.crl (hash: jilFaUmk8ZOcwU80zpOHzCNhquGplMJxEdyipjQFBzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:1d:c9:9e:19:fd:57:ca:45:df:94:71:a5:e1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Validity
Not Before: Jun 7 00:01:19 2025 GMT
Not After : Jun 8 00:01:19 2025 GMT
Subject: CN=438cbe74a3c313b6a6c8da6a61a37b2af9397887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:96:0b:54:8a:03:9e:9a:5f:41:4c:e2:81:
6a:4d:00:57:24:e4:5e:4d:68:15:1b:a3:2c:c4:34:
b1:84:2b:d4:24:6f:64:0c:86:d0:77:f1:2d:09:ea:
fb:2c:08:7a:19:e8:59:ca:a7:23:8a:6d:da:c4:29:
c7:39:57:05:ac:ff:e5:57:05:05:83:76:37:ba:40:
62:46:d0:32:66:87:86:d2:0e:29:11:48:a1:1b:b1:
93:e4:ad:e2:00:19:ff:c5:1b:93:e1:51:06:c1:5e:
ff:55:a9:17:c9:64:e0:ca:46:02:94:df:65:f5:a4:
db:39:dc:c7:47:07:83:18:26:43:ac:4b:61:f2:7c:
2e:f9:be:69:ff:6b:a6:ee:6f:d1:2c:88:44:6f:cc:
5c:94:6d:fd:ba:09:63:2e:dd:1a:87:5a:71:05:47:
2f:c4:4d:c2:2f:bd:27:80:78:3f:45:b7:0e:c3:b8:
10:7e:92:8f:e2:4d:b6:59:51:51:c8:b6:85:34:f6:
7b:6d:bf:aa:cd:34:2b:2b:49:8f:68:92:9b:f5:af:
9e:df:2c:03:84:51:07:74:83:43:cd:a2:db:ff:ba:
1d:c4:09:93:2d:af:7c:72:bd:e4:2e:19:c8:b4:9d:
18:86:b4:75:8e:26:53:93:4b:b5:13:dd:6c:e3:fb:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8C:BE:74:A3:C3:13:B6:A6:C8:DA:6A:61:A3:7B:2A:F9:39:78:87
X509v3 Authority Key Identifier:
keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:bc:d0:1e:6b:71:84:9a:c8:a7:d6:a6:a5:8d:6e:76:5b:17:
8e:c5:2e:42:a3:ff:50:7d:88:d3:eb:41:20:67:c0:c7:d1:b9:
44:49:76:8b:82:3b:8a:95:0a:f7:0c:3e:48:7e:a0:2e:82:f1:
04:41:4e:bd:28:ca:a8:70:51:60:44:0d:e9:a3:f2:0d:f2:ec:
7d:ea:a2:4f:33:fb:f0:1e:3b:a2:ce:df:8b:e4:6d:57:70:8f:
5d:c4:c4:d8:57:b3:26:2d:19:21:48:4c:2e:7f:fe:9f:b1:1d:
3f:1d:d0:50:c8:a4:e3:93:22:c2:9d:33:59:f6:d8:53:8d:36:
33:3c:ba:3b:77:04:94:b4:64:37:a9:b8:c5:63:22:72:f4:f3:
4a:f9:57:d3:b6:f9:fb:87:9f:23:20:75:72:64:65:4f:4a:d5:
a9:81:5c:5e:31:ed:48:33:41:e8:ae:de:3c:9b:c4:1c:2c:9e:
0d:fb:a5:cd:c8:4c:8a:7f:62:fd:c9:41:c9:b8:8e:82:2d:ba:
54:8b:3d:ba:e4:e2:43:49:57:fe:cf:e7:c1:bc:bc:af:1e:59:
86:f6:35:19:10:a7:27:0c:57:5f:74:2d:f8:a9:b4:cc:cb:b9:
45:ae:39:8e:33:c8:05:f0:0f:ea:78:7c:c5:29:03:8c:01:1e:
5b:07:89:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:50 2025 by rpki-client