Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier: n5XRv8Fkz8wFX5NBQPnh17hvvIEuoAT3eTaLNwSl5yA=
Subject key identifier: 17:C6:53:37:BD:18:BA:22:44:AC:0E:23:ED:D4:3E:D7:1B:69:55:02
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 01974B8D7957F3CD473D166D29447A54E606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 18:00:52 +0000
Manifest this update: Sat 07 Jun 2025 18:00:52 +0000
Manifest next update: Sun 08 Jun 2025 18:00:52 +0000
Files and hashes: 1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: a7sDTOmXbOgplBILFKZ3XMAXcpaG1EY/PMlWrpAzeTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:79:57:f3:cd:47:3d:16:6d:29:44:7a:54:e6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Jun 7 18:00:52 2025 GMT
Not After : Jun 8 18:00:52 2025 GMT
Subject: CN=17c65337bd18ba2244ac0e23edd43ed71b695502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:e1:90:40:d3:a1:7d:7c:c7:41:57:cf:cd:
8b:db:a2:ab:98:08:0f:23:51:c7:3e:ec:dd:bd:14:
27:52:6d:42:12:13:9f:40:4e:3e:9b:a9:03:92:d5:
f9:32:a9:95:65:2a:2a:52:86:3e:f3:6f:e0:c6:60:
00:8f:d6:81:96:23:36:82:d2:19:fa:c9:c3:dd:e4:
28:62:a6:1f:f2:88:5b:b5:40:6c:2b:3a:cc:28:ed:
a7:06:cf:1d:03:b9:0e:92:b5:96:10:d6:29:a7:9e:
d3:81:b7:42:13:ee:43:d0:62:1d:89:c1:40:b2:83:
2a:8f:ab:89:55:14:a0:0a:ce:3d:a0:f4:6f:b9:41:
dc:80:5e:1c:3c:e1:a3:86:73:00:a9:36:19:b6:c9:
70:99:73:aa:6a:0c:dd:29:20:47:90:2d:77:47:cb:
03:ec:b7:da:17:bb:30:05:3d:f7:f5:c9:61:4d:d6:
73:42:1a:89:2d:69:72:a9:c0:23:9e:79:2b:29:33:
73:f5:6b:f5:54:b4:74:30:14:cd:f1:ce:3a:e7:d6:
92:34:a6:fe:b1:26:92:05:08:f3:6e:ec:fa:7d:4e:
a9:7a:13:2c:9e:44:7e:3e:28:6a:7d:87:4e:94:b7:
cb:e4:9d:a9:5c:37:c7:4e:0f:b4:37:f1:50:5a:41:
ad:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C6:53:37:BD:18:BA:22:44:AC:0E:23:ED:D4:3E:D7:1B:69:55:02
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:98:a3:47:0a:cf:5e:c6:fd:39:2a:22:5d:f3:1c:5a:e7:37:
a8:cf:4f:a4:ce:75:51:1c:94:7e:d7:7b:ef:23:e8:c0:c5:8d:
0b:63:e5:d8:78:f8:fb:f8:0f:dd:85:65:01:54:dd:70:0f:9e:
a9:b9:db:1d:09:b1:25:1c:9e:6d:29:37:64:5e:f5:89:62:ff:
80:6f:2e:35:72:b3:80:60:44:07:80:0d:97:f3:99:b5:fd:2d:
f9:76:d6:f3:d4:0f:8f:23:8d:2c:0d:b4:8f:43:0b:1e:8b:65:
89:db:da:20:73:0d:bd:37:a6:98:6a:90:5d:00:9b:31:5b:f7:
71:69:78:4c:db:26:da:d0:a9:38:a0:54:ed:92:b0:03:92:83:
28:96:76:8a:6f:61:78:2b:46:1c:cc:6b:be:4f:5d:ae:04:ad:
d5:52:09:0c:0e:ad:42:c7:9b:5a:15:a8:6a:40:78:60:61:e0:
4a:0e:f5:a2:ca:cc:f5:1a:1c:ed:d4:06:c5:86:f6:0d:38:8a:
ee:a9:13:20:db:6e:e8:f5:53:aa:77:3a:63:91:29:65:3f:59:
f3:46:f7:a9:d6:00:92:1b:a0:92:a8:d6:81:e8:04:2c:c8:2b:
50:63:19:dc:05:d3:ed:b0:71:3c:ec:24:05:02:98:07:f7:cc:
39:bb:21:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:55:56 2025 by rpki-client