Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
File: Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft (raw, json)
Hash identifier: 8r/OaeoXCajZCDiBI/AT8Q8YHZ+blvhdbO7UaD9DFcI=
Subject key identifier: E4:1A:CB:93:00:DD:7E:3E:C8:23:65:35:71:C7:A6:B5:18:42:C2:23
Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
Certificate issuer: /CN=473f498592457859f26fb5a610b7b51ef52413f3
Certificate serial: 01975CEF0957E6B034EB8C0AAF1124EA6835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
Manifest number: 06FA
Signing time: Wed 11 Jun 2025 03:00:58 +0000
Manifest this update: Wed 11 Jun 2025 03:00:58 +0000
Manifest next update: Thu 12 Jun 2025 03:00:58 +0000
Files and hashes: 1: Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl (hash: yO20j94pVXR2lX48N6CtkhWt0x/ooMV1jy3nIm7N5cY=)
2: gACLFbYoQuKSwULuZch33ylGIws.roa (hash: Y3WJDNbjsbnqFHsgE1qqfoHZxL80KWaLyz825fwkstQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:ef:09:57:e6:b0:34:eb:8c:0a:af:11:24:ea:68:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3
Validity
Not Before: Jun 11 03:00:58 2025 GMT
Not After : Jun 12 03:00:58 2025 GMT
Subject: CN=e41acb9300dd7e3ec823653571c7a6b51842c223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:c5:6b:da:ea:06:6d:6d:dd:a7:44:25:92:
fb:61:39:a9:b0:e9:ac:40:5e:c1:42:98:7e:15:7d:
2d:e3:30:86:14:d3:6b:2d:30:bc:6f:dc:f3:b3:dc:
2e:7a:e2:ec:6e:55:36:33:5d:a8:51:a2:50:01:aa:
56:06:96:17:4e:10:17:04:3c:49:1d:9c:e4:3c:d3:
32:04:b1:7e:e5:86:fc:7a:d6:ce:56:39:9c:9a:1b:
ce:3c:eb:33:a2:2a:a5:3a:d3:c5:ac:16:fc:db:a7:
ed:9e:0e:bd:7d:26:7d:e0:85:35:dc:7d:ef:76:80:
e7:5b:35:e3:35:db:75:85:c6:71:7f:a0:60:bb:0d:
f3:67:f2:80:05:d8:53:82:b1:5c:8b:ef:2e:97:6b:
a8:19:a4:28:35:2b:a8:7e:ec:12:86:ea:60:47:d9:
ec:1c:3e:1c:af:e7:a8:37:be:cb:7a:04:fc:14:35:
6e:db:6d:7c:a1:c1:6a:b0:5e:98:8c:ea:51:bd:f9:
af:a6:0e:32:69:65:c7:0d:4a:87:b9:f1:ea:7f:10:
be:89:56:85:c6:00:90:d8:dd:76:ae:ae:02:ae:ac:
82:27:9f:cb:57:92:76:b3:9d:5b:c0:af:01:64:4f:
1d:f2:e3:71:14:e6:b7:ee:23:b6:00:05:0a:c4:48:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1A:CB:93:00:DD:7E:3E:C8:23:65:35:71:C7:A6:B5:18:42:C2:23
X509v3 Authority Key Identifier:
keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:04:f1:5e:f8:ea:b9:06:3d:11:ff:78:90:44:89:f2:f7:53:
9a:13:eb:fa:1f:3d:c3:e1:9c:e0:59:df:7b:71:43:55:dd:8e:
55:f2:63:40:33:c4:2b:32:a4:c3:0b:c2:8b:58:2c:f5:66:18:
6d:9d:3e:bf:52:ec:be:63:6e:2d:73:ef:5e:eb:40:02:16:98:
86:30:1d:39:3f:74:92:09:2f:17:d7:1d:f0:a6:f8:10:26:bb:
ae:25:fe:80:65:58:a4:44:2a:1a:cd:7b:b9:6f:d6:a3:8f:77:
65:28:85:a9:05:40:9d:31:79:9e:f6:7a:6c:33:00:90:65:64:
10:00:9e:08:8a:19:02:e0:bc:2b:33:ed:52:e7:f2:d0:41:1f:
0e:81:41:3f:45:14:a9:34:12:64:ae:82:cd:87:c5:27:2a:2f:
b6:97:38:02:68:0b:ec:44:25:1d:98:ba:c3:e2:a7:b3:42:ee:
88:f7:ac:35:a9:3a:a9:49:3f:b5:bb:31:b4:24:57:01:11:5e:
0c:dd:40:3f:a0:66:a3:eb:3a:67:53:aa:01:5a:f4:b2:bd:7e:
5c:5d:de:3a:f4:0b:b7:2e:c9:a0:e5:de:51:19:14:09:e9:53:
70:25:40:73:38:16:04:f8:be:6c:69:73:ce:41:84:8c:69:ec:
c1:14:93:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:11:12 2025 by rpki-client