Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
File: zfy95jLRBvqtmMLBiVqHfKYBUho.mft (raw, json)
Hash identifier: cA9ZDD/QpEfyAA34R3ByGGuYVsEQOVWINeYLz2zETsA=
Subject key identifier: 03:9C:E3:FF:58:BA:F7:67:45:0A:9A:13:A4:38:FB:91:11:EC:59:E0
Authority key identifier: CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
Certificate issuer: /CN=cdfcbde632d106faad98c2c1895a877ca601521a
Certificate serial: 01974DB273C44BEDE984C5F145C203132F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
Manifest number: 1512
Signing time: Sun 08 Jun 2025 04:00:30 +0000
Manifest this update: Sun 08 Jun 2025 04:00:30 +0000
Manifest next update: Mon 09 Jun 2025 04:00:30 +0000
Files and hashes: 1: 3OCzpqqGOlJ3RRPa9qcY9JxjkUo.roa (hash: InQFvxlV7A4HcZ9T6xcxQF/B13Yg7udCj77rsg046YE=)
2: zfy95jLRBvqtmMLBiVqHfKYBUho.crl (hash: Wz0wyE1oEm6fkuGo4ODw1/tzyiumfGkJtoN1b69Nh68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:73:c4:4b:ed:e9:84:c5:f1:45:c2:03:13:2f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfcbde632d106faad98c2c1895a877ca601521a
Validity
Not Before: Jun 8 04:00:30 2025 GMT
Not After : Jun 9 04:00:30 2025 GMT
Subject: CN=039ce3ff58baf767450a9a13a438fb9111ec59e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:8b:57:e0:7f:0a:ed:c3:72:d9:74:67:50:
b1:94:ce:14:3b:37:74:68:bc:6b:d3:14:62:6a:b4:
b4:88:91:5f:d3:38:f3:af:27:9a:27:d1:84:64:2c:
24:8b:55:a7:9f:27:6d:6b:28:ca:96:57:eb:4e:8a:
45:9a:1b:1f:35:d1:c5:76:a8:83:fa:b6:6c:02:0c:
34:97:7d:08:6a:23:af:89:e3:20:1d:62:cd:9e:ca:
8b:60:70:58:e7:45:51:67:d0:26:1f:03:43:0c:42:
8d:37:58:b5:b8:1e:26:31:46:ae:75:99:be:57:18:
21:b8:45:c6:79:84:14:72:e5:ea:52:59:eb:a7:ee:
e6:23:9d:4e:75:86:9e:50:3c:ad:8e:31:8f:06:c9:
c1:54:a8:d7:55:c0:19:29:5e:1c:48:82:72:62:a2:
c1:47:39:a4:fc:d9:88:53:9f:21:43:28:ed:aa:a4:
ab:cc:1a:b1:fa:7f:8b:09:87:ac:59:2a:95:c2:f4:
ff:62:26:69:3d:cb:8b:7a:49:be:0d:7a:67:05:a6:
cb:9c:00:80:37:6e:71:c6:ec:df:3f:36:a8:fd:08:
39:bb:0d:e1:15:b0:96:85:d8:eb:1a:76:95:e0:b2:
03:00:65:90:63:b1:ca:af:36:71:26:94:a0:dc:89:
a3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9C:E3:FF:58:BA:F7:67:45:0A:9A:13:A4:38:FB:91:11:EC:59:E0
X509v3 Authority Key Identifier:
keyid:CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ef:d1:c6:b5:0b:73:b0:32:8f:2c:1b:57:b4:9c:76:9c:e5:
4c:05:d4:f7:d2:0a:ac:cf:fc:cb:7b:19:72:5b:98:85:31:75:
b5:91:02:e6:d9:4c:e1:69:d3:5a:b6:4e:c0:b8:9b:45:7c:de:
b7:38:22:71:82:bd:3d:20:1e:2b:eb:ae:ac:5b:9b:fd:86:98:
41:3f:e3:3e:f3:d2:65:49:4c:46:91:fb:c6:e9:72:55:cb:ef:
28:78:99:3e:df:32:56:8a:85:a4:14:9d:04:6c:34:70:68:5d:
9f:96:5f:0b:9b:ad:2d:a4:2a:6e:88:f7:8b:86:13:9e:25:1e:
0f:05:a1:98:18:55:d1:fd:bc:e0:f0:53:c9:ef:0e:2b:0b:b7:
bd:1a:b6:bf:0f:d5:b4:86:22:65:c1:e6:05:03:9c:6f:70:9a:
57:7f:6d:e2:55:b8:89:00:f1:9d:19:71:95:fe:f6:b5:94:79:
5c:a6:f6:82:69:b5:53:ac:b6:7c:4c:ea:ec:37:39:d2:06:b2:
3e:0a:49:ac:83:0a:81:ae:fc:04:75:08:11:ce:4e:a2:eb:3c:
a1:7b:e0:d7:44:2f:16:57:de:e0:32:0f:be:e6:14:b6:f7:27:
8e:c8:1c:66:8b:7a:db:a1:1a:dd:26:62:a5:9e:4d:bc:9b:38:
dd:94:88:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:19:40 2025 by rpki-client