Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
File: z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json)
Hash identifier: 2sbkoYt418+YpOK++Ly7csg5NSnuoKiM1aM5rpy4GT0=
Subject key identifier: FF:FE:05:2A:AB:78:BE:A7:05:47:FD:AF:5C:9E:E2:26:CD:D6:70:BE
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 0197526B65102B20915A72D517F7204D3C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
Manifest number: 1588
Signing time: Mon 09 Jun 2025 02:00:59 +0000
Manifest this update: Mon 09 Jun 2025 02:00:59 +0000
Manifest next update: Tue 10 Jun 2025 02:00:59 +0000
Files and hashes: 1: 3RInciSdJGuSvDB_51KkkZIJFSM.roa (hash: 3/HjzRtzuMbFeOMatgJOwMZQLWYkmzjLRu3ceCOI8Rg=)
2: Vwxuf9tXogbGBPbtetxGHltRAJA.roa (hash: 56fbOe+uRKJW3PaHfR9HfAkpkYQK6n+PS05QT68yj88=)
3: r_bOLpGR44Uxr2yZR3U8n-cd72g.roa (hash: 77U0OrAigBGcas60BhBB6LRX9fbaZ0dNBtqvHrAGNSA=)
4: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: dRQ7bhpBcH6AoDKNLr0h23pbFVW+y1GpRKZrJ3henzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:65:10:2b:20:91:5a:72:d5:17:f7:20:4d:3c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Jun 9 02:00:59 2025 GMT
Not After : Jun 10 02:00:59 2025 GMT
Subject: CN=fffe052aab78bea70547fdaf5c9ee226cdd670be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:fa:ae:2e:9f:3a:6f:2b:e0:9f:0c:b4:0b:
f2:84:5d:75:ab:50:0b:e4:c3:02:f0:27:bd:9b:6d:
17:d1:59:58:a7:77:95:d1:af:ee:3f:e0:48:87:06:
e9:4d:fa:f0:fb:c4:3f:5d:87:53:5d:1b:ae:91:67:
55:b8:2e:be:19:d5:a5:d0:dd:88:c4:d8:d6:d4:a1:
6d:6e:33:c6:8e:d2:01:e8:24:e3:5d:c0:fe:e6:c9:
1a:03:26:96:5c:82:c0:2b:f0:b1:c4:3b:72:e6:15:
fc:7a:9a:06:f9:86:1b:c9:a7:fa:78:dc:16:89:27:
26:10:0a:d8:da:b0:d3:77:47:16:70:b2:60:57:89:
86:20:f7:44:78:72:6c:db:91:bf:7d:43:35:f2:14:
11:c6:84:0e:c4:ca:21:ca:bd:84:56:d3:9f:22:e2:
c9:06:ee:b0:82:cb:bd:34:96:d9:9d:81:c0:c9:4b:
05:43:02:71:2b:cd:50:c7:fc:8b:12:1f:60:78:64:
95:b0:c2:8d:66:50:02:84:61:98:00:7d:dd:77:b1:
b0:34:62:12:0b:00:5a:e5:90:10:bc:b3:3c:03:eb:
f2:a3:4d:df:9c:70:00:f1:45:f3:48:4d:40:fc:35:
bb:26:e4:57:cd:76:ef:5c:ac:d0:86:43:e2:9e:fa:
c5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FE:05:2A:AB:78:BE:A7:05:47:FD:AF:5C:9E:E2:26:CD:D6:70:BE
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e3:61:d7:a3:fd:b7:94:d8:c5:dc:73:f6:5c:22:7c:6e:73:
40:a0:03:bc:bf:d7:e5:b0:bb:64:45:1e:9d:48:e0:c8:1e:05:
d9:fb:ab:84:49:7d:8f:da:90:be:94:55:0f:41:ce:ba:4d:1a:
8a:02:f3:d9:94:41:0c:ef:d2:51:41:fe:20:11:78:87:bc:43:
44:1b:15:3d:87:a6:b9:17:4e:47:11:91:19:96:73:c4:5f:b9:
52:81:38:f1:0f:54:f4:ce:1a:b6:d2:2f:b4:09:5f:e6:1f:e9:
93:e8:06:b5:5e:d9:29:59:d0:f7:20:c9:ad:a1:c6:f0:5b:9f:
52:28:6e:96:38:34:16:5a:fd:45:1b:07:5d:da:67:56:bf:97:
eb:d5:6f:d8:84:1a:7f:2a:6e:1f:f7:d3:a8:5e:69:7a:4e:ce:
e4:c9:06:87:69:0a:79:1d:bb:a4:d4:42:b4:9e:8f:74:33:59:
86:4a:db:78:b1:7f:da:80:4f:f3:1f:0d:05:4b:c3:77:c1:73:
f5:c6:69:78:8a:b8:b3:5c:6d:9d:26:a8:00:16:b2:38:78:8f:
95:6b:a5:0f:25:05:74:38:07:73:00:4d:24:78:6c:9d:46:e4:
b6:d4:ba:f0:09:b9:18:d8:e1:91:6b:9e:89:44:db:f4:d7:0a:
ce:2e:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:40:57 2025 by rpki-client