Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: IQWnzArBFS4/rFy3f1sYjpWzYyoJIk8oMmhJ0X18tkU=
Subject key identifier: 09:81:0F:F2:97:12:CF:AA:1D:B5:4C:3B:E1:04:34:84:EA:EF:D8:E1
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 0197499F16BC1C6278E104F01D7F02A5732F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 09:00:52 +0000
Manifest this update: Sat 07 Jun 2025 09:00:52 +0000
Manifest next update: Sun 08 Jun 2025 09:00:52 +0000
Files and hashes: 1: Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa (hash: MX3HFB8kT23MsRMUZ5iOzHB5WYojkHCu+itSb597FCw=)
2: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: RcG4v+gdM7v4uAALpMmcg15NnavFFdPDKVS17llZjAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:16:bc:1c:62:78:e1:04:f0:1d:7f:02:a5:73:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Jun 7 09:00:52 2025 GMT
Not After : Jun 8 09:00:52 2025 GMT
Subject: CN=09810ff29712cfaa1db54c3be1043484eaefd8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:61:d2:b5:aa:2b:07:11:25:e5:62:75:ba:27:
6d:c3:37:49:c4:af:aa:87:f7:da:14:e9:86:df:6e:
e9:a6:39:e2:ad:05:98:a5:89:04:31:c3:45:b8:71:
95:11:3f:f2:42:df:6a:5c:ef:a3:3e:19:12:94:e3:
6b:6c:97:82:42:8d:96:8b:a4:62:1f:7d:fe:58:b9:
b3:a1:11:14:e1:39:87:c7:cc:d8:5c:52:fd:77:51:
01:81:a3:c4:a2:23:dc:97:17:93:7a:5c:b8:9d:12:
f3:dc:97:bd:09:3f:bc:e0:fd:df:ac:81:3e:22:f1:
62:5c:c1:51:ee:2f:bd:ca:03:8e:56:8b:0d:5b:0a:
c9:58:20:54:a5:79:97:06:b2:90:d4:be:a7:bb:e1:
8e:96:a3:72:c3:7e:0a:e2:63:8c:e4:40:3a:88:c9:
e1:be:d3:e2:79:27:f0:d2:b2:29:8d:a2:eb:d7:cd:
bc:9e:0b:ce:05:38:14:e2:18:5f:2d:8c:8c:48:5f:
25:21:3c:be:38:8e:ee:78:64:61:48:7b:58:86:f1:
8c:84:36:53:3f:a9:53:13:53:f1:8e:68:1f:62:b0:
5b:48:d0:72:7e:e2:7c:f9:49:04:49:33:45:36:41:
3e:8d:97:ae:0f:46:94:71:ea:27:a1:fc:e6:a6:35:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:81:0F:F2:97:12:CF:AA:1D:B5:4C:3B:E1:04:34:84:EA:EF:D8:E1
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:59:67:e3:ac:6a:98:62:27:e0:9d:ee:fb:ca:7c:6d:de:97:
8d:e7:ad:b9:54:ca:a3:0e:81:6a:6c:0c:7c:45:ff:3c:1e:38:
66:b3:8c:4b:82:1f:ac:28:f7:02:fa:f9:66:1c:74:f6:f9:7d:
92:74:69:18:87:f1:f5:b2:74:2d:62:db:f6:98:3e:2a:48:68:
ad:c2:c3:4c:20:79:53:e3:c9:d1:a0:1d:86:3f:e4:08:74:16:
2c:18:20:82:8e:55:7b:af:e7:d4:ae:bf:db:f1:20:51:57:91:
6d:7b:8b:5c:b1:66:0a:29:f0:da:9d:80:66:0f:a0:b2:17:47:
e1:7f:a6:e5:7c:83:48:a2:5a:61:40:d4:67:f4:08:e8:4b:96:
be:75:c2:55:74:ee:5e:ee:6f:3b:ae:b6:a1:60:60:e6:17:05:
07:e9:1a:c5:44:64:b5:e5:9a:68:89:18:3b:8d:75:c4:86:85:
c6:1a:d3:da:b2:e5:1e:41:6a:e7:1a:06:52:06:a9:78:a0:22:
d3:24:91:f6:74:c8:6b:af:01:1f:06:d1:4c:cc:a7:c7:e9:a4:
73:4b:0a:c3:f6:7b:20:3d:39:7a:74:69:7b:ad:e1:03:62:60:
46:a2:7c:65:13:20:27:98:2e:f2:d9:73:3c:6f:9e:76:d0:b6:
be:55:4c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:49:20 2025 by rpki-client