Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
File: _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json)
Hash identifier: 42+iKbpHxIMPdexhF2XZR6rCZ8+SULcbx57CGljHpCw=
Subject key identifier: B4:C2:F0:53:FE:EC:37:93:14:97:3C:69:EF:68:F1:84:F1:BE:69:A4
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 01974C31E5EE9C66649A705A586395F8700A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
Manifest number: 036F
Signing time: Sat 07 Jun 2025 21:00:27 +0000
Manifest this update: Sat 07 Jun 2025 21:00:27 +0000
Manifest next update: Sun 08 Jun 2025 21:00:27 +0000
Files and hashes: 1: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: QnUWz6ZkmD40GNrEHTREb03q6FbaUfdceW1RtcMqrTI=)
2: bFqAr18-DoQ6dVM9w_6gb9zQnTA.roa (hash: CuuNkCn7ATc07S7puEJg/6wk+lxa5wMurXD4UWOiLPU=)
3: dKsuZKXaanXrDp2my4AYexk9Tzc.roa (hash: GbpECMMk1COm9Jd/gQRnAzNikJJCMjIxgnDlDhbpPCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:e5:ee:9c:66:64:9a:70:5a:58:63:95:f8:70:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Jun 7 21:00:27 2025 GMT
Not After : Jun 8 21:00:27 2025 GMT
Subject: CN=b4c2f053feec379314973c69ef68f184f1be69a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:25:d0:16:7a:1c:4d:27:7b:f7:70:12:60:
54:3e:c9:d1:ac:0d:2f:29:36:29:ed:3c:02:07:4a:
d9:e9:05:b5:ce:fc:9f:fe:cb:23:79:e4:ef:d1:c3:
e0:7f:bb:c7:00:fe:6c:ad:21:a9:65:1b:06:42:64:
3c:fa:17:b6:37:0a:ef:51:d0:b7:2f:42:61:68:3e:
a3:19:d4:ef:65:29:9f:cf:ae:cb:b9:40:9f:c4:78:
33:04:13:d0:9b:42:58:8c:0d:00:3b:18:fe:40:4d:
4c:26:09:39:5d:b6:a9:3c:ab:ee:c9:67:39:98:a9:
c5:b1:ee:96:84:e5:e5:7c:d5:ed:3d:f2:ee:5a:ae:
33:fc:75:c7:58:7a:0a:74:1f:6a:c1:f0:e4:5f:d3:
65:9d:d9:00:83:b4:f6:27:4b:ba:ed:e5:48:5e:05:
ac:74:7c:f2:e7:56:da:a3:03:96:d7:2a:ef:4a:15:
e8:78:33:b4:24:1f:42:fd:3c:8c:e4:28:04:d8:22:
87:3c:55:7f:10:6e:ee:44:e2:79:47:0b:6f:da:a9:
63:0f:ca:ff:cc:5b:da:00:a7:1a:57:0f:92:3c:ad:
43:6d:59:2f:90:43:f2:b0:a5:20:72:5a:88:8f:97:
70:d0:d6:c8:6b:86:74:6c:93:97:50:91:b5:1f:37:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C2:F0:53:FE:EC:37:93:14:97:3C:69:EF:68:F1:84:F1:BE:69:A4
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:33:ab:c5:8b:65:c6:1b:a6:bd:0f:e1:66:82:16:49:34:05:
40:e3:97:16:fe:86:47:81:c4:1f:ad:36:45:65:85:83:ff:af:
d3:a6:85:16:5c:35:d0:1f:8b:81:19:c9:1f:38:40:6d:52:97:
be:de:6e:b4:03:d5:7a:e3:30:e2:fe:6d:d2:e8:dd:68:8e:1d:
09:55:30:cd:c1:61:fc:98:f5:cd:bd:71:a7:b5:c1:aa:ec:55:
c0:72:df:7b:a5:06:70:a2:71:ae:f9:a9:36:35:49:36:17:d8:
33:9c:8b:95:41:b5:1f:57:83:14:fb:f1:0d:bd:9c:6e:2a:6e:
4f:af:da:db:0b:ba:4b:49:13:f6:0a:4a:35:73:44:80:2b:97:
d0:d8:7b:b1:d9:96:f9:67:10:fc:94:fa:24:20:ba:55:08:76:
d9:d7:d4:98:cc:e6:16:3f:d3:b9:7c:f4:38:df:70:49:04:97:
82:e4:40:9e:63:66:f7:e6:d4:7c:44:92:51:62:c5:44:7f:15:
39:e8:8f:11:72:32:39:51:76:d5:80:55:96:c8:ea:c7:cf:1c:
7e:4c:80:b7:17:68:2c:fd:c3:7f:11:ed:40:03:41:a7:f3:20:
ed:18:35:f2:f1:5f:b0:fb:4e:db:c4:3e:63:34:fd:73:27:74:
4d:16:16:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:53:29 2025 by rpki-client