Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File: 1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier: kH9O+CfsCVXCVi43zNqEH0A/BB3+MBIMll/QF0eqpgs=
Subject key identifier: 97:C9:E3:17:DB:21:4E:D6:0E:A4:9A:66:B0:6A:05:A6:48:A6:0F:36
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial: 01974B569DA7CD76AB28751DAA06F3B7C61A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number: 0E6C
Signing time: Sat 07 Jun 2025 17:00:57 +0000
Manifest this update: Sat 07 Jun 2025 17:00:57 +0000
Manifest next update: Sun 08 Jun 2025 17:00:57 +0000
Files and hashes: 1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: jaKM+3MGPxjV5w1eRj3baPSkw+JmHjT/5pq4+BFD2SY=)
2: 5xcSPqM5FqBggD3xhK_H_WBIj8c.roa (hash: 6UaEvDEdIHAI+VC/wqQ4jP8F3NZ9weH+TS5AN/LWzwY=)
3: NDt_WTrjoPL0cL8oTyPCRgNakA0.roa (hash: Hp1RzwRCWlMoxPuIUolhJVdqweoyQ9ReAqFHs5ETdBY=)
4: oTJ3WFdDrwDwPRwq0KV_9933-4Y.roa (hash: mhBZetUkSVK2917d65VbBa4ZgrfV11qg/and0h4flas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:9d:a7:cd:76:ab:28:75:1d:aa:06:f3:b7:c6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Validity
Not Before: Jun 7 17:00:57 2025 GMT
Not After : Jun 8 17:00:57 2025 GMT
Subject: CN=97c9e317db214ed60ea49a66b06a05a648a60f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:47:ba:af:28:69:1d:4d:34:b2:45:a7:11:
5d:41:a7:39:83:84:1c:f2:a9:5c:1c:15:cf:f9:09:
10:9e:31:7d:73:58:54:c9:c4:18:1c:d4:b6:dc:2f:
fe:ba:02:09:43:d0:20:0f:66:ec:13:2c:10:b7:c8:
db:31:c9:9d:8a:30:b1:b8:3f:64:a1:a9:49:a5:77:
1b:2b:15:99:a5:2d:03:14:27:a1:2a:1d:84:5f:29:
4d:03:11:00:59:d2:74:72:e7:a5:b0:6b:38:01:7a:
5d:6d:2e:b1:f3:9d:60:b3:ac:f1:81:9c:61:1c:a7:
64:21:92:41:67:c4:2a:47:cb:e2:a1:6a:9c:44:82:
e3:59:fa:86:9f:81:59:b1:52:76:6c:e9:a4:5b:41:
db:2a:00:70:a9:24:d3:68:ae:d8:63:1b:2e:2c:e3:
60:ec:0b:44:8d:3a:2c:66:54:5c:bc:ee:79:a2:f9:
42:24:73:7d:df:db:60:89:75:26:1b:1a:f8:bc:fe:
66:fc:d5:a7:72:f2:d4:ba:96:3d:fc:30:55:0e:1f:
c8:e3:64:53:67:33:46:77:9f:e6:c7:ed:c7:be:fe:
77:6e:72:08:97:31:17:9c:13:22:ed:cd:f2:7b:52:
7d:2f:c0:b2:90:30:cd:ef:08:2c:b6:3f:4c:87:87:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C9:E3:17:DB:21:4E:D6:0E:A4:9A:66:B0:6A:05:A6:48:A6:0F:36
X509v3 Authority Key Identifier:
keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:84:4e:37:77:7b:ec:6b:2b:94:b1:3d:ea:dd:aa:9f:e4:78:
53:5e:f7:12:9b:ee:42:17:bd:7f:b5:04:45:42:d5:e2:c4:2b:
c4:7f:01:a5:e8:4b:ff:31:11:20:4d:84:fe:1c:48:75:89:51:
4e:a4:71:35:cd:83:74:48:57:0f:79:00:61:e2:20:f9:fd:5c:
24:a4:01:8f:37:01:d3:9c:63:11:33:56:ef:6d:82:76:69:1a:
8c:45:b6:b2:89:6c:b1:aa:07:49:16:8a:72:9d:57:ca:00:7f:
59:93:00:de:9c:87:ef:e1:65:6b:e6:10:81:4e:29:d8:44:72:
52:70:d7:dd:42:27:4c:d7:98:71:2c:5b:1b:5d:0e:f8:64:36:
6c:75:d2:43:1c:7b:1b:d7:d6:11:9c:56:9e:d3:ce:37:16:e2:
e1:0e:58:09:cc:91:31:96:da:e8:cc:7b:cc:8b:b8:4b:da:39:
b5:7c:7b:a5:90:ba:19:8e:e7:73:dc:1f:37:6e:f5:5a:65:e6:
17:19:98:ee:23:cd:a6:f7:e4:92:42:33:03:3e:41:26:d9:32:
39:49:f6:08:bb:6f:10:ef:08:5d:ee:87:9d:5d:d1:91:9f:c4:
7d:b8:ab:92:7a:cf:0d:94:e3:3d:7e:2b:68:39:8a:44:95:61:
46:70:03:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:00:14 2025 by rpki-client