Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
File: RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft (raw, json)
Hash identifier: zUlXbmJ3EqH9riSMohc7iqRPcLLEJYKpH7QAug/4cTc=
Subject key identifier: CA:55:2E:B9:B9:39:59:DB:7B:90:55:80:33:9D:FD:96:C9:75:7A:6D
Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
Certificate issuer: /CN=4735e807d349d31564f9fd546138e3598e2007ce
Certificate serial: 01976F2BE2C604E85920CC5503248216F9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
Manifest number: 0EA1
Signing time: Sat 14 Jun 2025 16:00:36 +0000
Manifest this update: Sat 14 Jun 2025 16:00:36 +0000
Manifest next update: Sun 15 Jun 2025 16:00:36 +0000
Files and hashes: 1: RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl (hash: CrtZjQ0pUbdth/IZC8iiRmTcJbsCfQt71240rSuATJ0=)
2: okKN99_kSuFiK1nEiQxwIj0skkI.roa (hash: BJdgdwQcgeiOTDLWh5HfcEvgJyNYUlctToI5pjHaF+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:e2:c6:04:e8:59:20:cc:55:03:24:82:16:f9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce
Validity
Not Before: Jun 14 16:00:36 2025 GMT
Not After : Jun 15 16:00:36 2025 GMT
Subject: CN=ca552eb9b93959db7b905580339dfd96c9757a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:4c:ec:49:58:29:fd:85:0e:fd:16:b2:95:
68:0e:b5:1b:ba:6c:b3:24:a7:28:bd:25:da:0a:05:
d2:a8:f7:5a:41:78:aa:9e:33:9f:0f:14:9b:c7:7f:
f5:dc:cd:9c:81:82:18:54:a6:da:24:ad:bf:ef:46:
36:c4:93:25:3c:f4:af:a4:20:da:27:f3:8a:42:72:
78:45:95:88:d0:27:8d:69:fb:37:ee:ed:33:3c:e7:
8b:b9:ff:73:35:c8:74:c2:3c:b7:71:96:96:e9:a7:
2b:c0:89:e4:94:2e:4c:aa:aa:7c:64:7d:e0:d1:cd:
03:9a:1a:27:47:9a:49:15:fa:1f:63:6e:80:bd:b8:
4e:0a:ff:34:69:fd:9c:95:fd:08:44:1c:10:84:2f:
d3:3a:3b:64:e8:a5:25:74:a1:d9:7c:9e:07:b2:7a:
ac:be:21:0a:69:17:3e:09:01:48:0e:c1:48:50:03:
e8:e6:d5:ab:bd:5c:f5:7c:7d:7c:86:c0:47:bf:09:
47:fc:f5:9a:2b:0d:c2:71:a2:03:31:ca:2c:6e:9a:
7b:58:65:ef:4d:59:a8:24:19:e3:b4:c3:fd:77:6e:
80:80:30:4d:13:51:8e:f8:c7:6b:88:29:6f:fb:36:
26:05:07:e0:22:f8:22:91:39:65:47:3a:af:8b:1c:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:55:2E:B9:B9:39:59:DB:7B:90:55:80:33:9D:FD:96:C9:75:7A:6D
X509v3 Authority Key Identifier:
keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:70:ef:4a:37:32:b0:00:a3:c1:60:56:ec:6b:d6:b6:6b:fe:
52:25:22:20:72:6e:38:19:d9:85:36:4a:b3:de:6b:c3:e1:ed:
20:6d:7f:62:77:d3:61:09:45:27:cd:ab:cc:1d:f3:6f:8d:20:
0f:15:0e:7a:bd:52:8d:7f:9a:e6:7e:1c:95:d5:10:ff:30:da:
ae:41:f7:16:93:ac:7c:96:07:84:f9:12:85:4c:66:90:66:c7:
21:77:fa:9d:8b:d2:f0:83:c0:be:8f:e7:ef:22:bb:26:92:9e:
c6:06:df:b9:c6:10:d6:b7:e2:c6:20:bd:72:59:98:1e:d4:32:
1b:1a:10:ae:a4:de:53:4d:5f:a1:82:aa:9b:bf:99:ab:6f:34:
d6:3a:8a:04:17:4b:e6:3b:84:d6:78:f1:2f:5b:63:46:aa:72:
6f:1a:3c:db:f0:7a:21:8b:8d:01:36:a9:e0:57:66:0f:9f:6d:
75:7e:f0:40:0c:b0:cb:1b:37:66:86:6e:b4:80:9b:7b:d4:81:
a0:58:26:7f:95:d6:24:1a:b9:b5:4d:5f:ff:17:04:4a:6b:b9:
33:1a:e6:60:62:ad:0a:50:80:40:79:ff:22:85:bb:d2:63:ef:
6e:5c:3b:c2:26:ee:70:ba:08:54:93:1a:cc:b6:01:3b:87:1e:
a9:ac:ea:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:21:11 2025 by rpki-client