Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
File: Kz1duQDggbIT6h8HHsXAA0em_ZU.mft (raw, json)
Hash identifier: 1tGv2LBYQSIOj5rn/8+lcR/5D8C3rjLa8Vfw7Z38Nu4=
Subject key identifier: F9:77:7A:3B:E2:60:97:33:1A:C2:34:6B:74:F1:56:9F:CD:F7:81:98
Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Certificate serial: 019764DF93F33B7681E2C2BBDD7A986A86F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
Manifest number: 1462
Signing time: Thu 12 Jun 2025 16:01:03 +0000
Manifest this update: Thu 12 Jun 2025 16:01:03 +0000
Manifest next update: Fri 13 Jun 2025 16:01:03 +0000
Files and hashes: 1: Kz1duQDggbIT6h8HHsXAA0em_ZU.crl (hash: l/TZLhQsvgDUObnyw0MwLty0nW9J7sQAS7ii9Cc8Jhg=)
2: NEgXAX_wlUMaQy2Alio_tXjqDko.roa (hash: AzGPeergn3UOGKBGdY9DWg2cAqJA+mog0I2Sf6Bpi0g=)
3: piNzw1TtbP-p8HWhuy6SBF8spgg.roa (hash: wNEUGiASiQTLAx7gOGoQvQVkZK49FM62Tev24iu4h1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:df:93:f3:3b:76:81:e2:c2:bb:dd:7a:98:6a:86:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Validity
Not Before: Jun 12 16:01:03 2025 GMT
Not After : Jun 13 16:01:03 2025 GMT
Subject: CN=f9777a3be26097331ac2346b74f1569fcdf78198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:f8:6f:a4:d6:0a:30:bd:75:36:fe:48:29:
1f:c3:85:8c:26:29:bd:99:85:87:cb:35:47:a4:41:
89:21:97:91:17:7a:78:13:83:80:2b:5a:d3:a2:2a:
8a:b3:e8:97:88:3e:37:c6:6c:ec:21:ad:c4:ec:ab:
46:4c:b1:19:39:72:8c:be:65:72:2a:80:22:0c:4a:
c7:bd:f2:ca:fa:1e:48:c3:14:1b:b2:c2:e7:ed:5f:
83:7f:5a:e1:61:90:1e:1f:6e:bb:33:cc:d3:72:d2:
86:9b:e2:1b:57:7e:2e:64:f5:1a:98:b9:2f:be:43:
a0:14:6a:f3:90:fb:4d:cd:db:aa:68:17:0b:59:14:
64:fd:97:56:6c:43:f2:44:96:28:97:d7:13:58:7f:
eb:20:18:aa:8e:8b:98:8c:79:53:81:14:28:9d:93:
d5:18:fd:5f:04:0d:9f:3a:b1:c9:5e:3d:44:4a:f1:
2d:3e:c7:f3:d4:2e:bf:92:51:2f:71:f1:dd:54:95:
d0:86:f0:f9:28:b4:ac:0e:dc:e7:10:a6:4f:9a:76:
47:8e:a5:3d:79:af:a1:02:b2:8d:c6:49:95:a8:87:
c9:97:5b:f8:fe:c1:52:09:94:98:8e:25:fe:d2:9a:
b1:08:d9:c9:d7:2c:15:4e:fa:dc:b0:75:2e:80:2f:
08:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:77:7A:3B:E2:60:97:33:1A:C2:34:6B:74:F1:56:9F:CD:F7:81:98
X509v3 Authority Key Identifier:
keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:95:76:64:f0:10:7c:2f:87:2a:c3:54:ac:c4:9a:aa:0f:af:
b2:38:8c:49:43:06:5b:73:d2:ee:5e:3d:e6:10:6b:4b:ea:71:
3e:19:0e:e3:47:88:17:fa:51:98:26:f4:b7:1c:53:61:4a:50:
e7:73:cf:5e:ae:20:62:af:9b:9e:e8:05:a5:1a:72:87:bd:c6:
2f:c2:7a:67:4a:88:bd:75:b3:6d:f0:64:a1:52:38:af:66:1a:
49:aa:97:a5:02:a1:f2:4c:65:67:c5:5c:f0:60:a2:b1:d6:66:
71:a5:42:93:af:fc:4d:02:20:22:2d:1d:ce:f9:2b:39:9f:1c:
11:bc:e6:6b:97:62:36:04:f5:7e:59:00:bb:22:b9:8e:aa:66:
95:8b:24:f5:91:fe:93:bb:0b:7f:11:52:21:c7:60:03:41:f6:
fc:00:58:5e:b1:4c:98:ea:a2:82:15:d0:3b:ed:7d:bf:7d:cc:
f6:d3:8f:82:68:44:7f:0b:53:b8:b4:89:41:06:25:b1:83:7d:
64:1f:4e:60:b3:ca:a8:47:32:ee:a0:2f:ad:ae:30:e7:5e:82:
42:9b:a9:b9:68:eb:d2:0a:5b:8e:5b:99:c2:2d:26:c9:21:35:
48:15:fb:da:4e:bd:d8:6b:05:af:f2:fd:22:e6:12:fd:9e:2a:
2b:01:98:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:30:07 2025 by rpki-client