Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
File: zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft (raw, json)
Hash identifier: T9M9Jp1tLE967zCRtnPUsZNX2RglINnPHBO8bKPdjW4=
Subject key identifier: 98:CC:D2:86:6A:0A:DA:49:D0:92:D1:24:19:DA:60:85:4A:96:67:CF
Authority key identifier: CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
Certificate issuer: /CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Certificate serial: 0197518FC4B22691E2F9E610678151C0CA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 22:01:05 +0000
Manifest this update: Sun 08 Jun 2025 22:01:05 +0000
Manifest next update: Mon 09 Jun 2025 22:01:05 +0000
Files and hashes: 1: apVhYj18Bs_r1Q931zVqcqi5yvI.roa (hash: /gXE2P6qUcVxgRclWTrINQ6lVlcjG0089HciFUVuRsI=)
2: zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl (hash: 2sMkuaxLmMTcjVkY4MFjrWtIXnDULLDZRGn1UfUzZ6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:c4:b2:26:91:e2:f9:e6:10:67:81:51:c0:ca:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Validity
Not Before: Jun 8 22:01:05 2025 GMT
Not After : Jun 9 22:01:05 2025 GMT
Subject: CN=98ccd2866a0ada49d092d12419da60854a9667cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:37:50:a2:1b:1e:96:63:01:71:b3:e6:5a:
c5:e3:57:f4:5e:c4:71:e5:87:bc:a8:f5:42:f1:ae:
6a:d2:5e:e2:26:03:7d:cd:b0:a7:22:71:c4:3a:e2:
5c:41:0e:6b:cf:92:2f:5e:75:a2:8f:1b:b6:3d:e7:
6e:35:eb:fc:ac:f6:52:ef:6c:65:c2:41:fc:50:b2:
e6:b3:c8:a3:01:de:0b:42:fe:f6:c5:5a:bd:09:d0:
44:1b:82:cb:a9:70:8c:66:ae:50:95:a5:23:dd:c7:
12:35:5d:fe:fb:06:45:02:d3:b2:6a:e2:84:30:a5:
38:7b:81:4c:57:f8:6a:19:9c:a8:36:c3:99:5a:fc:
2e:50:3c:9b:3e:92:fd:ab:a2:8b:fa:8e:f0:49:05:
0b:08:3b:f0:db:57:f7:39:72:e5:89:1a:0d:72:38:
af:ce:40:4f:51:cd:6f:1e:b4:df:5c:ba:00:f0:b6:
b6:10:a2:96:c0:1f:32:8f:5e:57:b7:c7:fb:a1:ab:
36:2f:a9:58:a5:2b:76:11:ac:04:8b:46:d5:4d:4c:
6c:6f:65:8f:d4:fd:cd:7e:bf:82:32:cb:af:26:82:
b4:4c:dc:a3:1a:37:d1:54:3b:8a:97:25:8a:8e:e4:
97:a4:e4:84:37:b8:13:b0:0c:16:29:cf:43:c7:36:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CC:D2:86:6A:0A:DA:49:D0:92:D1:24:19:DA:60:85:4A:96:67:CF
X509v3 Authority Key Identifier:
keyid:CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8f:c5:27:da:a5:64:f6:cb:47:62:a0:1d:57:41:55:ca:15:
f4:09:ec:ae:7d:75:08:45:b4:5c:bd:94:d6:d9:25:33:f1:ee:
da:4c:c2:68:cc:7a:8c:15:71:fb:14:3e:f4:08:2a:4a:e7:c6:
b0:0e:bc:7d:f1:67:49:9e:61:57:d0:f8:f3:a8:34:4a:2d:07:
03:97:3f:51:90:f9:81:91:de:3e:82:92:fb:de:13:3b:31:ff:
69:41:56:c7:c1:29:55:6a:bc:7f:9d:91:47:d4:0d:60:c3:a1:
e5:28:b5:5b:41:e2:31:70:32:b5:6b:86:c0:92:ce:9a:f8:a5:
00:28:3a:e0:b6:d9:66:2e:41:2e:bb:9e:f9:6f:05:13:c4:79:
f8:a7:0a:63:17:cb:4b:75:ca:2b:8d:81:b8:3e:20:a9:46:65:
43:12:d1:31:ee:08:23:41:0d:14:6d:3c:21:45:8e:7c:e7:3d:
ea:6d:c9:d7:8c:0e:80:bf:aa:45:1e:c1:66:22:2b:50:09:06:
92:9b:ed:a6:f0:10:c1:c8:bf:c9:8b:84:41:be:b3:c4:80:d1:
9d:02:f7:26:75:89:df:d5:9f:c5:63:02:4c:9a:de:4b:e3:1e:
e1:cd:17:9b:4e:d1:c4:f8:aa:b5:06:71:54:09:87:ba:4b:d4:
cd:d0:f4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:04:31 2025 by rpki-client