Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier: GD9wOSDWue/yLljlQZjXB6qnH334ic7lfQgBzGXeQgY=
Subject key identifier: 2F:B3:A1:75:47:82:25:98:C8:E3:DB:6B:B4:44:4C:17:68:47:CC:A9
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 01974A4394077ACDA1DE8E002C0E642D01A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number: 12C3
Signing time: Sat 07 Jun 2025 12:00:32 +0000
Manifest this update: Sat 07 Jun 2025 12:00:32 +0000
Manifest next update: Sun 08 Jun 2025 12:00:32 +0000
Files and hashes: 1: JLmy4TR8RrUtQURM0_SunkucXNg.roa (hash: tyjdJ+wzrKeWzDFxJ16QXw9ZyxjFDWvObDxvX6J8AjA=)
2: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: fhx0N9OpE9hjEM1MsEaELDnHnjvJW2Y0Dfg9p59Rd08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:94:07:7a:cd:a1:de:8e:00:2c:0e:64:2d:01:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Jun 7 12:00:32 2025 GMT
Not After : Jun 8 12:00:32 2025 GMT
Subject: CN=2fb3a17547822598c8e3db6bb4444c176847cca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:4a:1f:a2:60:fd:73:57:7f:7e:ec:3a:27:
32:9a:40:36:2c:a1:5c:a9:d2:cc:6f:25:1f:43:fb:
cf:2f:4b:9e:14:c0:fd:2f:03:08:e9:f6:cf:65:9b:
68:8a:f2:57:b2:e4:66:61:97:24:dd:7a:eb:8a:e0:
3f:04:44:6d:2c:73:6a:9c:d5:a7:d5:aa:dc:6a:c3:
6a:31:a8:68:a6:4b:c6:3a:be:36:d8:74:a5:a3:12:
22:9b:37:96:2a:b4:bb:a9:c3:50:78:47:56:7e:3a:
56:fb:0e:68:f8:d6:bb:f4:2a:8e:3d:cc:ae:27:5d:
99:9f:a9:88:f4:63:97:88:88:1e:09:b8:76:7b:00:
af:20:c3:8c:25:0e:49:4c:da:23:d1:32:19:77:dc:
c1:74:49:7b:bf:65:96:5c:2e:f7:eb:6c:62:ea:59:
7b:e5:bf:2a:35:84:42:1c:98:c9:cb:dc:bb:6c:76:
da:42:10:61:4d:b4:c9:6f:c0:fd:3e:18:be:35:f6:
e2:ed:60:1c:fd:b5:3f:b3:39:1b:26:60:82:ad:fa:
ac:b0:7e:e7:ef:32:e4:45:bd:62:39:32:28:4b:00:
1c:7c:0c:c6:7f:cb:65:d8:e9:7e:e3:b8:6e:7f:6b:
23:52:81:33:39:c2:c5:a1:26:c1:10:ef:fa:05:3e:
f2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B3:A1:75:47:82:25:98:C8:E3:DB:6B:B4:44:4C:17:68:47:CC:A9
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:50:a6:6f:d2:4b:02:ef:f9:6e:cc:f1:c2:ce:8b:6f:97:0d:
0e:df:61:e4:7f:82:f6:3a:56:b2:e8:cf:4f:e3:ff:6e:1f:62:
0a:9c:e2:a2:39:f5:94:b0:0f:f0:1a:e3:24:22:56:ec:4c:f3:
22:0a:3d:6a:72:0f:31:04:af:4c:39:11:67:3f:87:8c:a5:4b:
2c:89:87:ae:32:c5:1c:f5:c8:90:03:f5:48:57:db:5d:11:78:
65:76:cb:36:72:89:11:f3:5b:27:30:ea:34:3b:d6:c9:5e:3b:
a8:c2:ef:c4:94:02:bc:54:49:7f:9b:ac:44:3d:01:b4:e6:30:
88:9b:24:db:d7:c5:02:b4:d8:36:69:29:8b:43:81:e0:06:c0:
8b:60:22:f0:f8:b7:7b:06:a5:8b:e7:99:c7:a2:29:68:33:9e:
6e:b2:22:b8:7e:4f:be:be:84:03:bf:5e:0c:27:3f:f3:01:34:
03:63:69:bb:e8:1d:7b:1c:9c:f7:52:0c:b3:39:a7:ff:7b:7b:
f3:30:6a:7b:f7:89:6c:3f:39:6f:b2:64:c5:b9:b7:ab:2a:3a:
4d:d5:a9:11:65:dd:69:ef:5a:58:07:4d:2d:75:c5:7e:9f:6a:
ff:b6:38:b0:9f:26:16:11:32:7d:7c:e6:12:e1:24:d3:b8:db:
50:1d:06:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:18 2025 by rpki-client