Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
File: ZHU9ILmKDudww7UWaj9KB_BRW90.mft (raw, json)
Hash identifier: jdDrTEUxKQn3ZJuRwEnZLizMUSxLIVaU8sPUpVwNkVI=
Subject key identifier: 85:21:C2:23:C4:BA:44:5F:75:63:B2:E3:17:6E:C9:63:E5:38:8B:7A
Authority key identifier: 64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
Certificate issuer: /CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Certificate serial: 0197485588B089CE37E62C00CD2057832D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 03:00:54 +0000
Manifest this update: Sat 07 Jun 2025 03:00:54 +0000
Manifest next update: Sun 08 Jun 2025 03:00:54 +0000
Files and hashes: 1: ZHU9ILmKDudww7UWaj9KB_BRW90.crl (hash: /l7oABsNGc3VlSWxHyEdw4HRCI7OIzik3FeGB1l26Yo=)
2: hOtE2f6RqrVKTnKq4mitSq4GEW8.roa (hash: o3xEB2xwahNf/hrxJ/DM1O/UGFrILVNi8EQRepInZF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:88:b0:89:ce:37:e6:2c:00:cd:20:57:83:2d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Validity
Not Before: Jun 7 03:00:54 2025 GMT
Not After : Jun 8 03:00:54 2025 GMT
Subject: CN=8521c223c4ba445f7563b2e3176ec963e5388b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0a:83:85:fe:5e:b8:3c:9c:96:ae:d6:1d:11:
99:74:f9:3a:db:95:d8:96:fb:93:d5:ad:54:6c:c5:
2a:da:8c:de:d0:cd:98:14:9f:a8:6d:d2:6d:3d:ba:
b4:a2:0c:82:37:c2:f4:7b:24:64:d3:ec:a8:37:25:
2a:0b:27:90:5b:b4:27:90:1d:55:53:ec:10:f9:72:
e8:35:6d:81:9b:69:bc:23:81:96:aa:df:d2:fd:d1:
e1:19:0f:69:b5:56:48:84:f4:e3:da:98:cf:e2:fa:
98:f8:c0:1c:55:38:e5:f0:bc:a6:d6:82:2d:f4:bd:
a0:5d:8a:31:a8:e3:c1:8c:e6:80:e0:67:1d:de:7b:
44:a4:82:ff:66:a5:09:22:a1:68:44:1c:c5:3e:32:
c4:56:7b:cb:a3:81:cd:7a:37:74:03:9d:d2:60:76:
c2:fe:1e:41:c3:e8:f0:0b:f5:84:61:62:9c:91:d7:
04:92:04:12:d1:e4:7b:fe:6b:23:76:48:08:41:e2:
3d:6b:d4:6a:d8:8f:03:03:c3:0a:a9:01:4f:74:c4:
4f:cf:d1:4e:1c:63:54:a4:c6:95:1a:0a:c3:56:8a:
00:be:f7:6b:88:93:28:ba:47:90:d9:f1:c5:ae:46:
07:51:ea:7b:ed:3d:5f:60:d2:18:15:38:a6:23:3d:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:21:C2:23:C4:BA:44:5F:75:63:B2:E3:17:6E:C9:63:E5:38:8B:7A
X509v3 Authority Key Identifier:
keyid:64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:eb:73:bf:dd:52:8c:38:9c:45:a5:11:7b:36:0d:e3:3d:e5:
47:ea:64:2b:b8:3e:99:a4:ec:cb:dc:fc:16:d4:50:62:9f:bd:
91:28:5d:0e:59:35:5a:2c:ed:64:64:63:05:13:0a:77:03:e5:
dd:70:13:6b:0a:75:dd:57:80:01:69:77:a8:69:eb:0b:0d:9a:
08:68:3f:46:46:69:5f:34:e8:49:1f:81:69:02:45:82:1a:aa:
aa:db:b1:5a:68:43:ee:f3:44:c9:77:03:7b:b4:61:59:3d:a6:
eb:c4:b4:ec:27:61:d6:e0:41:a1:09:3f:24:58:cc:bb:64:b0:
a3:a5:d8:74:eb:b0:2f:dc:f1:d4:cf:25:bb:df:14:aa:ee:66:
71:80:fe:09:55:c1:e9:1a:87:9c:a1:f3:8c:bc:7d:89:d0:80:
7e:a1:9a:f4:a0:39:66:c4:be:5b:70:4c:2e:69:a9:ff:63:11:
fe:3e:ff:b5:9a:5f:d2:76:9a:b9:9a:fb:49:87:3e:91:c1:c0:
1e:a2:1e:cc:62:b7:92:92:2f:e6:9f:0a:40:83:44:9a:3f:29:
fa:f8:8f:03:74:c2:31:98:66:49:be:36:cf:75:09:74:f4:53:
fc:c9:d9:bf:b6:73:66:2d:5a:c0:cb:9a:33:5b:31:8a:a2:63:
9b:fa:86:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:52:13 2025 by rpki-client