Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
File: RZYupWYFRlbvgqrOLXHHbRsLiLs.mft (raw, json)
Hash identifier: mx6sS3+Yv42r3tgf+QJsEE5zJvdeSA1s3DWCLML4tbI=
Subject key identifier: 4A:A5:23:5A:F5:0E:3D:12:BF:80:0D:58:8F:28:F5:3D:12:74:3E:6F
Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
Certificate issuer: /CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Certificate serial: 019745545A84F04878C05317A0667C25841A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
Manifest number: 0EB7
Signing time: Fri 06 Jun 2025 13:00:45 +0000
Manifest this update: Fri 06 Jun 2025 13:00:45 +0000
Manifest next update: Sat 07 Jun 2025 13:00:45 +0000
Files and hashes: 1: QNIQdG4Tu9zIYU5pnHAiIv-6jdQ.roa (hash: iDeA+sQiPag5Td4fIdhnGBEsGTbasSmj20N0QdB9b24=)
2: RZYupWYFRlbvgqrOLXHHbRsLiLs.crl (hash: Xs/+7IbEOFhuTfBvXns7tNh7ajPZKkOAY6SaMotUotM=)
3: WEolIktBESdvgc8hNiaPN7u1uwc.roa (hash: epUS51OLDZ6qazQuvjy3IHtOX7T0vUZAhescISw2oWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:54:5a:84:f0:48:78:c0:53:17:a0:66:7c:25:84:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Validity
Not Before: Jun 6 13:00:45 2025 GMT
Not After : Jun 7 13:00:45 2025 GMT
Subject: CN=4aa5235af50e3d12bf800d588f28f53d12743e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:d4:bb:d1:ef:af:0e:f5:3d:f3:2d:0d:bc:
61:f7:9d:53:e0:81:0e:60:f2:2b:13:6c:df:8f:de:
2a:ae:66:83:29:45:c3:fd:14:5c:b0:29:cc:d0:45:
1b:ee:ac:78:38:7f:00:00:a0:9d:17:47:e0:34:14:
0a:0c:21:a8:f9:5a:7d:3c:0e:63:fb:41:7c:c8:db:
81:07:1b:5d:cc:e0:56:f5:f1:93:83:6f:2f:a5:41:
3c:54:89:4a:27:4c:99:eb:31:d9:14:98:6e:8a:e4:
59:67:02:83:57:f2:28:08:bb:d3:dd:c2:62:de:5b:
b8:84:23:2a:59:a6:41:fe:ff:c1:d8:f4:67:6a:f5:
af:f0:3e:37:fe:1e:6d:3e:3c:e1:6e:c4:8d:9d:d3:
6d:7b:11:a5:12:f6:1f:0b:0c:a1:d0:18:4b:16:bc:
01:c0:30:17:13:37:01:b0:a5:c2:83:10:15:45:68:
08:a9:9c:a3:8d:46:55:c8:40:ea:8f:83:2e:69:68:
be:f2:f3:18:2f:ab:51:26:09:21:22:87:b6:14:46:
74:ac:05:e1:d3:6c:40:b7:65:dc:08:a6:25:9e:cd:
47:9e:29:6b:0a:72:e1:05:f3:70:51:61:1b:d9:67:
d6:4e:f4:cd:38:4d:b5:fb:ba:a3:0b:d5:3f:3a:80:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A5:23:5A:F5:0E:3D:12:BF:80:0D:58:8F:28:F5:3D:12:74:3E:6F
X509v3 Authority Key Identifier:
keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:08:58:9f:08:62:ea:9e:c5:9e:77:31:82:b1:1c:04:59:63:
41:42:f4:f5:3d:3e:f8:e5:52:3b:96:a0:d9:30:d0:9b:c8:56:
f8:14:dc:ea:98:8f:5e:a7:73:4f:0d:94:bd:33:06:60:a1:5d:
2c:fc:75:5a:ac:05:3e:d1:46:4b:26:9d:7b:3f:ee:bf:52:50:
54:62:3c:d7:9a:41:5e:40:3a:9f:dd:02:a2:3a:0c:0c:53:37:
eb:4c:9c:e8:e6:91:77:4f:e9:ee:7c:29:72:80:6e:7b:a0:e7:
02:4f:5c:c1:2d:79:0c:0b:dc:a9:ee:09:b1:ec:5b:53:4a:27:
81:44:00:b5:13:15:5b:e8:c5:7f:12:23:e9:38:49:f8:a2:56:
6c:54:cb:17:31:e6:ac:9f:82:df:bd:dd:a8:68:54:18:be:74:
e4:b3:3a:44:ca:27:39:41:04:77:f1:77:70:70:00:9d:91:b6:
77:00:c6:39:fd:46:4e:4f:be:da:23:57:61:61:07:5c:3f:de:
57:39:94:82:11:1a:6b:85:50:f9:65:68:4f:22:49:ba:18:86:
1b:19:37:c7:69:d7:a3:86:14:51:15:51:2f:c9:f3:41:f0:89:
10:fc:4d:b6:6a:e7:c8:90:d5:d9:a4:65:c9:4b:3c:65:e8:57:
52:a6:cc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:20:21 2025 by rpki-client