Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
File: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft (raw, json)
Hash identifier: 8CJLA20N5geWo5o9T92pJdR3Luh3GEv4FCl1DO6Y53A=
Subject key identifier: 4C:09:F1:7C:EE:BB:90:3A:2A:77:82:90:90:39:95:61:02:32:F5:B8
Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
Certificate issuer: /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Certificate serial: 019767A940A2DBFB0C7BD14392AF93620BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
Manifest number: 0212
Signing time: Fri 13 Jun 2025 05:00:34 +0000
Manifest this update: Fri 13 Jun 2025 05:00:34 +0000
Manifest next update: Sat 14 Jun 2025 05:00:34 +0000
Files and hashes: 1: PCsNRmePbsa0e_oFwYPynvY9VHo.roa (hash: RquScR+SoymapgsuHQnGU+jgf18EzJeo/wdLZPwz40M=)
2: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl (hash: IGPGs3GwVmBiotTCQ5UfCD0K8Q9Ps5dy5GuB/Xw2quw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:a9:40:a2:db:fb:0c:7b:d1:43:92:af:93:62:0b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Validity
Not Before: Jun 13 05:00:34 2025 GMT
Not After : Jun 14 05:00:34 2025 GMT
Subject: CN=4c09f17ceebb903a2a778290903995610232f5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:44:1e:45:36:05:55:b9:27:58:d5:a8:1a:
6a:8b:ec:e3:11:42:51:82:0b:95:bb:18:25:02:8f:
ed:c9:d0:e8:23:f6:bc:87:c4:c2:3b:cc:1f:80:02:
ec:29:d8:e6:d4:84:04:50:fa:f9:cd:34:15:92:eb:
f3:42:49:8f:0e:87:be:2b:59:24:b3:df:e7:76:66:
6f:bb:cd:ca:b1:58:03:24:9c:e3:57:1e:6a:9a:c8:
b5:93:f9:9f:3e:77:3e:13:76:0f:60:41:28:fb:a5:
dd:1d:c9:6a:ef:cc:a7:fd:9a:88:6b:a6:4e:8c:06:
b0:a0:0e:61:ec:79:a3:f3:f7:e2:8c:39:f6:6b:e5:
e4:c4:08:5d:2b:bf:8e:1c:fa:ea:7b:56:97:25:29:
3f:e9:70:21:85:4b:6e:82:1d:6e:cc:73:1a:08:98:
02:98:36:14:c8:43:af:6e:57:03:ad:6d:a2:19:34:
14:16:9e:69:a0:d2:63:7d:4b:a6:ac:b6:0f:41:6d:
44:30:c3:a8:91:f0:9b:1f:e1:2d:03:1e:d6:24:6b:
11:b4:08:df:ec:db:e3:0b:40:3f:35:fd:2f:06:7f:
d5:96:a7:d7:48:ef:aa:0e:12:27:e0:64:65:d9:55:
d6:2e:7c:89:2c:45:0c:f7:62:6f:28:a5:67:da:f9:
c3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:09:F1:7C:EE:BB:90:3A:2A:77:82:90:90:39:95:61:02:32:F5:B8
X509v3 Authority Key Identifier:
keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:3d:d8:f5:4a:74:48:bc:57:1c:dc:36:3e:1f:e8:c0:ca:8c:
85:ce:1a:fb:26:dd:81:98:f8:c7:55:9a:46:86:93:78:06:75:
4d:34:b8:1b:0f:72:c5:0c:61:12:c5:4e:e0:7b:90:0a:44:9d:
48:ab:73:d6:0c:22:3a:03:bc:e4:1c:6e:10:a0:04:c7:41:29:
7d:63:fb:d7:8e:05:39:0d:52:c5:67:0a:25:b2:a2:fd:2a:6f:
83:fd:30:b7:9b:b2:76:24:0b:64:e4:24:3c:52:1a:c9:b3:b8:
3d:0d:80:97:8f:e1:2c:72:0b:9b:ca:57:1a:fb:f9:b9:44:f9:
e2:e8:fa:c7:70:e8:69:f7:79:59:cc:96:c5:a5:9a:72:26:e2:
95:dc:7c:15:6f:03:ff:c5:ff:58:9f:66:4b:2c:0d:ae:0d:26:
f3:5d:fb:f7:47:c6:0f:97:46:6c:8c:6d:b2:10:03:2d:63:09:
2e:86:c2:55:c3:26:7d:2f:d7:a2:dc:4b:1d:98:45:fb:5a:ea:
37:fb:8e:5b:cc:65:ee:2c:5c:81:78:86:a0:0d:c4:fb:ab:53:
36:8a:f7:a3:58:d4:51:8a:48:cb:b7:46:22:0e:c0:f8:1b:75:
b5:8e:11:57:37:31:18:84:c9:91:e4:4c:de:64:ca:27:5f:06:
cb:39:d6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 10:04:28 2025 by rpki-client