Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: kv3BV0Rd4Z3+hO4rfD6wIcRoHlvbkkQsl6FUfb7NStA=
Subject key identifier: 97:9E:5B:00:15:0E:25:4B:67:5F:42:7B:70:C7:0F:E2:0D:0A:F7:74
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 019747E7DAD996B1CCAED7C32688B3EC8C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 0517
Signing time: Sat 07 Jun 2025 01:01:06 +0000
Manifest this update: Sat 07 Jun 2025 01:01:06 +0000
Manifest next update: Sun 08 Jun 2025 01:01:06 +0000
Files and hashes: 1: ZhxwMRHWErqoZg_Itz4BRM1Zy1g.roa (hash: pA1I1yaFQSWAdVvtp/IDWYB864SqtxE1eJEw16TKrNs=)
2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: HN8BqQLekLhfV0cIQLOl3J2Uz4GalC+cfMw7RkARu1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:da:d9:96:b1:cc:ae:d7:c3:26:88:b3:ec:8c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Jun 7 01:01:06 2025 GMT
Not After : Jun 8 01:01:06 2025 GMT
Subject: CN=979e5b00150e254b675f427b70c70fe20d0af774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:9c:1c:5f:77:90:c8:2f:99:77:a3:d6:00:
a6:24:ce:60:1f:fe:88:2b:7c:04:97:f6:6e:0c:8a:
b8:ee:0d:be:6a:95:97:df:1e:c1:e0:a7:67:17:a0:
59:cb:84:57:f7:79:2d:32:f3:bb:f6:2f:80:0b:c2:
4d:a6:43:06:33:fe:69:fd:45:96:db:86:7e:b6:28:
aa:b0:44:b3:92:ab:e7:5e:77:c3:af:c4:29:3a:d5:
f1:bd:4f:8d:f4:db:a1:8f:c9:66:4e:2a:85:14:9e:
a4:21:f4:bf:50:c9:61:8d:aa:db:52:08:61:f5:25:
3c:6d:bd:69:32:43:4d:2b:f8:f9:2f:d5:68:41:e0:
3c:72:16:7f:bd:14:41:41:89:65:d1:68:f4:da:3d:
63:3f:37:7e:9a:14:ea:75:61:89:a8:16:30:5b:b1:
80:68:c5:11:2c:68:58:74:14:9f:00:05:22:78:2f:
90:d3:e0:32:5c:f6:f8:eb:06:a9:82:79:89:2a:d8:
95:7d:8d:95:b4:8e:68:86:00:d8:e1:af:68:11:e0:
ab:3e:15:ef:09:62:c7:28:5a:eb:b0:8b:6b:97:19:
b4:14:99:1b:52:fb:fa:70:44:5b:e7:b7:b7:61:1f:
b7:9e:25:90:85:bd:6e:d3:91:04:22:e9:52:bf:39:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9E:5B:00:15:0E:25:4B:67:5F:42:7B:70:C7:0F:E2:0D:0A:F7:74
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b4:70:4d:9a:8d:0a:7a:76:48:ba:fd:ef:70:b7:7f:0e:f5:
74:c8:7b:3d:69:37:89:72:d1:aa:fd:62:30:1b:f8:73:2b:1c:
a2:40:35:79:de:53:0c:6b:4c:01:0d:d3:b7:ad:ed:5b:7d:bd:
fd:a2:be:e4:c9:d4:92:40:d8:65:1e:e3:50:1e:bf:e7:ea:52:
b5:54:63:95:5e:ab:c0:2d:ce:7c:66:e4:93:94:0c:b3:66:95:
60:c9:27:f5:c8:dc:7a:b4:b5:e7:1d:da:03:5a:02:99:21:5a:
1f:03:5e:fb:06:8b:77:e0:3d:41:19:48:9f:c4:00:81:18:44:
62:e2:c8:cf:07:0d:1e:c8:d9:65:9a:79:5c:68:bf:16:05:3a:
de:6b:63:0b:c6:03:2f:db:90:88:dd:ea:64:f7:d9:d2:86:93:
7b:fd:53:fb:d3:32:e4:b8:66:0f:04:78:d3:41:ee:3b:f5:74:
00:1d:9c:97:2b:cf:eb:b0:92:b9:d3:19:ce:f2:a8:f8:2e:ec:
e3:b3:e8:b7:08:3e:b2:2f:16:e3:0c:1c:ba:71:0c:f4:99:e4:
2f:a9:ad:f2:fb:cd:9a:07:24:bf:fd:06:20:49:11:3e:8b:ed:
5b:34:a9:ef:87:a8:5d:5a:8a:49:f8:af:2e:59:32:2e:8b:02:
18:cb:79:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:50:38 2025 by rpki-client