Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
File: fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json)
Hash identifier: PnBwrZZZuqOeD0WnrNmiP0kKOvlXaZLhT8n58h52C/0=
Subject key identifier: B5:99:E2:FE:67:8A:0B:05:AA:BE:3E:AC:91:EF:05:60:48:4E:14:55
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial: 01974A4380F96681A31A86547FFA498FFCC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
Manifest number: 0ADE
Signing time: Sat 07 Jun 2025 12:00:27 +0000
Manifest this update: Sat 07 Jun 2025 12:00:27 +0000
Manifest next update: Sun 08 Jun 2025 12:00:27 +0000
Files and hashes: 1: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: BAg+GEo97I81dqZ42VoyUn7KI1uvid/WZoTuKiwy4mk=)
2: mXWmJZwIRdfowUzFV6EabzHZO1M.roa (hash: k+dckJef8uAl2tggOKFrpt5ypzOEodrfcc+zZEAtNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:80:f9:66:81:a3:1a:86:54:7f:fa:49:8f:fc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9656d5867b43ce506445290bba705722260586
Validity
Not Before: Jun 7 12:00:27 2025 GMT
Not After : Jun 8 12:00:27 2025 GMT
Subject: CN=b599e2fe678a0b05aabe3eac91ef0560484e1455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:a4:de:e2:58:4f:9b:4a:ff:ed:13:2b:30:
52:39:f5:1e:e4:f2:11:b7:99:54:96:3a:28:e9:13:
c8:4b:2b:de:19:eb:a9:55:ed:b8:3e:fc:40:95:84:
fd:6c:f5:51:bf:d3:6e:f6:3a:2d:f1:29:32:57:80:
89:49:d1:e0:a2:70:9b:cd:07:0a:b1:5d:13:f9:60:
55:ee:04:47:6e:b5:1d:bf:2a:1a:5d:ef:f5:6d:f7:
8f:5a:4a:e1:2e:a6:fb:89:c7:21:e2:d4:9e:24:d7:
3b:e6:1f:ad:40:dd:e0:5e:d1:45:c6:06:14:c4:1b:
26:4f:31:19:5f:db:95:db:b1:34:da:22:08:0e:d0:
4e:bc:9d:f7:b8:cd:2a:d1:65:e4:68:b1:a4:0b:cd:
db:46:4a:65:7a:33:a4:cd:1d:ca:b6:84:11:4a:1c:
44:5b:ae:4a:a8:97:6b:2c:4f:43:b1:5f:ea:e5:29:
a3:78:40:af:61:18:a9:e5:dc:40:99:3a:8b:04:e2:
6f:a4:d7:71:3d:e8:61:22:c7:75:87:d3:15:6b:a1:
e2:7f:cc:c4:e9:68:ba:0e:cc:4d:06:d8:45:07:f9:
ef:3e:98:a3:4a:98:0d:1a:f6:94:1d:43:e4:34:16:
78:f1:5d:3c:84:52:d1:5f:01:59:9b:01:05:b7:b0:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:99:E2:FE:67:8A:0B:05:AA:BE:3E:AC:91:EF:05:60:48:4E:14:55
X509v3 Authority Key Identifier:
keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:35:88:b1:ab:fd:e0:ef:2a:fa:48:8d:92:13:75:f2:ad:15:
ff:4a:a1:22:d4:63:b9:33:54:32:61:26:89:f3:b5:f0:d8:39:
57:4b:6b:d1:07:f5:d3:6f:48:a1:5e:1d:bb:db:ec:b1:58:a8:
13:82:bd:f6:1f:4c:60:b1:aa:25:b1:79:cf:50:a4:ba:be:ea:
96:b9:3b:f1:a3:9f:86:5d:39:dc:fb:cc:4a:78:f5:84:a9:ad:
f3:68:a3:db:2b:b9:c5:31:c0:ff:47:36:6c:55:b7:f7:2e:a6:
d0:a5:b6:a3:7a:24:d2:b3:82:55:36:3a:21:ac:09:38:a7:73:
2d:0c:ff:04:cf:d0:47:0b:27:05:d7:7b:e1:e7:56:55:1e:4f:
0e:71:f8:c6:3e:af:d4:4d:ce:58:65:06:38:e1:4c:83:53:b8:
08:8a:8a:d3:f7:c8:f3:55:1c:70:c9:07:59:59:0e:d4:3d:20:
73:97:68:88:ed:e2:c4:1e:b8:ae:3f:93:78:b0:5d:6a:53:d4:
78:82:b7:98:25:c1:55:5c:85:e9:be:d6:2e:11:58:f4:dd:83:
f3:2a:ed:63:97:c5:38:a7:7a:89:7c:95:4b:8f:d5:84:9b:9a:
d5:d2:ba:22:7d:f5:18:6a:62:9e:c9:92:98:16:b8:7b:e4:4f:
2a:1f:b6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:24:35 2025 by rpki-client