Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
File: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft (raw, json)
Hash identifier: Cgq1d7VHz4GwEYNkGVyQyHS5ff6nbIdAIP9qd16eXIg=
Subject key identifier: 35:D9:87:0D:36:CB:32:2D:E8:11:68:2A:61:02:FD:1D:E3:16:8B:87
Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
Certificate issuer: /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Certificate serial: 01974B8D49B0980917537FE919EB3547B34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
Manifest number: 12C0
Signing time: Sat 07 Jun 2025 18:00:40 +0000
Manifest this update: Sat 07 Jun 2025 18:00:40 +0000
Manifest next update: Sun 08 Jun 2025 18:00:40 +0000
Files and hashes: 1: C_tBNxeBdMQFQvAqAIQOAGk3NV0.roa (hash: ytHvNr9cmIrq9gpmtc0zxz6E+7ODTCXhvZEm/AZ4ML0=)
2: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl (hash: 4Vb4qGX6QyGBtG9oi9n9YMzWNhqe8IlDHOTXq8vFWVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:49:b0:98:09:17:53:7f:e9:19:eb:35:47:b3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Validity
Not Before: Jun 7 18:00:40 2025 GMT
Not After : Jun 8 18:00:40 2025 GMT
Subject: CN=35d9870d36cb322de811682a6102fd1de3168b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:18:ae:b9:6f:bb:db:21:82:95:0f:b8:98:
41:17:2e:42:6e:a1:90:94:ef:8a:ac:8a:12:fc:c9:
e1:84:53:43:23:f6:f3:c1:e0:62:0a:a0:ac:2a:51:
26:13:66:91:a8:7e:01:f8:3d:d3:5d:5d:4f:11:f3:
db:45:f7:85:82:74:33:ef:85:4c:8f:3b:a6:d5:cf:
c3:94:47:18:40:d3:0e:f2:c9:30:2d:0d:6e:55:bf:
d1:56:bc:35:97:9f:ea:a1:cb:97:db:61:0f:da:3a:
90:a1:88:2a:f8:13:58:cb:07:c8:6f:20:0f:a4:55:
95:16:cd:9c:15:8b:82:1e:be:bd:66:a6:57:ef:9d:
71:c6:f5:6e:2b:9d:bf:4c:07:df:65:5b:79:a4:9e:
3d:bf:82:91:71:b7:32:ff:7e:cb:48:5a:d2:df:fb:
80:68:50:56:6c:9a:99:85:50:23:8b:9d:22:40:f7:
4e:99:72:76:0a:20:3b:7d:92:96:fa:d0:9b:45:ed:
5b:bc:ca:e0:00:dd:e7:c2:32:94:a4:6f:1c:34:02:
cf:1f:9f:54:6b:0d:3c:0c:8f:fa:32:e7:86:51:6e:
a8:02:f4:c8:85:3d:9f:b2:92:4f:d9:3d:df:69:77:
bc:d2:8f:a9:c0:eb:05:10:a6:61:39:05:37:8d:8c:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D9:87:0D:36:CB:32:2D:E8:11:68:2A:61:02:FD:1D:E3:16:8B:87
X509v3 Authority Key Identifier:
keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f0:3c:40:82:02:6a:cc:19:0e:24:f1:72:8a:7e:bf:d3:52:
72:ea:77:f3:23:a5:f5:ce:ec:51:58:39:38:a8:25:1f:c8:b7:
c8:b2:80:b1:8d:0b:30:68:95:d4:0f:65:26:82:1d:98:fc:71:
b4:81:90:a8:57:75:61:55:ec:0d:49:45:f7:bf:9c:c5:c7:21:
89:7c:dc:04:9c:71:96:aa:49:a2:5c:8e:1e:db:1f:5a:e9:60:
66:be:8c:84:00:18:cb:45:3b:49:07:e6:31:ca:1e:17:59:3d:
ae:93:56:66:54:14:c7:f0:df:d0:65:2d:98:6b:9e:4a:16:75:
cd:54:a2:6a:e7:e3:37:58:86:2a:94:d6:a3:1f:61:1b:bb:72:
09:3d:5b:4b:a2:3e:92:c3:c8:37:31:f3:eb:b3:ec:24:cd:0a:
12:fa:12:5e:54:ab:a7:f3:6d:ca:85:5a:26:2a:ab:46:bd:1b:
9e:b9:5f:f0:28:9a:ab:67:ac:26:c0:08:cb:cb:15:b1:df:ec:
f0:e5:df:f8:90:7f:1c:16:48:23:d4:4d:6f:3d:be:97:28:ae:
23:2b:91:c2:89:87:93:97:fe:d8:51:8b:a4:3c:3d:66:4b:4f:
c9:21:e7:36:43:53:ec:a1:4c:72:ad:3e:dd:3d:24:3f:0a:9d:
e2:5d:9d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:19:57 2025 by rpki-client