Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
File: zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft (raw, json)
Hash identifier: pm/RzbOjQ1opw5mvsLDdHLKqx4qdlLC3gULUZ1EhZtU=
Subject key identifier: 14:13:98:EC:AA:D2:BD:7E:AC:47:4A:E5:07:C8:92:D2:C4:15:82:81
Authority key identifier: CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
Certificate issuer: /CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Certificate serial: 01974967E10467577CDDFA91F569744CCF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 08:00:33 +0000
Manifest this update: Sat 07 Jun 2025 08:00:33 +0000
Manifest next update: Sun 08 Jun 2025 08:00:33 +0000
Files and hashes: 1: EsoIIrFbYFhVDfj6th4jhjn8bMs.roa (hash: QXxOo7J9CTQ0vAhyPXgGF7t6YymxNb/k2gt5l3VWLEM=)
2: zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl (hash: 1rMIg3gCwN8uf4i4th9BwdEoZnoPRuJ+faG+hswycJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:e1:04:67:57:7c:dd:fa:91:f5:69:74:4c:cf:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Validity
Not Before: Jun 7 08:00:33 2025 GMT
Not After : Jun 8 08:00:33 2025 GMT
Subject: CN=141398ecaad2bd7eac474ae507c892d2c4158281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7a:3c:2a:53:46:87:5b:c6:03:23:74:88:75:
62:0b:88:b9:6b:f1:d0:cc:6f:e6:08:c9:a7:10:d6:
b4:a1:4e:2b:d1:ef:ac:65:56:a4:88:bb:86:ad:8a:
9e:fb:3e:5a:f5:f5:95:11:46:97:8b:81:a2:eb:78:
5e:3f:2f:36:a8:55:c3:60:2b:cb:57:8f:d4:83:72:
36:fe:39:a3:b7:60:7a:12:e6:8d:30:e8:ca:ba:48:
8d:c8:cc:55:93:2c:e5:73:e0:02:5b:fa:3b:fd:48:
d7:dd:ad:b1:1d:a5:47:c3:d5:94:44:fb:cc:89:92:
34:2e:b8:6d:73:43:71:0f:c3:7a:a9:58:48:87:7f:
82:f6:46:c1:96:d8:a9:fe:34:24:f0:cd:3b:d0:6b:
61:4a:de:ad:3d:ac:47:4a:59:de:7b:0a:39:b5:d2:
6e:3c:30:d0:23:54:79:b8:be:0f:8c:46:77:d8:4e:
4b:47:b7:95:fd:33:00:d6:90:b3:27:ef:37:9d:a1:
c9:cc:5a:b9:fe:33:f4:13:f0:fb:d2:d4:9d:9e:19:
5d:0a:41:c0:78:e1:5c:af:e9:dc:9c:f7:9e:c2:fa:
af:ae:0f:b1:d0:57:1b:5f:a3:ae:aa:88:76:ce:02:
d8:a7:29:c7:db:0f:6f:e3:54:b3:81:6b:0d:9e:0c:
5c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:13:98:EC:AA:D2:BD:7E:AC:47:4A:E5:07:C8:92:D2:C4:15:82:81
X509v3 Authority Key Identifier:
keyid:CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:68:0a:30:fd:84:bb:cd:7f:a5:cf:30:13:87:58:5a:ab:f0:
95:d7:e9:38:e6:1a:3f:7c:f9:46:16:83:87:b3:d0:6a:dc:a3:
2f:a5:0d:c1:4e:e6:39:25:5d:84:3b:6e:5f:0e:a4:0b:88:e9:
d9:74:5f:88:ce:07:13:f5:30:c7:7f:bd:4f:29:4e:82:60:a9:
02:3a:81:ee:1f:a7:2a:79:46:12:7e:90:23:56:65:34:fa:22:
0f:ac:25:73:51:fe:6e:d6:d4:03:db:4b:11:4c:63:ac:57:d9:
d0:b6:f7:5b:e2:2b:17:ac:f8:4d:39:9e:41:7d:bd:f0:66:e6:
d1:29:8b:50:8a:61:49:38:83:f2:2a:4d:5d:ef:ae:f5:84:36:
3a:16:4f:7e:89:53:d8:87:2d:95:82:52:72:0c:2f:76:09:e8:
88:1b:b8:ee:ca:c5:1d:d8:07:a1:2b:0c:c1:58:88:53:23:f5:
cc:70:f3:69:3c:aa:9a:73:70:5e:6a:95:20:1a:10:d8:fe:73:
73:2e:fb:a9:2e:18:0a:d4:b6:0e:b3:52:12:bf:6b:ef:7b:e5:
19:4b:18:91:36:ab:c2:a6:95:31:7a:2c:52:ed:69:92:a5:8a:
ad:f9:55:57:8d:7a:cb:13:1a:67:55:6f:e0:d3:dc:c8:4c:df:
f1:bd:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:09:36 2025 by rpki-client