Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier: m586sGHqlArr3KjMreKiUXpNKl8/eRfxEiAF+KVehL0=
Subject key identifier: 97:AF:C9:3B:EE:21:1A:85:2B:F8:44:ED:C7:C3:8B:6D:8E:79:20:A3
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 01974A0CF51C67F2025FB68DDAFFAC7304E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number: 1590
Signing time: Sat 07 Jun 2025 11:00:52 +0000
Manifest this update: Sat 07 Jun 2025 11:00:52 +0000
Manifest next update: Sun 08 Jun 2025 11:00:52 +0000
Files and hashes: 1: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: AQUY4jb5jryoFmXhuSXwyMK0GgIHD758c5Nb07Nyi70=)
2: nTDhf9VvaUWtGXfSXd6ZXiNxw-A.roa (hash: TEsr7FEvfPnHZkOwTNPtPOQvAkTL24+b73nNoo3Z3WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:f5:1c:67:f2:02:5f:b6:8d:da:ff:ac:73:04:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Jun 7 11:00:52 2025 GMT
Not After : Jun 8 11:00:52 2025 GMT
Subject: CN=97afc93bee211a852bf844edc7c38b6d8e7920a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:e8:d2:23:d4:21:6e:0e:d1:63:68:a3:96:
b9:53:39:29:1e:85:3d:75:93:a8:0e:be:e2:33:ff:
0b:7d:9b:df:43:14:25:d9:f2:08:db:1e:72:09:2c:
61:fe:c6:54:ff:f3:f7:4e:f8:2a:7d:09:a9:74:b9:
b5:ba:ae:43:a0:8f:1a:d6:62:c0:7e:00:53:01:f4:
9d:19:92:0e:6e:e0:ec:5f:65:d9:ee:5a:63:06:df:
bb:b6:1b:3d:d8:d0:41:eb:61:20:e1:70:9b:72:c9:
81:2a:3d:d3:6f:25:37:31:31:a5:23:db:8b:b0:7c:
2f:70:bb:89:9b:0f:11:ed:3f:91:40:c5:f9:2a:7a:
c4:b3:6a:ae:ac:39:59:01:66:ba:37:0f:9e:ef:64:
cb:91:e7:c6:64:dd:1a:d0:e4:73:66:59:74:c3:bb:
51:a8:4e:a6:fb:a8:df:50:1b:e4:0c:cf:69:15:26:
be:95:c7:10:87:57:72:71:2c:7c:c5:dc:f0:ac:4c:
4e:fc:2b:99:a4:47:5b:e7:6a:c3:73:3d:81:e6:8b:
15:cc:37:b2:b8:77:d2:d6:95:0c:e6:c2:78:44:22:
36:32:d3:b7:3b:25:ed:05:dc:47:54:b5:2e:d8:14:
d5:8b:d6:13:f6:0f:49:0d:cf:cf:f8:f6:3f:55:ab:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AF:C9:3B:EE:21:1A:85:2B:F8:44:ED:C7:C3:8B:6D:8E:79:20:A3
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:9f:49:bf:c6:84:10:f0:9c:96:7c:57:c1:a4:9f:19:49:e7:
ce:2e:19:c8:dd:e1:e4:0e:b2:e7:8d:51:7a:0b:de:d7:9f:31:
08:36:6c:88:7c:0a:c3:38:3a:49:9a:8a:41:ca:e9:76:c6:bc:
29:2f:7d:fc:1f:85:d3:08:1f:bc:bc:b0:68:38:45:f8:8b:30:
2f:d4:14:ab:56:f6:13:3f:74:d2:7d:40:31:33:89:e7:cf:7c:
0d:68:29:8f:8d:56:87:a9:df:20:a9:5e:44:07:e1:d3:a1:e1:
57:1b:3b:02:b5:2c:7e:e7:5b:b8:e9:c9:b3:c4:30:a9:07:a0:
ca:a1:c5:8d:af:43:cf:06:dc:34:d9:69:e3:80:f2:bf:5d:b2:
87:d4:3f:7f:4c:65:df:6a:60:28:9d:86:4b:95:80:df:98:04:
c5:73:f3:e8:c2:8b:9f:b0:df:d7:18:45:3c:ef:08:96:58:1f:
d4:4d:7a:ab:23:eb:b5:82:74:6e:91:23:a9:1a:df:58:8a:7e:
86:3f:41:ad:19:19:84:bd:60:f9:86:7d:e4:76:95:d0:3a:b5:
fd:d8:72:25:d5:48:a5:e4:87:37:b4:31:b8:bf:72:38:00:04:
35:c3:ed:ae:c1:1d:fb:17:03:a9:60:6e:d6:9c:b0:39:4d:61:
ec:86:7b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:20 2025 by rpki-client