Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
File: Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft (raw, json)
Hash identifier: QBSOhAR48K521cUQwDzUWCVTLBzG4wjVpVVakxvxpto=
Subject key identifier: 81:73:B3:61:0B:3F:EA:2E:81:DA:48:EA:4B:99:C5:61:D9:46:D1:BE
Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
Certificate issuer: /CN=6798580bb843519c104420e59c0b5c2403414607
Certificate serial: 0197D3CF0AB9C4F322E65190E404C13A0C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
Manifest number: 0C01
Signing time: Fri 04 Jul 2025 05:00:50 +0000
Manifest this update: Fri 04 Jul 2025 05:00:50 +0000
Manifest next update: Sat 05 Jul 2025 05:00:50 +0000
Files and hashes: 1: GVUeOB4dXXqj9XML1jN57j3Df5M.roa (hash: Gudd1ItpySLdTVSh5GugJVCfXdpguWaKVtT1YrB4g6U=)
2: Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl (hash: ApCi/uX572hwJRvsKRxBMuyKmEGs7N3hFKTjOh36cmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:cf:0a:b9:c4:f3:22:e6:51:90:e4:04:c1:3a:0c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6798580bb843519c104420e59c0b5c2403414607
Validity
Not Before: Jul 4 05:00:50 2025 GMT
Not After : Jul 5 05:00:50 2025 GMT
Subject: CN=8173b3610b3fea2e81da48ea4b99c561d946d1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:46:88:35:ca:eb:ad:68:3f:b9:85:85:ea:
64:dd:d2:67:00:64:b7:6a:d7:8f:29:da:f0:49:77:
93:10:9e:f2:1a:65:c5:8d:36:7c:55:71:85:25:12:
0f:e4:39:fb:fc:9a:c8:6e:5d:71:27:46:a8:cf:f5:
f6:b4:65:1e:2c:c0:c0:83:57:82:72:ed:5d:39:4a:
2b:25:50:1f:2d:35:d2:d3:04:0d:5f:41:a9:0e:26:
96:91:a6:d8:95:46:02:c8:1f:25:3d:10:83:3f:56:
e5:41:ef:6e:b3:4e:95:6b:dc:92:64:8a:b2:39:19:
b0:83:26:e5:c3:89:8b:7e:72:dd:2b:45:8a:c0:de:
b7:c2:3e:9e:d5:fa:d1:56:35:6e:51:21:92:23:ff:
c9:07:6a:be:1a:e6:b2:83:99:9a:b9:04:ea:4a:9f:
d5:f9:9a:8d:65:a9:e0:e2:a0:78:09:bf:58:9c:75:
c2:be:8e:02:ce:31:26:2a:5d:3b:23:59:0a:5d:7f:
ed:eb:88:5b:21:a6:68:eb:60:f1:87:6d:c2:a9:b0:
dd:9b:8b:3d:f4:70:34:2b:49:16:e6:a7:bc:6e:7e:
a8:a9:75:08:f1:36:71:e5:24:b8:4c:fc:6f:84:8a:
bc:e3:d2:85:87:40:5d:47:96:f0:d9:33:d0:36:46:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:73:B3:61:0B:3F:EA:2E:81:DA:48:EA:4B:99:C5:61:D9:46:D1:BE
X509v3 Authority Key Identifier:
keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ce:b6:f9:31:c4:81:44:eb:84:a4:6d:cb:5c:d9:4d:4d:0c:
8c:6b:39:97:9d:ce:69:eb:da:2c:d0:63:5b:27:41:18:43:e7:
6e:f4:3e:24:8c:1d:d6:78:1a:3e:24:cf:4a:d3:e5:ed:4c:ba:
be:d1:a8:2c:3f:78:45:4f:aa:fa:20:12:c0:05:9f:1f:1e:59:
0b:ab:fe:4b:65:71:25:e0:62:66:c9:48:c2:6a:6d:be:f4:1e:
d7:3f:39:03:6b:fb:16:a9:76:c7:f2:f4:4e:d8:10:91:38:59:
23:56:79:19:63:67:90:03:bc:d0:a2:26:74:c9:3b:c2:ff:1a:
e8:40:eb:f6:e6:d7:1c:b5:47:48:fe:50:07:76:d5:f7:2a:c7:
ab:af:75:de:cc:da:e1:4e:4c:84:fb:75:e5:b8:eb:ae:e8:bd:
ee:4e:26:29:69:94:bd:57:64:df:d9:6a:b9:7c:ff:10:55:59:
87:d8:28:e9:7c:68:5e:ec:2a:89:e1:55:03:77:9e:22:f3:0d:
75:c2:6d:8e:5d:81:95:40:9d:15:4e:3b:40:4a:6a:fe:87:24:
4e:8d:37:6f:71:26:a7:13:fd:e0:6d:66:ee:5a:f2:78:b0:fb:
13:c6:10:7e:37:82:aa:a7:e2:7c:82:3c:00:53:b8:52:46:ba:
01:5b:4c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:52:49 2025 by rpki-client