Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File: Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier: cjQzI62+8Ho3Hx6zanRAxDeP3+8naA5njPzjxfZsUXY=
Subject key identifier: 66:BD:10:FB:1E:F2:AD:80:85:3B:86:3D:CE:1B:D3:D6:18:D9:40:16
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer: /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial: 0197463026C534F286492AD10077709D643D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number: 58
Signing time: Fri 06 Jun 2025 17:00:50 +0000
Manifest this update: Fri 06 Jun 2025 17:00:50 +0000
Manifest next update: Sat 07 Jun 2025 17:00:50 +0000
Files and hashes: 1: 9MjXTd2Lr1yJdEmK8CTeSoInorE.roa (hash: YWK7+nRLe8UfaY8PNHmd6MYAPs7Oj1F/tL2OOejEg1M=)
2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: VkeraU09nbJBrVynqCV0xqtcgAh9f/eMXZ1TIOn4DlQ=)
3: hGPKpUabfTwURA6WsciuOkTPGQI.roa (hash: KEkDVhj8xqmITURn5vzg3xzmIbncL3eYEldek/45XYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:26:c5:34:f2:86:49:2a:d1:00:77:70:9d:64:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Validity
Not Before: Jun 6 17:00:50 2025 GMT
Not After : Jun 7 17:00:50 2025 GMT
Subject: CN=66bd10fb1ef2ad80853b863dce1bd3d618d94016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9b:d1:d2:0b:35:63:ee:eb:1d:2f:fd:2f:10:
50:15:a2:21:61:a2:92:d6:39:78:0a:6b:ee:17:e9:
3c:52:d7:71:bc:3a:23:b7:05:45:90:17:86:1a:fe:
e2:3e:99:57:48:29:f2:2c:1e:f5:00:a5:19:d4:e7:
45:69:06:16:08:6d:ec:a6:40:65:57:5a:10:06:a9:
40:ff:bf:5a:ab:93:38:34:fe:c6:1d:77:79:bb:3f:
16:d9:a3:45:6e:21:a7:2e:73:7a:a6:49:5c:22:df:
5c:df:1f:21:fe:c3:fe:7b:95:5f:b5:db:7f:f1:c6:
e4:c9:a6:b9:15:88:7d:d1:36:89:5e:4e:9e:11:b6:
b6:2c:23:52:45:73:0f:ad:34:46:ec:ed:20:9a:e8:
43:37:83:ea:71:15:ef:28:d4:51:96:ac:2f:2c:3e:
ac:50:2a:2b:12:65:77:57:f9:e1:6f:d5:cd:44:40:
86:1f:aa:18:a1:0f:f5:df:fa:1b:6e:80:8d:57:5b:
8f:12:36:9a:ae:d9:b6:78:14:91:92:86:13:95:43:
0d:e3:71:e0:49:51:da:52:ca:f5:b9:24:c0:2e:2f:
c5:e3:38:14:aa:75:3f:f9:a6:42:93:c1:aa:90:38:
7a:c1:9c:7a:e7:64:92:b3:0c:b8:d0:21:1f:2a:82:
5f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BD:10:FB:1E:F2:AD:80:85:3B:86:3D:CE:1B:D3:D6:18:D9:40:16
X509v3 Authority Key Identifier:
keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f2:a4:a1:ba:8e:9d:59:37:d1:8e:f3:be:1b:48:99:13:f1:
e3:63:ed:be:1d:aa:b3:87:bf:21:af:83:92:41:88:54:a7:d5:
49:d6:ab:ec:21:3b:7c:af:ec:91:34:54:a8:e3:77:30:6b:14:
b9:47:d0:33:10:32:f3:49:87:e6:91:c7:44:18:18:be:9a:81:
cc:d8:95:bd:2f:28:ae:25:4f:63:21:a4:bc:59:33:6f:0b:6c:
56:e5:c3:50:16:67:14:5a:d0:1a:75:a3:27:f1:05:9d:c5:9d:
32:08:07:f7:95:3e:d4:b1:d1:85:42:f4:81:f3:d0:be:1a:d4:
95:f8:e0:64:ee:c5:a8:0d:b8:ff:45:4e:8f:2b:29:6e:60:1a:
66:3d:31:07:0c:70:be:83:14:22:7c:d3:c8:2f:10:a3:d4:ea:
b3:85:29:d4:43:c4:79:31:75:6f:4c:ee:19:6d:20:85:87:96:
2f:f0:e1:1a:66:6e:d4:bf:66:dd:47:1a:e1:4c:16:c2:3b:03:
64:5c:47:6e:47:6e:60:9e:ae:29:a7:e1:f0:16:f1:c1:f9:1f:
59:fb:8f:16:bd:05:14:02:35:f9:89:dd:6d:50:ea:ef:da:0f:
34:08:83:b5:10:5f:71:46:8d:25:6a:4b:90:29:9e:d4:ad:ce:
be:84:21:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:16 2025 by rpki-client