Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: BT6Zdavum+zzzSxcMQsqZWU6zIHSiYDc4YS5eQI/yQQ=
Subject key identifier: 28:A2:CA:A7:CE:8D:CF:66:7F:34:B3:AD:0F:37:22:81:86:D5:CA:5E
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 0197432EB6D1B040D79E22CEB523CBBBF123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 01CA
Signing time: Fri 06 Jun 2025 03:00:24 +0000
Manifest this update: Fri 06 Jun 2025 03:00:24 +0000
Manifest next update: Sat 07 Jun 2025 03:00:24 +0000
Files and hashes: 1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=)
2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: aSI6g/ydXKg5Jp1P+HueV6ClVWit+Y2m9Rvur6EDMek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:2e:b6:d1:b0:40:d7:9e:22:ce:b5:23:cb:bb:f1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Jun 6 03:00:24 2025 GMT
Not After : Jun 7 03:00:24 2025 GMT
Subject: CN=28a2caa7ce8dcf667f34b3ad0f37228186d5ca5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:65:89:ff:84:5a:6b:e6:78:2e:c1:98:19:
88:14:43:4d:98:63:be:f7:9e:11:c4:75:3b:f6:7e:
77:8d:0e:e0:fd:95:43:d4:11:84:94:52:7a:16:26:
95:cb:4e:8b:61:55:c6:30:d6:48:c6:d8:87:bd:cd:
c9:1f:26:87:e0:df:7b:20:19:69:8b:7e:1a:11:fb:
55:88:4c:7c:3a:8f:bf:3d:bb:7f:36:cb:6e:f2:51:
bc:e0:1b:4b:c2:e0:df:ca:18:0c:6b:33:f2:15:ca:
2b:2d:b1:8f:c0:f7:f2:9e:d5:14:4c:d9:c8:16:1c:
07:43:5d:58:62:83:fc:2c:e1:36:94:e8:14:30:c1:
ba:6d:f7:a8:03:8d:3d:6c:24:18:03:9b:84:5d:c6:
b4:85:dd:0a:2f:24:64:65:b3:2d:2b:81:4d:40:7b:
70:5a:07:3a:22:f2:35:51:b0:a9:76:a4:32:28:61:
b0:c0:61:f3:a5:12:8a:ac:22:bd:4d:10:83:f0:8a:
30:5c:77:2d:76:69:6b:55:f1:7b:d2:8a:e1:5b:0f:
05:58:48:0a:20:fa:b0:17:f4:05:63:f7:07:22:13:
c2:e4:0c:6e:ff:09:41:b6:7c:6d:04:ce:fc:f7:9a:
ee:99:a1:0b:9a:be:d1:39:12:a7:44:26:a0:70:b1:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A2:CA:A7:CE:8D:CF:66:7F:34:B3:AD:0F:37:22:81:86:D5:CA:5E
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a9:01:7a:1b:4a:c8:02:fa:49:d2:6f:6d:25:3c:33:8d:79:
67:00:87:cd:fa:29:c1:24:3e:29:bb:e8:c7:a6:c8:e2:e3:c3:
39:3b:f1:99:a9:0a:7c:e8:a9:f5:56:4d:4b:3d:06:a8:82:41:
8a:c3:fa:85:13:d8:af:8c:dc:7d:df:b3:e2:32:da:7e:6d:db:
0a:39:fd:76:0e:b8:33:e9:83:44:41:31:80:8e:5a:80:3c:37:
11:4b:7f:91:84:9c:68:54:d5:f3:0f:b5:76:69:98:78:db:df:
16:bc:5c:50:c3:d9:c0:c7:93:eb:1c:9a:3a:46:a3:32:5d:7c:
2f:b8:38:0a:ce:d8:7c:b1:ed:e2:e3:43:cd:0e:94:5f:55:41:
27:01:f5:78:b1:f4:37:6f:e4:40:eb:bf:be:fd:f9:94:39:08:
00:92:16:0a:93:51:be:01:02:a7:54:46:fa:6b:ca:07:d9:33:
82:31:47:74:65:8d:af:40:13:dc:8a:f1:66:26:3a:dc:36:de:
d0:59:4f:cd:0c:63:f1:20:2c:91:8b:e9:5a:40:f9:c9:91:e1:
87:b0:1a:46:b9:d1:53:08:8c:9d:2e:3a:e4:e0:9e:db:2c:ba:
ae:59:53:57:21:19:30:9b:61:ff:24:53:95:d3:9f:b3:28:c9:
11:5d:c4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 10:59:58 2025 by rpki-client