Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier: 0wiEw7x8j99/yQ4SEM2hBgaLOmV6duNOFHB2bH0nzJA=
Subject key identifier: 58:D0:2F:5A:1B:F3:70:4E:B9:06:F8:32:D1:E1:27:32:E7:60:9A:2F
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 0197462FD746D00DCE7B1EA25FF0254A6D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number: 10FE
Signing time: Fri 06 Jun 2025 17:00:29 +0000
Manifest this update: Fri 06 Jun 2025 17:00:29 +0000
Manifest next update: Sat 07 Jun 2025 17:00:29 +0000
Files and hashes: 1: 6jo1mW4jr6vxQFyb8Lr2xYFki74.roa (hash: I0t7VLBXEu80++dNJuv+glJrgnKcO3XEc9lYhQefY9A=)
2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: lGCDMsIwDzOpjsFMBt7nJEA529ku6fZ1j5PXWmr59p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:d7:46:d0:0d:ce:7b:1e:a2:5f:f0:25:4a:6d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: Jun 6 17:00:29 2025 GMT
Not After : Jun 7 17:00:29 2025 GMT
Subject: CN=58d02f5a1bf3704eb906f832d1e12732e7609a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:44:8e:be:5c:18:27:3c:79:d4:94:97:27:
01:cb:f0:6b:83:ef:31:7f:60:8d:f5:86:5f:e1:95:
10:a6:5d:df:e1:e0:91:31:4f:8f:41:87:f5:b3:a1:
10:02:69:09:14:ab:55:9d:58:50:15:27:fc:eb:67:
7b:0e:c3:08:8d:f0:29:8c:5b:2f:cc:ef:7d:8a:75:
7c:63:78:33:46:ac:63:2d:af:51:d3:11:ee:1a:70:
b2:74:e1:08:f0:a2:d6:94:02:2e:b8:f9:89:3d:2c:
0a:c6:03:c4:99:d6:63:79:84:6d:e3:96:aa:a8:b5:
a1:e1:76:b3:5e:d8:ab:b8:1a:29:5b:46:b4:a9:7e:
1a:e4:db:da:e7:b0:3a:64:2a:9a:a2:81:99:b6:ba:
0c:ac:bc:74:29:bc:a1:9c:6b:06:d0:17:7e:0f:3f:
84:a3:d5:44:48:41:aa:a3:6e:03:eb:ae:dc:d4:b1:
04:ea:6e:05:fd:59:59:4d:dc:e8:2a:3b:ee:d2:73:
f2:7a:46:0a:21:bb:20:20:67:7b:3b:02:ba:f3:39:
6b:b6:db:25:ee:5f:0a:17:0b:cb:09:2a:30:47:82:
4e:f5:f5:29:e5:a9:ce:97:5b:74:63:0c:bc:be:ae:
d0:fe:76:0f:7d:5f:4a:67:a9:bd:8a:e9:c5:fa:9d:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D0:2F:5A:1B:F3:70:4E:B9:06:F8:32:D1:E1:27:32:E7:60:9A:2F
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b1:12:c0:8f:a8:37:26:b8:fa:2a:3d:81:80:a7:83:28:6d:
45:3e:fb:60:74:a2:42:c6:8d:94:13:0e:b9:d1:f7:87:fe:5c:
15:d5:86:aa:8e:62:09:1f:84:88:c1:43:0c:1c:d6:e2:44:22:
22:d0:e9:ee:59:76:3e:7b:67:2b:60:cd:2e:4d:44:e9:e6:f2:
14:a0:c5:e8:e3:5a:cc:52:04:83:44:2c:3c:2b:f9:09:f5:f4:
b3:c9:98:4d:75:e4:34:86:07:c7:9f:63:01:74:86:bc:98:be:
11:c6:4e:04:9a:60:87:77:7c:d4:d8:09:27:f2:40:9a:1c:5e:
79:f2:2d:9c:7d:39:60:6d:61:db:6c:10:ab:98:45:5a:66:7b:
97:07:06:43:a5:b8:cd:6e:26:6d:5f:c0:ef:c7:97:bf:66:25:
5b:24:fc:a4:29:4d:fd:43:22:a1:f2:bd:bc:fc:09:de:45:cf:
f5:cb:ae:c2:68:f4:5d:02:fa:6f:73:9e:77:e4:b6:b3:83:3f:
4b:92:1b:7c:9e:74:99:ca:36:00:f1:6f:5f:06:27:f0:9f:c8:
b7:87:f4:98:0b:b2:d1:9f:32:de:13:4a:6e:3f:11:02:d0:54:
cc:fc:08:d4:64:4d:41:b6:9a:e3:3f:17:4a:a9:d5:02:e3:09:
7a:95:12:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:52:32 2025 by rpki-client