Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
File: rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json)
Hash identifier: AmYZWLaz0AEmS4ftFhK2SXp/NCvLDWI9N6OdXoV7Id4=
Subject key identifier: 87:B6:29:A3:05:D9:FA:A2:57:27:2A:56:F7:56:E1:69:44:95:24:13
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial: 0197C914C95C4E637252B7C0EE7E5BF32A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
Manifest number: 15BC
Signing time: Wed 02 Jul 2025 03:01:12 +0000
Manifest this update: Wed 02 Jul 2025 03:01:12 +0000
Manifest next update: Thu 03 Jul 2025 03:01:12 +0000
Files and hashes: 1: jlnSpYKnKgIEV_ZJFnqA1zdm8Xc.roa (hash: W+tCfuFHaZiswjzfI3LjlAyiu6GbDCuHiVsPBGynsaw=)
2: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: 1QsYVEs4DQvmAsLyT6ep9Kviqr8P8fXqc/pUQIGSezI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:14:c9:5c:4e:63:72:52:b7:c0:ee:7e:5b:f3:2a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Validity
Not Before: Jul 2 03:01:12 2025 GMT
Not After : Jul 3 03:01:12 2025 GMT
Subject: CN=87b629a305d9faa257272a56f756e16944952413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:d7:2a:eb:90:8b:4c:e4:86:fe:3f:d4:89:
bf:ef:cc:1c:38:0d:eb:6f:1c:b1:d3:b3:47:42:64:
a6:51:d4:f9:43:07:f1:54:47:bc:2b:27:ef:f8:02:
14:ef:fe:d2:eb:fd:b8:4f:c1:ae:5d:96:5a:89:82:
83:1d:c4:74:af:15:9a:7f:6b:99:85:8b:53:41:14:
de:01:11:ec:b2:0a:6a:4f:bc:27:ed:90:8a:c7:7b:
e7:02:fc:1f:d3:26:36:2c:7c:6d:04:fb:ae:2c:bd:
de:52:8b:a3:00:df:c8:37:64:d8:4f:d9:4f:b1:bf:
a2:42:78:eb:cf:df:74:d5:b5:6f:89:d5:81:e3:8b:
51:ba:e6:78:b1:40:c7:22:02:8c:80:13:d3:ed:66:
53:b7:77:55:c0:2e:0a:ac:4c:34:d2:e4:ff:79:bb:
08:d0:c4:19:51:60:a8:2f:84:39:96:d5:af:73:1a:
0b:f5:97:ee:c2:ca:1d:46:85:6d:22:c1:66:8c:3d:
c8:80:98:36:92:14:84:bc:ae:f3:a3:5d:2c:1a:ec:
b5:83:e0:8f:2e:70:d6:0b:6b:34:63:3e:0f:34:26:
b9:f6:9d:cf:cb:63:f5:96:a6:0e:0d:93:9c:9c:61:
5d:23:60:0f:ad:34:72:3c:9b:f1:fb:9c:ea:05:70:
1b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B6:29:A3:05:D9:FA:A2:57:27:2A:56:F7:56:E1:69:44:95:24:13
X509v3 Authority Key Identifier:
keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1a:a0:fe:16:0a:d2:13:00:32:0c:3c:a2:8f:e2:1d:d0:0c:
53:ac:aa:c7:63:5f:e1:e1:a2:f5:e1:6a:dd:c0:2e:94:43:eb:
21:e5:c5:a3:23:0b:6e:48:11:12:b4:36:a0:9e:08:ce:93:3c:
3c:1b:3e:9f:2e:48:3c:0e:0a:0e:68:2c:d5:d4:7c:cb:10:aa:
1b:62:9d:e1:47:a3:f2:99:33:fd:b6:04:81:f2:8b:88:b6:7a:
1e:c8:12:0d:84:29:59:5c:41:9b:3a:f7:62:3e:00:bf:a8:c7:
bb:0f:72:23:09:8c:56:aa:63:b3:36:d0:15:80:d2:55:6c:3f:
96:2d:e4:e2:57:39:9b:1e:65:d8:b6:73:33:9c:77:13:82:9e:
14:a1:d0:90:42:5f:a9:2f:3a:3c:47:02:92:51:a5:5e:e7:dc:
fd:92:7e:69:80:84:f4:a4:fe:96:59:6d:74:4f:a6:fd:07:95:
8f:1f:3d:ec:ec:ad:78:2c:ab:69:cd:67:e6:e4:f5:6e:ec:c4:
8a:9d:d6:4f:c2:7f:45:01:8f:69:38:84:85:74:fb:81:31:93:
ed:7b:6b:49:3c:83:6d:83:ad:2d:f5:83:72:bd:0b:b0:55:b9:
c1:65:bb:1e:a5:46:4e:1f:b6:8e:b8:35:6c:aa:d6:5b:18:96:
7c:75:08:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:27:36 2025 by rpki-client