Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: Pd/fDPgQAI//Co0iAvpOn+HFiddJxWOp9iGIqMCoMfY=
Subject key identifier: A2:85:27:E9:DB:48:43:34:2D:0D:71:14:8C:9E:22:2F:7C:B0:7A:E9
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 019748FA0C0F598534DBEDD93799A1E7C66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0884
Signing time: Sat 07 Jun 2025 06:00:35 +0000
Manifest this update: Sat 07 Jun 2025 06:00:35 +0000
Manifest next update: Sun 08 Jun 2025 06:00:35 +0000
Files and hashes: 1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: BKIFPJOOlOlifpph97JVF0tH8W3kgvHYo5OZRATKwY4=)
2: sPYhG40WeNs4D0fdLBoDQKTV_Eo.roa (hash: bDpPm+4aHa819Yue2u9g5oa22BJIhkWyJ4aj3sH99kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:0c:0f:59:85:34:db:ed:d9:37:99:a1:e7:c6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Jun 7 06:00:35 2025 GMT
Not After : Jun 8 06:00:35 2025 GMT
Subject: CN=a28527e9db4843342d0d71148c9e222f7cb07ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:e1:fd:e3:3b:92:61:c5:ff:20:6f:77:f9:
5c:2d:78:be:b7:98:02:8e:02:03:0d:29:81:d7:f3:
63:a5:a5:32:36:ac:42:6b:8d:30:c2:2c:64:bd:0f:
cc:14:33:9c:0c:b0:07:49:ec:82:c6:a4:f4:e3:d5:
3c:fe:d7:89:9a:46:40:f9:de:7d:ae:f4:c2:6b:36:
3a:95:3f:b2:5b:5f:c7:fc:0f:f0:40:68:df:22:61:
49:99:32:51:2d:06:f7:73:ab:96:cb:34:20:91:ed:
0b:55:59:d8:14:c8:4a:73:12:4c:c9:1c:84:b8:45:
cd:af:23:e0:51:d0:af:a6:10:c4:e9:54:69:85:1d:
f4:6d:0d:8d:c1:6e:fa:11:8f:1b:46:ef:ab:1d:df:
85:b6:2f:84:4f:98:d2:ae:ac:80:ba:21:27:5b:36:
76:99:0e:c3:06:c5:9a:6e:17:bc:d1:ad:b3:e7:64:
7d:06:4a:6d:f4:0f:19:f4:d2:51:a7:64:d0:d6:48:
c2:7b:8b:3c:58:c1:29:c7:47:1c:69:d8:0d:d4:87:
33:89:11:a7:e9:73:e7:d5:84:9b:95:06:49:6a:af:
72:e3:33:cc:96:37:87:67:d1:93:5c:f8:5c:c7:b9:
a4:df:7a:91:3f:12:71:e3:f0:c2:e5:bf:4c:54:14:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:85:27:E9:DB:48:43:34:2D:0D:71:14:8C:9E:22:2F:7C:B0:7A:E9
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7f:71:cd:69:ee:5a:70:7d:41:66:3f:41:4c:3b:21:d8:01:
15:08:30:6e:e7:70:bd:61:50:9d:48:07:6d:0a:aa:2b:5b:00:
ba:ae:ab:90:a1:d7:61:fc:c4:01:7c:2f:8a:c0:2d:39:ae:99:
1f:78:de:11:f9:74:b3:60:a6:e5:da:6a:d9:03:e2:62:25:4a:
23:7f:dc:cb:ee:aa:b5:e6:f0:f3:33:f2:c4:5f:1c:79:d3:f3:
84:ae:28:b4:40:3a:ad:97:d1:c6:13:9f:dc:c1:8b:53:43:21:
64:f3:c2:d8:26:39:d5:8d:b3:f3:95:1e:6e:f3:90:ed:2b:da:
d9:6d:96:cc:09:ca:4a:0e:65:6e:df:7a:77:bf:b9:01:33:42:
01:e3:52:7d:47:05:6a:fb:fa:5e:ba:6a:28:9b:53:ec:cd:e8:
29:50:04:5f:8c:9f:09:75:56:6d:0c:dd:16:58:11:35:04:84:
2d:43:1e:ee:91:ba:c5:08:21:b2:93:63:83:6f:b5:07:0c:e0:
cf:a5:9c:37:a0:4c:f7:63:50:4b:4e:74:d0:d9:cb:95:4b:ed:
ad:2f:70:9b:21:17:b7:f8:47:f0:b3:f6:89:f8:f5:70:de:f1:
a7:8d:35:3b:52:7f:8d:30:aa:a2:ae:ef:2a:dc:aa:d8:e5:42:
48:a4:67:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:17 2025 by rpki-client