Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: lvj2JDHHLG4qJFSztHW1ZNjOE4bYlOBq2FuzzEIv9Nk=
Subject key identifier: 01:72:E5:9E:5A:F0:BA:45:A6:39:D6:A0:9F:B2:B1:6F:35:6E:DA:36
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 0197469DFC6872F37FE8DDCE0EC27DDC80CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 014E
Signing time: Fri 06 Jun 2025 19:00:48 +0000
Manifest this update: Fri 06 Jun 2025 19:00:48 +0000
Manifest next update: Sat 07 Jun 2025 19:00:48 +0000
Files and hashes: 1: qi8ShiEkLYs7Hu3iAeB3qgvB53w.roa (hash: P28kGkrH3kXOXEmuXeCzDsSCMSz53vW4CdNzvyXaAdU=)
2: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: d8iY8Baficq8Dh5HHdmN1Q5L4cTvcVJxHCUhRw5/ELs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:fc:68:72:f3:7f:e8:dd:ce:0e:c2:7d:dc:80:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Jun 6 19:00:48 2025 GMT
Not After : Jun 7 19:00:48 2025 GMT
Subject: CN=0172e59e5af0ba45a639d6a09fb2b16f356eda36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:bf:5a:41:68:df:1b:23:89:59:a8:b5:91:
53:92:76:2d:fc:ef:73:e7:f2:7b:94:c4:e6:74:4d:
aa:71:49:eb:1f:b7:fc:66:b2:87:73:6b:5a:63:4c:
ca:c8:4f:e1:8f:3f:90:b7:f2:7a:4e:09:c9:40:8d:
a7:57:71:e2:16:37:4c:f5:22:13:73:13:93:fe:b1:
1a:93:44:07:f0:02:36:24:53:ee:af:8a:87:7a:a6:
40:15:80:27:84:6a:c2:b6:01:61:ea:fe:6a:92:d6:
c1:1c:cd:de:11:95:fb:d9:f8:98:c4:c4:7d:c8:c8:
5a:c1:f2:04:55:32:8f:76:52:f9:25:92:26:2b:0a:
49:20:d3:75:29:3d:3b:91:05:e6:0b:9b:da:fc:c9:
84:ef:54:55:7b:8a:aa:00:57:1c:b0:f2:02:fb:57:
ca:5d:51:a3:fa:81:c8:1c:3b:57:4a:79:e0:01:16:
3e:80:36:44:1b:ae:34:e8:93:82:0f:80:e7:c4:2f:
d3:01:87:ae:28:13:b7:32:7c:63:0d:33:49:6c:9e:
a5:45:60:0b:0a:4a:0c:45:c0:70:80:99:96:16:d5:
f9:18:fd:7f:e9:f8:c3:42:35:09:41:75:97:05:07:
3b:42:cd:db:8a:f8:91:3e:2a:04:dd:62:dd:57:a8:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:72:E5:9E:5A:F0:BA:45:A6:39:D6:A0:9F:B2:B1:6F:35:6E:DA:36
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a0:bb:35:37:7b:54:43:d3:80:cc:42:08:a3:32:67:6e:87:
3b:2a:83:f3:45:51:ab:82:66:61:04:61:ad:d3:89:ed:13:3d:
96:89:2e:f0:61:ce:eb:3a:49:6b:91:c6:c6:5f:5a:36:be:4c:
29:6a:75:e2:aa:49:33:a8:08:22:12:8f:f8:d9:a6:cc:d5:bd:
a5:fc:07:0a:c2:68:dd:6c:b7:6a:65:30:e0:87:54:86:ad:63:
52:ef:a0:10:d5:f1:6a:b2:a5:95:61:c3:bd:ed:98:f4:d4:8d:
08:77:ac:f0:c8:91:05:c1:66:5b:ec:85:79:a2:6f:46:bb:4e:
7a:1c:4b:95:35:9b:28:c1:7c:b4:c9:5f:82:24:5d:ac:6f:d6:
89:ad:fa:37:ce:cc:b1:80:1f:9f:59:37:8e:f6:0a:ca:a6:87:
bc:a6:88:53:d4:a8:bc:7c:5f:4b:31:dc:41:76:47:a7:51:b4:
f0:8d:46:65:c4:46:8b:18:32:43:67:75:6e:06:a3:a1:10:bf:
7f:c3:71:b6:2b:59:74:2b:bc:72:90:c4:ef:7e:8b:d0:7d:3d:
c0:f8:f1:4e:81:f9:4c:1a:fb:22:97:cb:50:0f:96:74:6c:db:
93:04:ac:ec:e7:bf:9f:eb:49:45:17:5b:41:23:38:9c:08:34:
00:b2:df:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:22 2025 by rpki-client