Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
File: zSaUgromG4gAVgjsULe5CdPz_U4.mft (raw, json)
Hash identifier: HklPe4n3bWaU//a1Z7LD9DD5mbmCn4UJJP3UXSoI1cU=
Subject key identifier: B9:B3:DC:86:26:20:09:91:16:BA:C2:BA:68:F4:49:11:CA:7E:5A:1A
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial: 01974BC4745AA76CA1F039F1856B1B30F316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 19:00:55 +0000
Manifest this update: Sat 07 Jun 2025 19:00:55 +0000
Manifest next update: Sun 08 Jun 2025 19:00:55 +0000
Files and hashes: 1: 4bVZoUiCbJaTBG7aA0p9xBgeM94.roa (hash: MzCfFVB6xbhIQC2ta/MEsIETvDrpIdsUhLGtVjRSeig=)
2: zSaUgromG4gAVgjsULe5CdPz_U4.crl (hash: 9TG4WACa4N44eumH9ino5GcsNhzGDGXopRAGdxoH0oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:74:5a:a7:6c:a1:f0:39:f1:85:6b:1b:30:f3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Validity
Not Before: Jun 7 19:00:55 2025 GMT
Not After : Jun 8 19:00:55 2025 GMT
Subject: CN=b9b3dc862620099116bac2ba68f44911ca7e5a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:68:dd:ab:15:95:46:cc:8e:64:6c:a6:8e:0c:
7e:27:a5:f3:b1:20:20:75:66:f7:bb:49:75:40:d1:
fb:63:3d:5d:15:98:55:09:b8:42:ce:11:b5:be:18:
1f:2c:c9:d0:22:85:26:94:1d:2e:39:9b:24:89:87:
c9:e2:f7:8b:f6:cc:d1:c0:b6:d9:73:81:e1:66:3e:
fa:89:f8:43:00:1e:a6:31:fe:db:34:c9:60:9a:f1:
a8:6f:66:9b:3a:dc:3e:38:35:83:54:de:e2:53:dc:
18:4e:13:85:d7:b5:f7:20:62:f9:17:59:1c:cb:94:
33:3d:66:b0:b1:54:65:60:c0:0f:31:96:3f:6b:93:
3e:ce:9c:72:6e:c5:88:95:b8:77:d4:bf:a9:c1:3e:
2f:0c:d7:2f:ad:27:f8:18:7b:7f:c1:43:6f:d2:89:
5d:45:62:d3:fd:37:5b:80:29:a3:29:9a:df:02:06:
fa:a4:a1:01:f5:ae:16:b0:a0:aa:cd:42:e1:4c:4e:
44:1b:e1:ae:4c:a8:d8:0b:17:94:e5:5d:24:61:78:
67:1a:bb:83:7c:5b:b2:84:75:aa:ee:c6:d4:41:6e:
b8:d5:30:80:19:95:ab:bf:3e:7b:e2:9d:2b:af:fb:
2e:d6:4f:18:04:2b:6d:30:c6:97:23:8d:62:cc:57:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B3:DC:86:26:20:09:91:16:BA:C2:BA:68:F4:49:11:CA:7E:5A:1A
X509v3 Authority Key Identifier:
keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:32:bf:33:8d:19:54:5d:8c:29:af:db:66:41:32:29:5a:ac:
c8:bc:f2:75:a2:48:98:e8:66:91:bf:53:fb:c1:15:1e:67:b9:
b3:ad:20:a5:ed:b1:8b:4a:ab:cb:20:ae:64:2a:e6:46:ef:4c:
45:5c:35:19:ae:78:71:eb:1f:bd:e4:ed:52:b4:f1:ce:f8:86:
b3:e6:b3:8d:f8:e0:d5:52:11:96:85:79:e4:9a:01:0b:38:7c:
1f:a9:01:e5:f6:d6:d1:5e:f3:62:0f:40:62:be:d8:09:fa:5f:
be:73:6c:fd:80:a2:e1:38:f7:29:2b:50:79:31:1d:3c:b9:00:
cf:27:ef:d9:c7:11:c5:1c:40:07:02:be:a9:7e:5f:9f:49:98:
e9:f4:c7:93:cd:b8:ca:9b:7b:7c:11:7b:ac:21:ac:fc:32:e2:
f0:2b:bf:79:f1:84:2a:aa:14:f6:03:bb:94:75:2d:cc:cf:ba:
6c:48:43:59:13:df:49:2b:88:7e:08:74:b7:6e:3f:32:8d:df:
aa:34:15:34:97:fa:07:e8:f0:4c:2c:2c:00:b2:db:b8:3f:bd:
b9:0c:06:3d:92:14:40:dc:9e:8e:db:0b:d0:8d:56:73:d1:36:
9c:b2:54:3e:fc:f3:b6:34:76:6e:bc:07:48:c4:7b:15:33:6c:
3c:76:28:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:58:16 2025 by rpki-client