Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: j4aCRbJvVcGX12WvZKsxgT8p/5Lx07rwIM8qp4ayVss=
Subject key identifier: B5:41:CD:C1:CF:38:7E:24:B1:3F:BC:49:D2:BD:63:52:5F:18:19:82
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 019748FA28DCAB57494DB215E13F2663CC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 06:00:43 +0000
Manifest this update: Sat 07 Jun 2025 06:00:43 +0000
Manifest next update: Sun 08 Jun 2025 06:00:43 +0000
Files and hashes: 1: d_ez2cyGpZurFZ-hpnWjbzeo_AA.roa (hash: BKsaK8mj+d0uYjbNGmD8zcdEWfPMS3oZwiGIKYpkp0U=)
2: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: cbKJzegKVSWKqawcwbfq/Qt7gQq+VygVsUix+yWotHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:28:dc:ab:57:49:4d:b2:15:e1:3f:26:63:cc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Jun 7 06:00:43 2025 GMT
Not After : Jun 8 06:00:43 2025 GMT
Subject: CN=b541cdc1cf387e24b13fbc49d2bd63525f181982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:f8:8c:5e:a1:08:c0:9f:f6:0f:fa:a9:c6:
b9:76:f7:65:f2:1b:f0:4c:b4:6a:0c:cc:d0:1b:1d:
da:91:83:6c:fe:89:17:74:e3:01:89:64:a5:5a:ee:
f3:62:ea:55:f1:05:97:de:a8:1b:9a:6b:38:03:d8:
3e:6f:12:67:08:8b:e3:2d:25:f6:3b:f2:7a:95:6a:
46:76:f1:09:f4:d0:b9:21:32:92:e0:36:16:ab:c5:
f5:2f:85:36:8f:a8:03:74:b2:3d:fd:f7:58:ec:27:
e1:5b:6c:33:49:31:33:70:d9:94:00:7c:04:f1:7f:
9d:41:52:1e:e6:53:53:d4:66:4c:89:51:19:df:4a:
ab:ce:1b:e9:57:38:47:db:85:db:6e:b3:fc:5e:a3:
9c:09:35:8e:5f:95:a1:28:65:6d:a6:3e:78:5a:09:
6c:6e:f7:38:a0:c6:3c:14:ea:f7:cd:d9:0b:02:ee:
22:fd:27:cb:b3:93:51:af:48:e8:0f:cd:50:38:4c:
13:cf:e0:bd:dd:6b:ff:4c:ac:4c:98:92:8a:9d:ce:
fe:5b:d6:15:6d:b1:04:a8:8f:dc:ea:23:18:d8:17:
a6:88:05:6e:6d:e7:2e:d7:24:66:71:ad:03:ac:1b:
47:02:66:55:81:18:39:2a:bf:50:c5:a7:e4:d0:7c:
a5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:41:CD:C1:CF:38:7E:24:B1:3F:BC:49:D2:BD:63:52:5F:18:19:82
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1f:12:3f:9d:1f:37:3f:08:3b:99:14:fb:f7:e6:6d:9d:e6:
9b:c8:ee:b0:49:71:19:4b:7c:78:db:46:0e:68:9d:a7:cd:c5:
d4:ee:df:27:f7:85:ae:d6:13:dd:17:e2:b6:92:0d:2b:a6:b9:
eb:8f:3f:b4:3a:02:ef:75:ca:19:dd:bd:d4:f8:d5:f7:53:2a:
97:65:d5:7c:63:44:6b:50:34:df:bb:ed:89:42:40:39:af:89:
b9:86:d9:c0:f8:0e:93:4e:3d:b7:12:2f:b8:8d:97:be:83:5c:
ff:58:2d:76:40:7d:9b:02:26:e7:ec:9e:79:e4:3b:a2:f7:b0:
24:4d:e5:93:ed:a7:3b:89:92:76:9b:61:75:4a:46:76:50:ab:
07:75:c6:b5:96:85:a0:9c:64:66:50:a0:aa:39:0d:e5:18:c5:
60:95:be:52:c5:11:9f:62:e3:ec:c9:e1:ce:4f:4b:ee:be:30:
20:b9:e2:4a:37:e6:e1:cb:22:d2:82:d9:78:df:9d:b9:94:db:
1e:f6:34:1d:b9:3d:38:ac:63:f9:7c:69:41:00:13:f4:ac:ed:
3e:5c:ff:de:9f:ce:bb:61:ce:e5:5c:7e:ab:a1:57:c2:5f:73:
df:44:f9:82:63:f9:a4:3f:e1:06:a1:f2:cf:cf:6b:e3:18:41:
b5:15:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:29:25 2025 by rpki-client