Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
File: ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft (raw, json)
Hash identifier: tiMsGAbndOlJqZ32FH+XwY7+EnxZu91rDbj2rxDeaPc=
Subject key identifier: B3:31:76:AD:57:5F:92:75:F0:26:C2:E6:11:2D:B7:13:64:D5:CD:BD
Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
Certificate issuer: /CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Certificate serial: 019746D4EC11A5D796C73919D0C4D2204193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
Manifest number: 10BE
Signing time: Fri 06 Jun 2025 20:00:48 +0000
Manifest this update: Fri 06 Jun 2025 20:00:48 +0000
Manifest next update: Sat 07 Jun 2025 20:00:48 +0000
Files and hashes: 1: W5Hmap82286bMvYRGfhj5P6hiJY.roa (hash: /qhhKBqlDLllBtHRejTtA1t4Bm+9enZEcvJRIbXk7e8=)
2: ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl (hash: vIRkgNSTHHsjra2tpBZoT7krhLssundn4+TCz4VSOV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:ec:11:a5:d7:96:c7:39:19:d0:c4:d2:20:41:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Validity
Not Before: Jun 6 20:00:48 2025 GMT
Not After : Jun 7 20:00:48 2025 GMT
Subject: CN=b33176ad575f9275f026c2e6112db71364d5cdbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:6a:9a:85:4e:34:ab:2e:af:1b:c3:67:21:
54:b4:81:63:00:f5:b9:df:21:91:85:60:c7:50:31:
ac:f5:3e:18:04:f1:1d:51:69:e9:8c:2c:d5:64:19:
44:3f:54:22:8c:1d:50:23:84:24:28:8d:09:24:d1:
12:eb:d9:e4:a1:96:41:8d:3e:94:8b:73:c3:cd:0f:
3d:ae:53:95:23:a2:3e:c9:f2:24:29:4b:38:1b:8a:
72:3c:50:d6:44:f9:de:ac:02:a0:b3:c9:88:88:35:
5d:4c:6c:1b:89:f8:b9:6f:02:08:15:3f:c3:26:77:
ef:7c:7d:62:d8:6f:cf:7b:20:0e:bf:71:2b:32:a3:
dd:90:eb:fb:d7:be:a7:a3:6f:8c:66:09:bc:19:3c:
13:44:70:7f:3d:d3:51:ad:37:54:03:5b:23:49:8b:
fb:7f:5e:b6:95:b1:b7:ba:01:78:ed:15:42:f2:d0:
e6:e7:02:c6:8a:f5:ed:b9:91:47:24:2c:73:fc:c4:
d0:75:3d:f8:04:6d:2e:90:30:21:ee:db:00:4b:9e:
dc:d8:27:1c:0c:aa:a9:1d:62:f9:ad:4d:42:c0:76:
71:d1:43:76:8a:c4:81:e5:61:4b:50:96:d0:32:5d:
af:7d:4d:ec:ad:68:80:4d:5f:5e:2d:c1:71:02:41:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:31:76:AD:57:5F:92:75:F0:26:C2:E6:11:2D:B7:13:64:D5:CD:BD
X509v3 Authority Key Identifier:
keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:45:ca:e6:38:93:a0:00:ab:4c:e6:94:c9:36:90:a1:b4:ad:
32:8b:37:f9:e9:65:92:50:c8:7f:f8:6b:e1:e1:be:e7:2d:01:
99:68:f9:5d:65:b8:e4:6d:1e:70:c3:c9:4b:e8:f7:fa:67:64:
e3:7e:7f:a4:9b:b3:0b:59:4e:67:7c:a3:dc:9c:a2:4e:84:3e:
6d:ce:6b:d6:b8:49:61:23:fe:8c:f1:3a:7b:14:50:2e:14:92:
2b:76:d4:7b:50:a8:b5:b8:f1:60:fc:fc:ef:98:36:ea:0c:fa:
0b:e4:95:2c:1f:6a:f0:10:2a:e8:6f:d4:af:cd:39:c1:27:e2:
29:ab:62:ec:4d:ee:f3:ab:b6:d1:f0:40:35:c6:a9:e6:69:b5:
46:dc:38:f3:7e:e7:f1:b5:27:25:94:4a:82:ea:e7:9d:df:c3:
40:2b:7c:5c:89:78:15:8a:a6:a2:78:b4:3a:99:5e:4f:ec:39:
5a:d2:50:f9:7a:9c:d6:95:e1:2e:02:94:3d:39:4a:d6:fa:48:
25:ea:25:10:1a:ff:8d:4b:09:95:17:b6:66:30:57:b7:f6:59:
0f:a9:3c:50:1f:ad:33:9b:20:d1:0a:2f:32:c3:b9:a5:88:6e:
b6:0a:1a:41:82:5c:ed:eb:78:35:17:cd:93:1d:26:64:0a:88:
d5:03:11:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:35 2025 by rpki-client