Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: MbbXb6vf37xyVm+wU8o6L0MPzO5AW19+A8NxIuiD5Ns=
Subject key identifier: 67:AC:CB:9B:FB:80:26:07:55:0C:20:4D:9E:53:24:2F:7A:B0:08:7B
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 01974855474AB21484E3099C60DDA0E43EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 15C3
Signing time: Sat 07 Jun 2025 03:00:37 +0000
Manifest this update: Sat 07 Jun 2025 03:00:37 +0000
Manifest next update: Sun 08 Jun 2025 03:00:37 +0000
Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=)
2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=)
3: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: zwEKnsL2dLMSwcWS8i1uqVuOb4IjAyI6CELYTKpPJ/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:47:4a:b2:14:84:e3:09:9c:60:dd:a0:e4:3e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Jun 7 03:00:37 2025 GMT
Not After : Jun 8 03:00:37 2025 GMT
Subject: CN=67accb9bfb802607550c204d9e53242f7ab0087b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:9c:5c:ed:22:9d:7d:93:46:64:b4:80:bc:
c3:e8:e7:c4:04:bb:08:85:5d:a6:2c:e0:62:ec:29:
79:d0:12:49:49:75:94:e9:dc:33:e5:3a:22:15:27:
1e:32:0a:a2:d7:64:30:dc:02:f8:5a:31:84:69:69:
b4:a9:42:a0:76:30:b5:1b:40:4c:ca:7a:6a:af:e2:
3c:5f:0b:8d:7c:02:99:4e:02:69:ea:22:99:16:8a:
47:51:07:6b:ab:ba:e9:a9:59:42:87:e9:96:5d:39:
6c:63:f9:8d:29:85:2d:d1:b3:39:45:8b:72:0f:de:
9b:25:45:6b:c3:bd:66:d3:ad:ee:85:69:4c:ce:d3:
8f:00:07:0c:94:91:de:0d:9b:87:59:f1:5c:86:57:
50:62:64:74:3a:9e:71:02:9e:89:63:3a:01:73:4e:
ff:18:a1:31:b5:76:8a:fb:fb:3b:33:bd:85:54:5f:
51:b7:01:de:ba:7e:03:cb:02:dd:c6:e6:3d:1e:c1:
82:c6:c1:d2:99:9a:09:fd:ba:ea:2e:5e:38:eb:c1:
83:82:56:68:d6:bd:56:5f:3a:06:db:cf:48:b6:f4:
3e:26:5c:cb:92:f6:19:b4:59:a1:c6:3d:11:69:11:
59:7a:8e:fe:8c:a6:eb:37:eb:2e:26:96:cf:e1:d8:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AC:CB:9B:FB:80:26:07:55:0C:20:4D:9E:53:24:2F:7A:B0:08:7B
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:53:74:21:70:e0:dc:7a:86:35:a5:0b:50:fd:3f:19:e3:ce:
90:92:b4:51:b8:53:eb:da:7c:95:10:1e:2f:52:31:15:b5:cc:
5a:ed:ed:bb:55:ee:de:ff:30:bd:fd:48:61:19:5c:74:21:f4:
83:25:63:0a:ce:d4:8d:bb:da:fa:2e:e1:62:13:16:4d:9d:43:
be:c2:f5:63:ba:b1:75:98:0e:1b:43:3f:5b:49:1f:0a:cd:d7:
e9:a2:f4:6f:49:bc:bc:f3:8c:d8:37:78:46:4f:a3:df:1c:b7:
ce:9c:14:d7:25:ae:07:b9:0a:97:bc:76:4d:13:d5:27:a2:6d:
cc:ae:e2:3b:32:92:8b:a6:55:e5:61:f8:d2:58:9b:87:1d:1b:
3f:21:e8:0e:57:90:b7:95:1e:d9:3b:93:15:69:27:13:6f:aa:
26:9c:3e:74:0e:9e:9f:d9:8c:67:e8:c9:55:db:66:33:65:72:
19:87:c7:97:bf:c9:7c:d2:4f:d4:e3:c8:ec:f8:cf:c0:dc:cb:
f7:87:2c:8f:e8:0c:cd:6f:3a:19:0d:07:44:5e:16:0b:a3:7d:
f6:28:cf:88:97:70:c9:73:7a:be:e1:a1:67:7c:6d:7d:ff:9f:
02:62:0b:14:df:dc:9f:87:e2:c4:29:06:6f:1f:29:c3:9c:63:
55:57:d0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:32:51 2025 by rpki-client