Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: ZKZqM584m5CJfQLYyvJpJuw6x585EhRdg5fztqmMcSA=
Subject key identifier: EE:A5:6F:B2:CC:60:6F:6E:4D:03:29:03:97:5E:19:5F:25:70:1D:CB
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 0197488D0A4F00E2BDD575193AC0137ECD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 0527
Signing time: Sat 07 Jun 2025 04:01:32 +0000
Manifest this update: Sat 07 Jun 2025 04:01:32 +0000
Manifest next update: Sun 08 Jun 2025 04:01:32 +0000
Files and hashes: 1: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: ID5GK8+ft7nTt0CB84mf1/jS9EOkJVOmc9BXBz56s6U=)
2: s8WA6XbVKkNfKDWyIPbKv2MkdEI.roa (hash: cSlX1MSZ3bjIwkd1nKlEU1sHjeRq7ybsweqaQYPJx58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:0a:4f:00:e2:bd:d5:75:19:3a:c0:13:7e:cd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Jun 7 04:01:32 2025 GMT
Not After : Jun 8 04:01:32 2025 GMT
Subject: CN=eea56fb2cc606f6e4d032903975e195f25701dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:4c:e1:94:58:ed:d2:72:0e:0e:69:1e:ae:
0c:56:cb:02:1a:09:65:6a:d3:58:ba:e1:1b:a8:67:
b8:51:a2:70:dd:3e:54:fa:43:52:1e:3b:31:63:f5:
3f:6b:c1:fc:85:4d:60:c0:bb:8e:22:85:fd:c1:45:
fa:d9:2e:69:85:4e:32:72:05:e6:be:68:2f:7b:54:
34:30:e0:c7:11:65:80:98:1d:8e:b7:d6:71:4e:03:
dd:fa:90:ae:9a:74:44:7d:13:55:a7:26:30:da:96:
a0:f8:81:b1:d0:44:40:02:9d:a8:2d:b8:91:29:cc:
44:e7:f2:4b:a8:1f:36:60:8f:e4:30:58:2e:fd:bf:
4c:a7:02:fe:67:ab:7f:a3:c5:f1:df:85:d8:ac:0f:
66:c1:23:8b:4d:72:68:b2:13:ab:21:a1:c9:7a:23:
47:18:1d:31:fa:1b:36:ae:3e:af:13:29:92:78:5a:
82:df:11:bd:a3:c9:91:df:cb:e8:cf:98:31:d1:fc:
75:b9:8a:69:9e:f0:dc:1f:18:b8:0c:34:b0:2b:02:
ff:e0:1b:23:42:65:ef:6b:1c:bd:fd:58:9f:66:bb:
e9:7f:1b:af:5e:da:1c:71:91:73:c3:9e:cd:e7:1e:
29:1c:af:8a:10:b3:e9:e9:40:e5:1e:57:e3:14:64:
34:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A5:6F:B2:CC:60:6F:6E:4D:03:29:03:97:5E:19:5F:25:70:1D:CB
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ca:24:69:a0:67:7d:83:38:cb:96:d1:c8:64:b1:15:81:f9:
f6:34:7d:e0:c0:28:7d:bb:9e:53:22:3a:7c:1e:fa:e9:41:de:
41:f6:f7:74:8e:87:67:95:d5:ea:8e:37:d5:69:d7:ac:12:63:
17:7c:31:a9:07:6f:14:25:c9:54:57:0f:66:58:a6:d3:d4:28:
f3:4f:b0:84:d2:6e:7c:a4:47:4d:d4:09:c2:f1:58:65:6d:6a:
97:cf:c6:30:20:4a:49:67:52:76:83:5e:14:19:8e:02:81:92:
43:19:f5:56:e7:e1:81:b8:6e:79:dd:68:f8:6a:02:0e:6c:42:
78:ac:4a:3c:ce:c7:a8:94:08:a5:56:6c:2e:23:8f:dc:18:ad:
b9:4b:ac:f1:21:99:4f:4c:62:83:21:02:04:50:fa:3a:e8:fb:
84:74:c6:0d:eb:de:1e:77:73:0e:a1:d9:98:1a:a3:4d:d9:d8:
d7:1e:7c:79:41:cf:ff:e2:2f:d6:db:c2:2e:e2:a3:04:91:be:
c5:6d:0f:d5:4f:be:d0:27:c8:e0:5a:36:c0:80:1f:c3:dc:5a:
f7:cf:e6:57:2e:aa:59:39:a8:fd:90:74:d4:8c:86:12:5d:03:
8d:f7:bf:a7:4e:39:5b:2f:65:7b:7f:9e:0e:95:56:e2:03:46:
14:f3:ab:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:43:04 2025 by rpki-client