Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: qhlUCBwifHqXtlc3XYQb9IOjZLpKxpIhPyeaFHqp/DE=
Subject key identifier: E5:E9:E0:6E:9B:71:B9:42:48:02:56:6C:DA:AE:0F:32:B0:07:71:B6
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 01976F99A7CC8497F41AC73B864E8D38AB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 18:00:30 +0000
Manifest this update: Sat 14 Jun 2025 18:00:30 +0000
Manifest next update: Sun 15 Jun 2025 18:00:30 +0000
Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=)
2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: Sn79/KWziifBkRjFTmXcbWaKoJJHBjejB2orj66XzdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:a7:cc:84:97:f4:1a:c7:3b:86:4e:8d:38:ab:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Jun 14 18:00:30 2025 GMT
Not After : Jun 15 18:00:30 2025 GMT
Subject: CN=e5e9e06e9b71b9424802566cdaae0f32b00771b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:27:f8:5d:dc:76:ad:14:36:b0:f6:fe:ea:
04:c7:b6:68:85:94:af:69:67:b2:30:58:56:30:51:
31:7a:93:7d:0b:72:bf:d6:8c:df:34:dd:23:c9:7e:
69:33:23:83:aa:06:04:ff:ee:cd:c9:aa:5b:fe:ea:
de:2b:ee:48:b7:63:ed:05:9b:aa:fc:33:a9:e8:f9:
11:0b:0f:1f:db:fa:4b:ec:99:7c:f2:8a:64:19:39:
65:65:1b:b5:13:e7:17:47:bd:3c:63:79:81:b2:e8:
d6:76:e1:1f:18:33:b4:4f:fb:c9:b8:3d:67:9a:98:
52:a6:fc:dc:42:c2:34:e8:80:c7:93:7c:1b:d3:f8:
7b:34:9d:c5:a7:bd:cc:0e:68:42:16:0b:78:b4:46:
37:2b:36:51:e8:fa:f9:86:b9:b6:b6:a7:e5:76:38:
04:5a:59:52:23:47:09:72:e2:f8:7e:0c:a5:f0:b5:
8a:7a:ee:ee:1e:2a:33:e1:8c:28:f3:99:0c:a5:2d:
39:b3:f8:48:fd:e1:67:42:6a:56:0c:d4:d2:39:d6:
64:6b:61:2e:42:31:0a:74:32:d7:5c:e4:d7:66:1b:
83:30:4e:6b:9b:46:66:6b:3c:7b:33:5c:20:fa:88:
da:67:a7:b4:11:ff:83:e2:e9:6a:19:4a:ed:f1:b1:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E9:E0:6E:9B:71:B9:42:48:02:56:6C:DA:AE:0F:32:B0:07:71:B6
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:37:03:93:bd:5a:c3:37:4e:e5:d3:af:4f:b9:a6:aa:9b:cc:
23:ee:bd:a6:f5:81:d0:15:d3:6d:c8:6d:3f:ff:15:14:46:1f:
b1:7e:29:e1:12:09:97:b2:25:7d:09:27:53:5b:e5:3d:76:9e:
ec:db:c6:8d:d9:d3:47:32:71:af:7c:5c:24:af:f1:31:9e:69:
99:fa:ea:fb:89:5c:e1:77:04:9f:cf:3d:af:6d:23:89:0a:79:
47:80:2b:6d:5a:b2:b9:8b:20:c2:50:82:5d:8b:ce:28:4e:80:
4b:74:52:cf:9d:7a:b9:58:9f:9d:09:90:b4:51:af:7e:fa:86:
24:1a:38:a2:e7:bd:93:c2:b9:60:75:23:15:a3:4d:e0:8b:8f:
cc:16:af:b8:2a:b1:ea:9f:29:72:3d:b2:92:1b:54:53:31:5c:
cc:ae:44:bc:c2:c4:13:57:0c:28:c4:dc:74:aa:3c:83:4c:99:
20:53:07:f8:18:0c:74:af:85:cf:ef:36:5a:a7:0d:05:8f:a1:
8d:4c:94:ac:1a:13:f9:00:4d:db:60:2e:29:ee:4d:7c:3d:75:
1e:9d:94:96:cb:b2:dd:6f:e3:38:d4:f4:2f:eb:ec:c4:d1:10:
8a:20:66:6d:62:d9:46:e8:44:0e:1e:6d:95:c8:fe:fd:3d:7a:
93:3a:ca:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:27:24 2025 by rpki-client