Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
File: cZhnMZJb6FUaUwka_m0Jct-jgH4.mft (raw, json)
Hash identifier: 2cPj8plhrji4rE0lNNxaqYQL0663zsOAhVaBEV19iAs=
Subject key identifier: 96:56:C9:51:15:C7:9A:26:35:1E:7E:F0:65:B8:AC:7C:8B:F8:49:B1
Authority key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
Certificate issuer: /CN=71986731925be8551a53091afe6d0972dfa3807e
Certificate serial: 01977B673C72BBCA5C8F30CDD2B562942B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
Manifest number: 0659
Signing time: Tue 17 Jun 2025 01:00:52 +0000
Manifest this update: Tue 17 Jun 2025 01:00:52 +0000
Manifest next update: Wed 18 Jun 2025 01:00:52 +0000
Files and hashes: 1: cZhnMZJb6FUaUwka_m0Jct-jgH4.crl (hash: 4deuJwAe1F/Mp2UG33OdMdCj+RLwnDSZ+Y0ksyWZ4IU=)
2: izKyNN07Ux3U5xT_e0LwmSxlm3g.roa (hash: 5sHxaNHhFHbIzK2JB6pJOwwX7f4oOth8b9V4EgOV6Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:67:3c:72:bb:ca:5c:8f:30:cd:d2:b5:62:94:2b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71986731925be8551a53091afe6d0972dfa3807e
Validity
Not Before: Jun 17 01:00:52 2025 GMT
Not After : Jun 18 01:00:52 2025 GMT
Subject: CN=9656c95115c79a26351e7ef065b8ac7c8bf849b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:86:06:d5:4c:4d:df:da:13:1e:df:d0:08:
1f:2c:75:ad:2f:f4:d4:80:d6:ab:15:d2:d3:fb:a1:
17:16:75:01:91:d5:4a:ff:55:29:62:aa:55:fb:33:
d5:67:76:b6:fc:dc:95:04:b2:9d:06:c1:e5:16:57:
ce:64:f5:ac:b8:8f:e4:51:4a:ad:2b:b0:ed:6f:4a:
7c:da:67:56:bc:b0:14:bc:b9:d3:ea:ac:fc:dd:15:
b4:ea:81:11:58:f5:2d:56:d4:b5:f0:2d:ef:7a:8d:
09:9e:a0:24:4c:58:ac:a9:8f:27:b7:d2:5d:41:1b:
b6:ac:c3:6b:c8:db:e6:a0:87:55:0c:8d:db:e1:7b:
54:a4:f3:49:78:c1:ec:1e:4f:e8:a9:f3:56:54:aa:
a9:b1:57:c6:ff:dc:f5:e5:4b:3e:65:7d:83:e4:2f:
ac:48:9a:24:42:60:7f:60:81:f3:ad:c4:99:dc:92:
b4:ac:ed:05:38:dd:1f:75:2e:31:78:35:dc:25:aa:
d5:b0:06:e1:3c:94:10:cb:0d:4d:68:a5:8f:4a:e1:
fd:b4:ac:cd:75:92:d1:3f:ce:60:89:68:be:86:24:
41:7f:10:7d:5b:84:8a:b8:52:ce:8c:e1:5a:d8:71:
65:97:5f:df:28:5b:d5:02:fc:88:8c:01:ed:9f:a6:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:56:C9:51:15:C7:9A:26:35:1E:7E:F0:65:B8:AC:7C:8B:F8:49:B1
X509v3 Authority Key Identifier:
keyid:71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d0:ec:82:d0:d8:2e:df:aa:27:d2:7b:b3:7c:93:8f:50:c1:
80:7e:a6:4d:95:6e:68:84:84:49:7c:4c:fd:9e:45:09:ae:81:
28:7d:cd:69:d4:43:b8:1a:45:60:c0:47:3e:95:05:49:e6:5b:
6c:62:86:17:d4:c7:bc:aa:05:fa:f9:05:fd:30:df:37:4c:8d:
5c:3b:fa:dd:87:cb:c5:83:e2:5b:6b:13:7e:c5:56:0a:a6:24:
b1:80:08:b0:6e:d9:70:55:a7:72:42:ec:a9:1c:b8:72:73:8b:
69:dc:c5:e9:2e:4e:da:3c:aa:a8:2b:91:6f:d7:40:de:40:eb:
3e:a8:83:1d:92:f1:0f:14:eb:f2:a0:40:22:78:f9:fb:b1:e3:
a5:81:bd:2b:90:6a:c8:ca:5d:56:5a:37:00:52:e0:40:a4:4a:
6a:ce:1d:04:6e:9b:c5:51:9f:eb:53:4b:c8:15:cf:7f:c8:87:
c5:2a:9e:8b:ba:11:e0:7a:d2:e0:95:81:aa:f9:b6:10:47:8e:
6d:a1:fb:18:e9:f9:73:52:8a:d3:cf:65:84:02:37:a8:b1:a3:
fd:dc:51:32:5e:f6:ce:e6:f3:f3:db:14:92:79:fa:50:a9:44:
40:a6:f0:ea:d5:1b:e5:ee:fe:f3:c8:da:8f:31:f5:f3:7e:89:
c8:84:fa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:15:18 2025 by rpki-client