Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: 1B7OpxHeaGiPsgQupvC8Vs2mTjtA6QQkmRPsFELiPc0=
Subject key identifier: 18:9A:11:3C:19:41:F3:A3:FC:3A:09:87:C0:BA:8B:E9:81:7F:AC:9C
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019769CF2E6922A1C2C184BB70874782F185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 02AE
Signing time: Fri 13 Jun 2025 15:01:14 +0000
Manifest this update: Fri 13 Jun 2025 15:01:14 +0000
Manifest next update: Sat 14 Jun 2025 15:01:14 +0000
Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=)
2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: /EDfoGxFHHIF1oiMTJWHGf43/dkcBuHdKcAXzxmF/QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:2e:69:22:a1:c2:c1:84:bb:70:87:47:82:f1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Jun 13 15:01:14 2025 GMT
Not After : Jun 14 15:01:14 2025 GMT
Subject: CN=189a113c1941f3a3fc3a0987c0ba8be9817fac9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d0:30:89:eb:26:63:24:ab:ed:7e:6c:8d:0a:
61:23:8a:1e:ad:8d:32:b5:a8:9b:cd:d2:ab:2c:b1:
1a:1f:b6:44:4e:18:8d:66:da:05:e1:51:f4:90:c5:
af:7b:d4:5d:bf:a8:37:99:65:b8:a0:31:a9:04:b4:
30:47:2f:25:d5:f6:35:77:9b:22:15:55:4d:63:bc:
f0:7d:74:cd:48:f0:1e:40:90:a3:c4:3f:81:92:ba:
73:fd:e5:89:ac:44:51:b9:6e:61:ea:24:71:71:c4:
c7:e8:db:08:59:b1:b6:76:a9:1b:b0:49:2d:ce:94:
1a:ea:42:ee:10:61:a7:9a:79:1a:41:9e:91:46:64:
6e:1a:a5:9a:75:fb:f9:b8:66:6b:d0:8e:4a:21:e6:
4a:b3:52:2d:7a:fa:a1:a1:e3:30:b3:9c:47:ac:13:
10:ec:a6:36:09:f4:77:5e:f8:03:a3:c0:70:b2:10:
db:1a:e0:af:d1:0f:d7:07:58:6d:27:b6:0b:80:2c:
c4:22:36:a9:81:cf:44:3a:34:f7:e8:6e:ca:39:08:
a4:89:2e:d4:3e:32:bf:c5:83:6f:af:84:28:89:7f:
a2:3e:ca:7d:b7:1e:ce:a0:a0:c5:31:80:96:fe:99:
18:e1:5e:49:16:21:d4:14:4f:56:91:85:69:47:76:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9A:11:3C:19:41:F3:A3:FC:3A:09:87:C0:BA:8B:E9:81:7F:AC:9C
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ca:ed:29:0d:e0:4e:1c:24:0c:7e:c5:75:bd:54:62:4f:f5:
5c:48:16:8b:68:1a:20:d8:52:cb:bc:1f:9f:c3:09:1c:50:22:
ee:42:4f:5c:23:e4:64:4a:ab:de:22:a9:34:71:40:6e:2d:8d:
05:69:07:42:36:7d:ec:75:9d:91:28:06:43:d4:5e:e9:56:1e:
d5:00:11:d0:5b:c4:d9:d5:2a:08:c6:d2:b2:39:f8:ea:a8:e7:
86:b5:47:8b:a9:49:d9:7f:66:b8:e1:c9:23:d7:3a:63:a9:80:
8d:e3:a6:77:29:df:11:91:2c:7f:91:c9:38:9e:08:a3:b4:68:
28:c4:bc:b9:c7:54:7c:bf:a2:82:86:58:ae:9a:df:4b:8c:06:
4f:e3:5f:98:f8:31:48:0e:82:35:7d:65:aa:b1:8c:91:1f:62:
92:51:b5:63:79:57:85:34:82:65:75:41:b4:6a:ab:03:a7:68:
2e:e8:46:76:03:d4:8f:de:09:10:4a:52:0f:cc:7c:8b:95:fc:
c4:38:e9:76:42:3e:52:e0:02:e6:76:93:e4:8d:4d:8e:6e:71:
49:40:94:c4:31:f7:e8:6a:58:b1:d0:d0:b2:31:7e:18:ba:ee:
b1:29:b5:1d:3c:26:0b:74:2f:6a:a4:2d:40:56:27:0c:b3:ea:
ed:b3:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:00 2025 by rpki-client