Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
File: zy7ueKAITYMd4aJQAYPhZIlRbM8.mft (raw, json)
Hash identifier: hnlx0x3jZdyZmuaFSM5CorgR5gFJDhezHH8b62TZF+Y=
Subject key identifier: 79:C6:5D:65:51:36:16:1D:5E:CD:09:4C:B1:DE:BB:94:DC:D1:BD:39
Authority key identifier: CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
Certificate issuer: /CN=cf2eee78a0084d831de1a2500183e16489516ccf
Certificate serial: 0197711AD557790198CCE188459D218E8E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
Manifest number: 0E95
Signing time: Sun 15 Jun 2025 01:01:13 +0000
Manifest this update: Sun 15 Jun 2025 01:01:13 +0000
Manifest next update: Mon 16 Jun 2025 01:01:13 +0000
Files and hashes: 1: DoG2UFHCOj7zOTIUPjjt5XZyaMI.roa (hash: o5jRgA59QPQWDTQLvIg+41ICmEKRDLb8Qb3vB5Fkcs4=)
2: zy7ueKAITYMd4aJQAYPhZIlRbM8.crl (hash: XbWh3MbOFrz4LZK1vgHR+CMAoBuoaho2lmIOLG+2WT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:d5:57:79:01:98:cc:e1:88:45:9d:21:8e:8e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2eee78a0084d831de1a2500183e16489516ccf
Validity
Not Before: Jun 15 01:01:13 2025 GMT
Not After : Jun 16 01:01:13 2025 GMT
Subject: CN=79c65d655136161d5ecd094cb1debb94dcd1bd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:33:a0:b3:71:4b:6b:1f:83:4c:13:25:09:
c7:d9:a5:48:9f:dd:d6:09:c2:a3:85:6d:29:19:96:
03:44:f7:f1:2e:a2:db:3d:66:e4:f5:e1:eb:2b:7a:
23:14:68:4e:e9:4d:a2:0f:82:8f:95:ea:ba:5c:0a:
2d:ba:d1:5d:83:2a:6f:e9:63:f0:9a:0c:4a:e8:30:
c8:70:be:8a:5c:39:0f:30:27:78:7b:1a:0d:59:25:
09:70:8a:7f:f9:16:5f:74:f9:6e:72:33:08:c7:99:
25:c3:1e:f3:f2:f0:b8:be:0e:99:a6:81:64:54:aa:
11:e2:9d:4b:09:66:10:4e:b1:24:57:1f:e5:02:83:
ab:25:7c:8e:77:30:e8:2f:8d:28:c2:fb:1e:f9:86:
02:32:6f:1f:89:d0:1a:2f:3f:34:0c:93:a9:95:eb:
3a:d9:6a:51:cb:af:e2:e1:c0:00:db:7b:61:e3:30:
45:1f:0f:44:8a:e3:4a:51:b9:a9:50:87:6c:d8:4e:
ca:b3:4c:3e:52:b0:ca:fe:0e:11:2e:b7:7b:d8:68:
3e:da:b3:4f:52:ec:3a:76:ea:95:3d:43:6a:3a:87:
d7:b5:8d:5c:1d:53:f8:d9:a3:6c:77:cf:3c:73:9e:
5b:8f:8e:84:2c:ed:82:64:90:c2:46:8c:db:96:1b:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C6:5D:65:51:36:16:1D:5E:CD:09:4C:B1:DE:BB:94:DC:D1:BD:39
X509v3 Authority Key Identifier:
keyid:CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8d:bc:15:29:59:ac:bd:f0:c9:ad:2d:04:e2:f0:c6:2e:6f:
d4:0c:fb:60:fe:5c:7b:f7:e8:d8:a1:ba:be:8b:d0:e2:e2:5c:
ee:a0:ce:83:94:5d:b4:21:2b:84:0c:46:cb:12:74:9c:4e:ff:
92:d3:e7:fc:6c:0b:ff:ac:76:db:6e:54:88:c0:6d:10:0b:b1:
87:be:a4:5a:98:a9:74:23:54:41:26:cd:9f:54:7a:f8:58:c1:
b8:39:21:3f:8b:a1:15:67:6f:c1:70:75:f4:b5:fb:29:0b:68:
fa:88:dc:da:46:c9:6e:61:49:42:9f:32:d7:50:d5:a7:55:8c:
0c:6f:55:42:e4:ea:6a:ef:51:32:1e:d1:2c:d5:87:d7:6c:d2:
4a:11:19:cb:c1:59:4b:65:aa:cf:7d:6f:75:2e:d7:7a:ce:b9:
d2:fa:fd:37:d5:3b:9b:f2:3a:62:6a:08:7f:df:ab:9a:31:14:
61:60:81:81:c7:51:54:27:95:35:00:56:06:ba:01:90:cf:19:
1d:b7:06:dd:fd:c5:d6:03:0d:7c:de:8c:e1:17:6d:f7:20:c1:
af:ed:a9:8c:35:00:10:ae:4c:e1:48:a5:75:68:98:fa:6f:38:
7f:6a:d0:6b:d7:9b:e3:ce:2d:af:21:a7:be:2a:ac:f8:1a:34:
06:31:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:30:17 2025 by rpki-client