Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: G/wclTV+8LxEQi4wFydODhvaY84zYonGjohPCohWt48=
Subject key identifier: 7D:95:9D:52:1C:D1:F1:6D:60:5D:53:0F:98:EC:A9:8A:B3:9A:05:E1
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 01977B6702207CF4A49F57FC87C0CA5BB978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 1527
Signing time: Tue 17 Jun 2025 01:00:37 +0000
Manifest this update: Tue 17 Jun 2025 01:00:37 +0000
Manifest next update: Wed 18 Jun 2025 01:00:37 +0000
Files and hashes: 1: fqj1j_FDhTxK5wCrypWCi5_Wlwc.roa (hash: /ZrSpI+gwPBK/gmIVmYYxFTakYRnjJvL4Gztj8QVd0c=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: fxDaWbIx0wYeCj0nU4feNFFjDwdFKXdhj0ARamYDWOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:67:02:20:7c:f4:a4:9f:57:fc:87:c0:ca:5b:b9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Jun 17 01:00:37 2025 GMT
Not After : Jun 18 01:00:37 2025 GMT
Subject: CN=7d959d521cd1f16d605d530f98eca98ab39a05e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:0b:46:7d:6c:2c:d1:66:18:74:24:17:b2:
54:b8:60:bd:b1:a7:82:12:dc:ae:ef:d1:a8:ff:ad:
03:fd:cc:8a:77:2f:06:ae:29:4d:b5:6a:d4:1c:09:
4c:db:74:82:1c:42:5c:f9:55:22:bf:f2:e8:3e:4a:
6a:c5:57:df:1a:6d:93:0b:99:5d:7b:ed:f8:f0:03:
89:6a:a9:a3:9b:2e:29:8a:76:a5:72:89:1c:0b:14:
9e:43:c9:06:ac:e9:be:27:32:34:5d:a2:67:8f:bb:
2d:b0:d0:2e:28:22:a3:94:b2:1c:41:c5:b0:cb:94:
74:31:3f:4c:f1:d0:0c:c9:0b:53:2f:eb:42:8e:52:
05:83:f9:c0:35:22:98:4d:db:0f:7c:44:1e:62:0c:
da:b3:48:b2:a9:c6:0c:76:a2:3c:28:07:e0:6d:10:
ee:54:56:b1:5e:ee:1b:ab:99:4a:6e:82:76:a0:e9:
8a:12:c9:d3:19:85:45:d8:d7:87:08:c5:6f:37:50:
53:66:e0:2c:7d:ae:60:b4:9a:e0:af:c0:0c:ce:0d:
6a:98:e8:25:79:42:33:27:a1:b1:2e:64:d2:36:36:
4c:c4:29:af:b4:83:93:79:e0:d2:22:63:7e:c8:5a:
1b:f2:94:b5:b5:07:6e:0b:a7:77:17:47:f1:bd:9e:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:95:9D:52:1C:D1:F1:6D:60:5D:53:0F:98:EC:A9:8A:B3:9A:05:E1
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cb:d2:f3:01:ee:ef:58:b2:c0:ca:48:83:a6:05:35:f1:79:
91:22:d7:c2:3e:72:2b:78:64:17:63:65:60:7f:56:04:78:57:
fc:bd:09:fb:3d:fe:b2:05:67:25:09:a4:40:f1:1c:d6:fd:2e:
7d:f5:8e:ba:46:80:02:53:7b:2d:74:fb:94:38:39:f5:9d:74:
52:ea:1e:5e:3e:25:9c:2d:5f:31:65:39:34:94:4f:7b:4b:5f:
8e:76:c1:bc:36:e2:eb:01:d4:c3:46:70:ac:13:70:de:87:f8:
74:d0:75:09:01:ef:ef:3c:23:f3:77:6b:c6:74:06:9b:78:1d:
28:25:ee:21:b9:db:8e:7f:e3:99:6e:d1:0f:e6:ef:c7:e8:4d:
52:2e:e5:d4:83:0e:89:d6:ec:50:90:3c:8d:8b:d0:f1:59:38:
48:a7:69:60:0b:90:ec:4d:9e:b6:cd:f9:e8:87:3b:39:53:3e:
28:d9:7c:94:d2:81:d3:d7:38:17:6a:60:25:d0:62:2b:96:3a:
44:a3:2f:f5:0b:22:bb:e6:76:98:32:aa:67:02:e5:5e:88:01:
83:d3:e3:20:b5:f9:2b:a3:37:d0:c3:bf:dd:4c:f8:3d:3a:be:
6e:26:66:f2:e9:5b:4b:5f:3e:e8:28:bd:28:f7:a0:36:e9:d4:
45:b4:aa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:16:13 2025 by rpki-client