Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
File: zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json)
Hash identifier: L8SlwIarqkkJYEJZyQLafIIN0blO0FLkCqRYxxaxOo8=
Subject key identifier: D9:5B:D1:8B:D1:EA:F4:7A:9A:6F:5A:2A:7E:F6:2B:EF:14:E7:E2:B1
Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Certificate serial: 01976D3E3DAD437AD6E7013A1F47E282F81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 07:01:24 +0000
Manifest this update: Sat 14 Jun 2025 07:01:24 +0000
Manifest next update: Sun 15 Jun 2025 07:01:24 +0000
Files and hashes: 1: oi2OU2MII40wJvGP04NHRArOFvs.roa (hash: VTkXyNDb4jg5wGXFkKirwnltERuwe0Q4j4rmz+H0ul4=)
2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: eB2Tmo/k1XwUyKswoK8NpVdG6NSjrfpM538RRhg+wqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:3d:ad:43:7a:d6:e7:01:3a:1f:47:e2:82:f8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Validity
Not Before: Jun 14 07:01:24 2025 GMT
Not After : Jun 15 07:01:24 2025 GMT
Subject: CN=d95bd18bd1eaf47a9a6f5a2a7ef62bef14e7e2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:15:79:cf:25:b0:c0:c0:91:ec:7c:c1:f5:
f1:e8:43:47:57:00:35:f9:98:48:2d:40:26:81:d3:
3e:53:ce:4f:3f:08:a4:1d:47:b7:dc:96:50:a8:d9:
1d:81:71:7c:91:52:71:15:df:e8:d6:b4:03:14:30:
84:29:67:fc:e4:88:a8:88:8d:28:e8:bf:d9:ec:94:
21:84:4d:e9:1d:24:a7:e3:a8:1f:ef:e9:68:34:96:
64:6d:b2:b9:6b:4e:c1:fc:50:c6:94:79:b6:14:d0:
63:85:71:92:e6:b9:eb:fc:cb:e3:70:8b:2a:f1:ad:
88:3c:2e:8f:c4:41:11:65:b8:66:92:a3:70:4e:61:
d2:88:ed:1a:cf:f6:d2:37:e9:a4:5d:81:81:39:94:
3a:59:0a:01:33:a0:88:2a:c6:f9:85:a1:83:3c:3b:
1b:57:1c:82:92:4f:d9:87:33:e6:43:d9:e2:7b:c0:
61:fa:85:87:ec:df:c5:d1:3e:13:4f:8f:6e:06:05:
fc:d2:e3:52:60:83:9e:01:c4:a9:78:7a:53:7a:85:
21:32:5c:df:eb:05:a4:4b:10:73:43:4c:18:e6:2f:
cc:d9:e6:e8:7d:39:06:d3:ab:c8:3e:00:55:9f:53:
4b:88:47:4e:21:58:76:a6:7e:b6:71:20:7d:f9:2a:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5B:D1:8B:D1:EA:F4:7A:9A:6F:5A:2A:7E:F6:2B:EF:14:E7:E2:B1
X509v3 Authority Key Identifier:
keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6c:e3:26:0b:8e:c5:ff:b6:65:10:5a:e5:ed:bf:f0:c1:47:
fa:a5:47:30:32:12:3d:33:ad:52:26:fd:cd:86:8a:02:9f:5e:
6b:9d:93:57:9e:ee:00:b9:e5:1c:e8:95:66:4e:27:25:f4:b5:
90:5a:ea:3c:5a:ac:11:23:5d:1a:42:55:f3:c0:68:9d:51:7c:
9f:07:53:e0:40:25:d1:de:8b:a8:49:ca:1d:cb:c1:5f:18:98:
2f:88:5b:df:b8:b5:0a:71:2c:02:13:2c:0b:e8:68:f1:a7:91:
51:1f:66:6d:8b:ea:71:09:32:38:65:9e:1a:5a:b8:43:2c:0b:
a2:05:bc:86:e2:5d:51:81:98:aa:30:e9:c1:4a:e9:54:7c:a3:
11:17:91:c5:98:48:f8:b5:20:32:3c:1b:db:f3:6a:f3:ea:6c:
40:4c:79:cd:1e:ae:7a:1c:48:ad:20:a1:53:4f:d7:3d:e6:7d:
63:aa:58:e9:1a:0a:b9:07:0a:d5:f8:c3:45:36:7e:73:46:f2:
ee:1c:45:3c:29:fb:ed:fa:ba:96:dd:9d:0a:b5:ac:03:cd:f3:
7c:93:f4:6e:36:92:19:1f:b6:06:e8:77:97:65:ac:94:fe:43:
70:1e:d6:41:69:71:6b:51:05:a9:72:67:41:dd:e2:b8:aa:a7:
c5:71:6d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:54:16 2025 by rpki-client