Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
File: Ze3JFheq3wwsx_H115bb237YWQ0.mft (raw, json)
Hash identifier: dCG6Gw+VSrSzar6X+ErVkWE9y8YJ0wglLQfJ0y52DKE=
Subject key identifier: EA:A8:37:AB:1F:FB:66:A0:CE:C6:00:21:99:35:D0:B6:01:0D:E2:DE
Authority key identifier: 65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
Certificate issuer: /CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Certificate serial: 0197726456D1539F8ADFC92DC047A45F1F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
Manifest number: 055C
Signing time: Sun 15 Jun 2025 07:01:07 +0000
Manifest this update: Sun 15 Jun 2025 07:01:07 +0000
Manifest next update: Mon 16 Jun 2025 07:01:07 +0000
Files and hashes: 1: C0Em9awMYVhNg2sMId10Ef0_Qvw.roa (hash: nirBzQQ6k8BEyGM3hSdFnZ+pftgQMVbe2wljIKMV4wk=)
2: Ze3JFheq3wwsx_H115bb237YWQ0.crl (hash: JJ6q7J/F+8G/eld9Ds/2OrYRCOJzS0C9KlrwjI0Co+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:56:d1:53:9f:8a:df:c9:2d:c0:47:a4:5f:1f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Validity
Not Before: Jun 15 07:01:07 2025 GMT
Not After : Jun 16 07:01:07 2025 GMT
Subject: CN=eaa837ab1ffb66a0cec600219935d0b6010de2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:12:77:fe:5b:05:26:e9:0e:5f:98:fc:5e:
b3:28:83:9a:72:32:78:70:99:46:61:45:b8:bb:72:
aa:e9:83:e7:8f:b7:ff:81:25:0f:70:27:12:a0:68:
7d:b7:63:51:69:84:12:da:54:bb:3d:f8:e5:99:1b:
29:b3:77:db:5e:63:4a:ca:19:9c:cb:48:74:0c:f4:
94:e5:e1:d3:19:95:2f:3c:4c:41:0e:90:b8:f5:e1:
13:9b:3e:5e:74:f3:52:3b:6d:a4:52:a7:b3:62:2e:
e9:0b:0d:e3:a3:e0:c9:f4:5f:5b:58:d0:cd:e0:44:
55:74:66:ae:70:28:d5:c0:d2:dc:35:15:77:08:8d:
b6:a4:71:25:68:80:18:c5:a1:74:d6:1f:41:c1:26:
65:98:b2:ab:63:3c:23:ca:41:26:60:fe:7e:b9:2f:
69:53:26:6e:34:43:90:85:29:64:77:fb:e1:e6:d1:
47:ff:1b:32:43:db:73:8e:1e:66:cc:32:a6:af:ce:
c0:dc:4a:0a:12:27:3c:00:9f:8f:e2:1e:e7:db:a6:
eb:39:2f:76:91:37:55:de:2f:c2:0f:0b:55:b4:5b:
32:16:e1:74:50:f4:a0:14:55:e5:9c:45:5d:e7:0b:
29:35:f4:e0:9f:90:d9:48:5b:c0:27:b3:80:2f:8d:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A8:37:AB:1F:FB:66:A0:CE:C6:00:21:99:35:D0:B6:01:0D:E2:DE
X509v3 Authority Key Identifier:
keyid:65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b9:91:7b:76:2c:65:67:0b:61:0e:32:31:ea:40:96:19:f0:
00:6b:e8:8a:62:4c:c3:74:e6:58:5b:6b:70:4e:0e:b4:bb:e2:
8f:d2:6c:df:bb:ef:f3:74:32:8d:4c:13:51:f0:fb:17:9a:2a:
e8:5e:55:cb:35:de:03:f9:5b:8b:95:41:cf:b8:19:96:fd:5c:
ba:56:a1:12:6e:51:1e:53:d7:37:01:3a:39:4f:9e:a6:1c:40:
a3:a4:a3:45:e5:a9:18:33:07:8d:8b:b1:28:95:06:16:d2:28:
a3:e6:ce:49:16:31:a0:01:f2:a1:ab:f8:96:86:74:22:92:48:
03:a1:15:34:04:27:2f:31:f3:d0:7f:8f:12:d1:f6:c2:81:d1:
66:b6:06:98:61:91:d6:3a:78:d2:0f:99:ba:6b:75:8c:e5:a5:
5c:19:ae:5e:1d:03:71:ba:9a:91:c3:c6:6a:a1:9a:35:2a:93:
02:c4:2f:15:19:c4:d8:17:e3:5d:f4:0d:4c:e4:10:a5:99:28:
a2:66:4e:9c:dd:33:6d:bc:3c:26:f3:87:df:44:f8:65:11:39:
aa:08:9f:8a:5f:9a:6e:42:49:d7:d0:2a:13:c8:ee:cd:01:89:
41:b5:a0:08:a3:46:3a:cf:d3:fd:6c:3f:0a:39:99:22:02:9a:
8b:f2:da:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:14:47 2025 by rpki-client