Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File: z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier: sW7LPOewc0OzjeVkJ7cvQD78VZvBppNcSLL38Du38bw=
Subject key identifier: 72:5B:67:17:31:BB:00:31:C1:AD:29:77:70:A9:DA:C9:FF:86:D9:90
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial: 0197887D762817379F3E0EE271D029F41560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number: 1131
Signing time: Thu 19 Jun 2025 14:00:12 +0000
Manifest this update: Thu 19 Jun 2025 14:00:12 +0000
Manifest next update: Fri 20 Jun 2025 14:00:12 +0000
Files and hashes: 1: 4LDf3BAWYj8mO4n0cpZaSTYNCgQ.roa (hash: 2PsEN5j0ePjCMadYZW/XY72E9eg7u91QL60wRji2nxY=)
2: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: 4JZ1tCxg1LiD3ihXP/4TSch89wGJ0xczEVUv4oNlGrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:7d:76:28:17:37:9f:3e:0e:e2:71:d0:29:f4:15:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Validity
Not Before: Jun 19 14:00:12 2025 GMT
Not After : Jun 20 14:00:12 2025 GMT
Subject: CN=725b671731bb0031c1ad297770a9dac9ff86d990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:ad:bd:95:41:98:b6:3d:0f:3e:af:47:62:
04:7d:a4:02:d1:4a:45:73:fc:5d:32:5d:82:c8:ba:
18:65:c6:59:bd:1d:c7:73:a2:c3:6d:99:5e:5c:d3:
04:74:3c:1d:6c:47:76:a1:39:da:ad:1d:a5:c2:5a:
ef:67:ca:ef:72:2f:7a:69:60:f5:0d:8e:07:66:7d:
ef:89:30:51:31:77:98:a1:9f:b6:1f:96:5b:00:19:
b6:21:88:4d:ad:9b:db:a7:9e:85:ef:ab:58:70:02:
ee:4c:1a:f8:1d:7d:ac:f6:94:d7:9d:db:68:c3:e8:
84:8e:60:79:47:85:da:5d:2c:e7:9e:17:f2:47:4f:
ff:5d:eb:57:18:12:0d:79:56:8a:08:2a:cd:29:48:
f3:6a:34:1d:f9:a2:c4:b1:6e:ea:86:3f:fc:bf:60:
66:b2:c2:3d:1f:d1:5e:a9:d5:52:25:f2:2a:ea:92:
3b:bf:ed:3a:c0:ef:68:2a:0f:96:5b:73:12:80:01:
52:47:a0:0e:c1:49:75:d5:2d:08:53:4a:c1:41:0e:
6a:8f:0f:10:68:5b:d6:4c:1d:e6:ca:0b:77:83:0a:
9b:39:00:34:38:f8:46:ac:30:12:29:e4:9d:c8:c6:
49:a5:cb:b1:f6:f5:12:8e:88:33:da:d4:47:63:de:
94:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5B:67:17:31:BB:00:31:C1:AD:29:77:70:A9:DA:C9:FF:86:D9:90
X509v3 Authority Key Identifier:
keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:67:42:a6:71:b1:09:49:df:e5:d3:55:f8:ac:6f:00:70:17:
ee:cf:5a:09:28:cf:f1:6f:7f:3c:b5:a4:11:e3:4e:95:42:fa:
e4:9d:0a:c5:01:6d:f7:d8:85:25:f6:f1:e2:5b:9c:b2:39:35:
0a:63:40:e3:a0:3c:88:58:cc:ff:1e:77:d5:da:3e:08:2d:e6:
c7:7d:0d:66:6d:fa:df:4c:d4:7a:c6:36:9b:ad:f5:9d:21:6f:
bb:30:0d:00:d3:b4:ad:2d:fe:d7:c6:0f:da:a0:8a:da:e4:dd:
7f:7a:1b:c5:aa:18:60:6c:3d:e5:7c:fe:42:8f:75:01:85:4e:
e6:0a:d5:41:b2:ec:5f:c8:93:04:90:81:05:e9:a9:45:d3:47:
ae:cd:96:4b:d6:b0:00:da:74:20:a7:de:b4:5d:05:0e:e6:ba:
40:16:50:29:e8:78:c0:81:87:2a:e8:c9:fe:31:35:1c:5f:de:
e0:09:f4:b0:1f:c6:bc:86:e1:c8:e2:09:05:2a:a9:65:2e:fc:
50:b0:3c:20:84:e1:e9:76:2c:5a:8c:b0:9e:80:17:66:8c:d0:
e4:6c:04:26:c2:f2:11:89:75:62:7f:cc:ba:c6:04:8e:87:aa:
44:15:4a:ac:ce:e4:96:63:b2:26:3b:e7:fc:a0:92:34:fa:0a:
a5:ac:94:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:36:17 2025 by rpki-client