Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
File: _Zrjdhfz--SIgLIw_nx84PDcQcc.mft (raw, json)
Hash identifier: HIEXNL6hwRd+DGxSNl+tCKMTwUkt9IIzlS1x/5XuGF4=
Subject key identifier: 99:DA:EA:3B:C3:BC:A8:A2:DE:BA:FF:5C:A8:61:80:3B:D1:F8:DC:60
Authority key identifier: FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
Certificate issuer: /CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Certificate serial: 0197808DFACDA4EA92D5039504EB493D9271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
Manifest number: 0207
Signing time: Wed 18 Jun 2025 01:01:17 +0000
Manifest this update: Wed 18 Jun 2025 01:01:17 +0000
Manifest next update: Thu 19 Jun 2025 01:01:17 +0000
Files and hashes: 1: 9n6_QxUWNBj6pf-W1Docqojo_24.roa (hash: W63L5HqQHsa90UnMU3ePl9vAesD8fNZQ8F6zbeRpPKY=)
2: _Zrjdhfz--SIgLIw_nx84PDcQcc.crl (hash: iXSIjExhVyK6BAmiTypN33EhHmVKt+D6bAGcKnQxa+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8d:fa:cd:a4:ea:92:d5:03:95:04:eb:49:3d:92:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Validity
Not Before: Jun 18 01:01:17 2025 GMT
Not After : Jun 19 01:01:17 2025 GMT
Subject: CN=99daea3bc3bca8a2debaff5ca861803bd1f8dc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:d2:98:9c:e0:e2:cc:37:6e:10:44:69:1c:
ef:02:97:6f:e9:8d:04:01:53:5a:e7:23:60:09:79:
0a:e6:93:e0:ee:c5:3c:04:9b:80:81:c0:77:f3:76:
a9:40:bb:db:f9:91:a2:df:1b:f2:eb:b5:36:aa:95:
86:34:11:b7:59:4b:8b:86:f0:bf:bf:73:79:b5:f7:
2d:3e:85:f7:2c:dc:62:5b:e1:ea:74:a1:32:e2:d5:
27:c3:b2:3c:a8:0d:29:ae:0d:1d:1d:47:da:b8:09:
14:75:f1:34:0f:26:b6:ca:6c:13:04:50:0b:1d:f2:
be:d3:1d:5c:17:b1:a0:ed:6e:eb:98:00:eb:dd:e9:
e4:01:b7:e8:5f:44:bd:0a:25:32:cc:c2:03:4f:7c:
5e:ab:a9:85:5e:31:97:ae:78:e9:56:d0:23:f2:0a:
08:44:7b:bc:a3:93:ef:5f:46:fe:e4:11:64:d0:7d:
d7:c2:fa:b3:44:46:bd:bd:25:8b:08:6f:18:73:87:
d0:b7:b7:e8:7d:ec:73:f6:6d:d8:e2:9a:84:e3:29:
25:39:d4:78:23:5f:19:33:c2:3f:a5:ba:ba:49:86:
9b:d1:83:5a:3d:f5:d6:51:9d:09:0c:25:9e:d4:ed:
fa:17:5d:0b:ad:32:05:3b:97:94:03:e8:6e:c1:0f:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DA:EA:3B:C3:BC:A8:A2:DE:BA:FF:5C:A8:61:80:3B:D1:F8:DC:60
X509v3 Authority Key Identifier:
keyid:FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3d:a3:f1:43:ea:d2:0c:f9:5e:ca:e0:aa:e3:a9:e9:36:b8:
25:2d:ab:e0:2c:83:e6:16:80:47:a1:50:13:c5:42:d2:8a:69:
dc:25:c0:be:4b:6e:ef:12:92:78:8e:1a:af:26:6a:91:98:ff:
61:a3:1a:6e:d7:75:c1:fc:10:cb:66:b0:9d:99:22:9a:9f:c5:
7d:a3:ac:e9:f0:93:fb:d6:9e:41:4c:99:0f:7c:78:23:63:b3:
54:d7:30:cd:3a:0a:87:d1:93:7e:92:09:41:51:e5:d3:e2:17:
33:82:49:b1:41:81:e7:4d:c6:72:11:97:a2:1c:b8:a1:ed:06:
77:64:f4:c1:3f:6a:ff:26:b1:38:b7:52:4c:6c:db:c6:b2:3e:
a0:84:f4:7e:d4:af:20:cb:1c:96:cf:02:8b:75:69:c4:6f:a2:
1f:9d:0e:ed:08:58:02:d8:9d:94:e8:29:48:c9:4a:f9:f7:97:
e8:39:30:ae:32:c1:5c:02:94:5f:a4:33:6c:1a:c6:ca:0f:50:
b5:41:da:ca:f1:ce:b7:00:db:da:74:75:52:b9:5d:93:46:a2:
4a:29:d8:0a:54:a2:41:2d:da:c9:26:39:23:2e:8b:9f:1c:32:
f9:74:13:22:8c:67:96:14:4b:21:9e:6b:ee:08:9c:47:d6:d5:
2a:de:c2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:27:44 2025 by rpki-client