Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
File: z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft (raw, json)
Hash identifier: ZHQdAi0Iple9sQuPfHZ8u9tTJmMFRSPXKigeHFWMcmg=
Subject key identifier: A6:73:D7:BC:F1:90:EC:96:1F:82:48:6B:60:8F:11:D6:87:63:D5:90
Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Certificate serial: 019771F5EC49F86B6AFE467173A888B535A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 05:00:31 +0000
Manifest this update: Sun 15 Jun 2025 05:00:31 +0000
Manifest next update: Mon 16 Jun 2025 05:00:31 +0000
Files and hashes: 1: hPBXvKQdaqlVU4nQ-2Te7vaa8Bo.roa (hash: c9xr2QPdOJHBS76dYaN+BTyMMmlA60SbcteFKaCmJMA=)
2: z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl (hash: MhOyQc2OZLzlFER4qGyNu28xNAZX+WW3PIK2Heu0bxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:ec:49:f8:6b:6a:fe:46:71:73:a8:88:b5:35:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Validity
Not Before: Jun 15 05:00:31 2025 GMT
Not After : Jun 16 05:00:31 2025 GMT
Subject: CN=a673d7bcf190ec961f82486b608f11d68763d590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:14:9f:52:b7:8e:80:2e:4f:7b:da:ac:7f:8e:
6b:92:5f:a6:02:07:6e:eb:50:a8:3b:ae:9d:35:d4:
59:e2:47:6d:73:84:7a:21:d5:6b:94:bd:1d:5c:bf:
22:d2:53:d0:b6:cb:0d:25:38:f2:f9:eb:da:e8:a4:
a4:14:e9:ae:7d:b5:eb:af:ce:3d:b9:52:a1:46:30:
18:c2:2f:20:b8:78:2d:95:69:c9:34:3c:6c:19:25:
1b:61:e9:5b:ea:b0:99:ac:29:52:c2:9a:0b:69:6b:
21:77:95:1f:33:a6:e6:1c:87:96:46:66:16:6c:56:
e8:07:72:ef:95:5a:08:6e:ce:71:07:af:02:89:1e:
7c:23:90:a8:c4:f3:fa:16:bb:04:03:da:e9:d2:c9:
02:5f:5d:51:f0:29:1d:87:0a:32:a1:2f:cf:37:40:
5e:d9:4c:38:48:36:d1:83:8e:98:2c:9b:7e:63:c5:
c9:92:4f:1b:fd:a3:ea:ac:bc:0b:ee:ca:db:36:d1:
c5:6d:08:25:52:2e:e9:d3:ca:09:01:36:2e:e1:f2:
ec:91:47:8b:42:3d:b9:05:a8:fa:7e:28:d9:3e:c6:
e0:62:37:28:e5:7a:5d:95:0b:d6:1e:20:b2:a5:6c:
8d:3a:d6:41:a3:c7:fe:bb:40:e1:b0:f0:4f:75:19:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:73:D7:BC:F1:90:EC:96:1F:82:48:6B:60:8F:11:D6:87:63:D5:90
X509v3 Authority Key Identifier:
keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:47:65:3f:3e:0d:c6:7a:db:8d:1c:d0:c8:b4:a4:66:82:32:
92:4a:ff:23:4f:1e:5d:b5:68:cd:5e:80:9e:cd:bb:74:a1:43:
22:5c:45:1b:b3:b3:13:f9:dd:96:d6:00:51:2e:40:a1:c5:38:
57:c3:52:db:4d:f5:8a:54:ed:c1:99:5f:6e:de:6a:eb:27:85:
f0:42:1b:92:17:e4:1b:78:40:28:79:1e:60:e6:e8:24:68:18:
d0:9a:45:1e:d2:fa:e4:0a:65:4d:9b:3b:a1:6c:00:29:24:52:
90:62:7f:d3:95:a4:cb:4b:6a:b0:a1:12:d3:16:ab:c1:61:14:
be:b1:64:e3:55:2e:f0:0e:12:f2:ad:e0:4a:56:89:73:24:86:
34:f6:b1:60:63:05:4a:12:ff:f7:43:6e:8b:3d:40:32:fa:b4:
d6:e1:ad:53:b8:b0:25:f7:aa:a2:25:3e:84:a2:47:d4:1c:a4:
aa:3b:66:a5:b5:80:36:0b:45:cf:7a:9b:0e:3c:da:f7:68:da:
cc:bb:98:87:5c:fc:79:65:81:b9:6b:b1:e9:af:13:21:89:6a:
e6:58:e5:c6:e3:7b:b2:59:ac:34:ac:12:c4:da:ed:b1:d7:76:
3b:91:47:92:36:0b:45:b8:2e:35:1f:51:0a:fc:8b:3a:1a:4e:
27:e0:ac:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:01:22 2025 by rpki-client