Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
File: zRQ2kCMKRApot6iqmCefL2Xf7ig.mft (raw, json)
Hash identifier: AqMTcpF2MvffCwVMowCwjCWrh7Jvor+QEiStWFbQelU=
Subject key identifier: B4:B4:B3:52:20:5E:ED:24:DB:CA:5A:C2:C3:23:51:4E:75:2E:19:D2
Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Certificate issuer: /CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Certificate serial: 01976D3E87294D6EA0D886BA753F54C0D14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
Manifest number: 1291
Signing time: Sat 14 Jun 2025 07:01:43 +0000
Manifest this update: Sat 14 Jun 2025 07:01:43 +0000
Manifest next update: Sun 15 Jun 2025 07:01:43 +0000
Files and hashes: 1: vHQRV0jRUXExLLAYBdY2ODpzWoo.roa (hash: 7UhAMCr3OjHllJdnfdmjdJInrKVauXU3M4e5nn0fWuA=)
2: zRQ2kCMKRApot6iqmCefL2Xf7ig.crl (hash: QU0gmNmsT7JqIh0JpgHDMA44ZfGuNjIY+mprJOFO8dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:87:29:4d:6e:a0:d8:86:ba:75:3f:54:c0:d1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Validity
Not Before: Jun 14 07:01:43 2025 GMT
Not After : Jun 15 07:01:43 2025 GMT
Subject: CN=b4b4b352205eed24dbca5ac2c323514e752e19d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:34:b9:e0:da:9c:4d:c4:c6:74:38:9e:2a:
77:68:89:db:2d:c8:55:d8:f0:3f:28:0b:34:0f:a3:
83:e3:96:e5:ef:d9:44:3a:6c:e9:ef:f7:cf:8f:eb:
0d:87:8e:95:f0:f7:f1:d6:30:ca:f1:6a:38:24:24:
6a:60:53:e8:c4:11:b0:48:98:3a:f7:c0:f4:f5:e2:
e4:99:6a:fb:87:4c:57:01:5d:60:7d:6d:4a:3f:06:
27:f0:58:b0:f9:b1:06:05:b4:c4:11:73:ac:06:03:
81:07:22:b1:a1:1b:51:fc:db:a4:a7:84:74:0d:2d:
46:c1:a0:f0:79:86:a4:a1:66:a4:63:6c:77:5b:93:
c2:5b:3a:d0:cb:3b:79:ee:41:29:36:2d:59:97:d6:
68:a1:f7:83:6e:fa:6f:6b:91:8a:80:a3:f4:d7:1b:
74:98:d8:81:ba:46:5c:ee:aa:a9:31:36:27:58:e1:
28:08:1b:7b:f1:e3:df:b4:b1:56:78:8a:ac:2c:bd:
d9:99:2a:99:1a:da:9c:71:eb:5c:d7:5a:8b:fe:b3:
08:9d:f2:60:ad:21:f9:82:db:e7:8e:23:5a:dd:04:
13:d7:96:44:ff:49:ee:e8:27:8f:f7:15:7d:c5:b3:
aa:c5:24:d0:ab:dd:4f:67:f7:d8:af:d2:03:93:58:
d4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:B3:52:20:5E:ED:24:DB:CA:5A:C2:C3:23:51:4E:75:2E:19:D2
X509v3 Authority Key Identifier:
keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a4:d8:ac:53:3b:9c:04:4a:a6:76:00:f2:8f:e2:e4:28:b6:
16:db:3a:e3:03:17:68:c4:56:e3:ef:c0:63:f5:c3:2b:53:38:
f0:ca:b1:67:6b:5b:6c:1d:96:db:7c:4e:a7:87:4c:fd:5c:9c:
4f:a4:bf:03:14:1f:ba:52:f0:0c:80:44:34:80:ba:23:b5:c1:
a5:e0:a9:eb:40:ba:81:f8:c8:d7:a6:8f:c7:90:7e:04:4f:75:
fe:0e:1c:e5:1a:f6:c2:23:f7:aa:26:40:07:12:7b:a5:9f:fc:
6a:7f:dc:f4:58:3a:9a:31:28:bb:f7:d8:14:f3:b6:1e:c7:ed:
d8:b1:01:b2:bd:f7:e3:f9:b6:36:5f:42:07:6d:48:fb:cc:43:
aa:b7:35:cf:54:ab:d4:4e:c4:17:f8:81:97:27:57:3f:2d:94:
2b:a1:7f:aa:09:18:72:15:7b:81:de:fb:82:4b:c9:10:e9:d3:
b3:e0:15:d2:23:7a:6b:9b:8b:bc:f2:6e:0e:bb:60:52:bf:72:
5b:06:ff:52:6d:5b:63:d1:86:c9:7b:ac:f0:85:ce:9e:81:2a:
a0:8f:74:f1:4e:63:17:c0:55:59:61:8e:08:4c:72:70:4a:b8:
39:1a:63:c2:1a:b7:4b:94:fe:56:7d:78:5c:ed:54:9b:b6:7c:
a4:94:16:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:12:57 2025 by rpki-client