Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: JIGvufSJCm5NHNUvcKGnOCpd666tA4zIAJfu2ehPZ9Y=
Subject key identifier: E9:8B:1F:F2:95:28:9B:26:46:81:3B:FA:C9:15:9F:B8:70:70:D4:FB
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 01976BBDB2364FF9B654EB41190EB5D76FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 00:01:23 +0000
Manifest this update: Sat 14 Jun 2025 00:01:23 +0000
Manifest next update: Sun 15 Jun 2025 00:01:23 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: 21xKqHiYrhvPG5JWFiOr9iA1GKL0c5/t5fRtyALINic=)
2: Tpjw3Nc3KI-z5sFPTugglehoVro.roa (hash: hQVvNBqIbdUFIzp+3WsVNIaxhLKQfbJlxs6hdH4n1Uk=)
3: diSC8nPgEABB-CJx_ksMgSsNles.roa (hash: P6nuoJWWHEaEC3HR83/5oy/90/lUhtiTHhAwuDUVMMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:b2:36:4f:f9:b6:54:eb:41:19:0e:b5:d7:6f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Jun 14 00:01:23 2025 GMT
Not After : Jun 15 00:01:23 2025 GMT
Subject: CN=e98b1ff295289b2646813bfac9159fb87070d4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:83:67:37:0a:a5:5b:74:4b:2b:2c:e6:4c:
1f:40:fd:95:21:a3:14:da:21:c2:a0:9d:30:4f:cc:
eb:32:e3:65:e3:50:bb:e7:ae:39:57:15:6c:30:b8:
4f:1a:de:f0:d2:cd:90:13:9f:f9:7a:63:67:a2:e3:
76:a7:b5:e8:31:3a:8f:21:57:c6:e6:62:ff:94:5d:
9b:5a:b9:cd:f6:26:d3:b7:2f:38:49:56:cf:bc:fa:
8c:92:e4:d2:0c:45:f0:13:48:05:91:06:54:bd:d4:
71:56:00:5e:73:9b:0c:b4:6e:ab:d1:72:6f:61:11:
34:53:a0:c3:40:f1:e6:c2:92:2a:fb:35:53:bf:0a:
11:07:57:dd:2d:e2:68:bf:66:10:52:f8:31:e8:98:
f7:a3:d6:55:75:1e:f8:d6:ff:7c:dc:f1:dc:41:b6:
5d:d7:9b:be:24:43:41:d3:ac:d6:db:96:54:ca:fb:
22:31:d0:b4:a5:58:c4:3f:67:4b:fb:3d:bb:ba:85:
1d:fc:9e:50:11:dc:f6:be:df:2d:9e:85:10:0f:51:
bc:6b:98:9a:97:f8:16:57:a6:6c:ac:4f:a4:32:c7:
c8:23:fa:83:2e:e8:a0:84:99:4b:48:31:dc:1d:6a:
87:19:76:41:1b:f0:1f:6a:f2:ea:03:74:17:78:7a:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8B:1F:F2:95:28:9B:26:46:81:3B:FA:C9:15:9F:B8:70:70:D4:FB
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:96:77:e1:36:26:ea:f6:d9:d3:f8:af:7a:86:a5:76:61:73:
c6:46:bd:40:82:30:91:03:da:fe:48:eb:e4:d8:c9:c1:15:f2:
66:10:a9:28:5a:59:cc:4c:d0:0e:be:66:0b:5f:48:e4:dd:09:
4c:af:91:d4:c7:dc:1c:32:4b:b4:da:ff:af:53:d0:01:02:67:
10:7f:d2:3f:32:a4:65:92:a7:f6:1b:0c:a3:6a:db:19:22:db:
e3:56:39:24:c9:4e:00:7f:c3:6a:f2:ea:31:21:03:7f:6c:a5:
96:9a:a9:47:1b:41:5e:bd:22:3f:71:1c:9d:e3:f0:d9:db:c6:
8e:e4:93:d2:cb:3f:49:4e:b7:39:32:c9:04:f3:da:f1:c9:9b:
31:60:06:2a:3c:7f:91:47:9b:3a:e0:59:78:21:cc:40:09:90:
52:c3:fd:c8:ae:7b:61:d9:e8:b7:8a:92:58:38:40:53:e3:05:
5f:1e:1d:79:d6:16:0b:80:cf:24:8e:ab:f0:2d:60:a0:85:4a:
c3:16:e7:9f:85:4c:1f:6d:3e:5e:23:22:8d:54:c2:6e:6d:2a:
2d:f6:3e:71:e2:63:3f:83:d6:94:bc:0f:db:82:17:14:2a:ac:
07:36:d0:96:0d:09:28:70:a3:df:77:2f:e6:04:9a:e0:08:b0:
e7:79:e7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:06:24 2025 by rpki-client