Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: vxXo1aN9ugmK4XiCAsjk8mk/008hzRJFq1BmQ2tEsyE=
Subject key identifier: 3A:06:DF:EA:71:AD:45:15:33:15:3D:73:51:80:73:A1:3D:53:9D:5D
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 0197775394AF0C5C4199CD59ECDC98AA2386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 123B
Signing time: Mon 16 Jun 2025 06:00:55 +0000
Manifest this update: Mon 16 Jun 2025 06:00:55 +0000
Manifest next update: Tue 17 Jun 2025 06:00:55 +0000
Files and hashes: 1: GeqUCcFpQ21Ke1I_WIJvk2jePiQ.roa (hash: 26yR+VCk/Hf4BfoJU9xGk7UFdbLVpFDxyv4u/gu5wGA=)
2: wbMPRaPeBCBjr_X1gpDO7WwYRg0.roa (hash: GEEk7uH2XTiN16zpAji2ekHgUSjOP6/rQg31rkY0wKE=)
3: xG8mhMV87H4zrHIWKqzuRUqeQPg.roa (hash: urIMILztFQN60p/ZQRBKUgWXG4HvMI/s4ku0GaXCltA=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: 3LSyE5Ob+mpUjMjlU6VOKZRHSa0aDU1fN9GldAABlGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:94:af:0c:5c:41:99:cd:59:ec:dc:98:aa:23:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Jun 16 06:00:55 2025 GMT
Not After : Jun 17 06:00:55 2025 GMT
Subject: CN=3a06dfea71ad451533153d73518073a13d539d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:53:34:21:60:69:10:90:7c:b7:6f:31:53:
2b:b6:2d:dc:5c:1b:a8:70:e2:a0:d3:c7:e1:7b:fd:
76:60:90:16:c5:ec:2f:ad:c7:04:d7:f4:6b:3f:9b:
fb:b5:0b:a6:dd:fb:35:54:b6:b0:72:af:58:cc:a1:
eb:65:04:86:59:45:53:b2:8b:8c:c2:e4:27:3c:4a:
c3:80:da:f0:3d:27:c4:8c:6d:c8:8d:e8:6f:23:bb:
5d:a4:e2:c3:49:e1:1f:cd:2d:c7:57:20:ac:f0:f9:
13:4b:5f:95:f4:a7:21:39:fa:4c:ee:c1:ef:87:58:
0f:f3:f1:d0:e5:73:38:f8:7a:13:44:f9:cc:ec:f1:
c5:25:33:ce:82:65:5d:72:d1:39:ee:de:a2:f4:a7:
f8:be:ae:ec:df:5f:26:95:84:0b:9a:42:b6:e6:a8:
bc:1a:b0:d7:fe:32:48:e9:86:b6:e9:06:13:fa:02:
49:2f:ef:cf:72:88:6a:7f:30:ee:93:b6:1c:7a:35:
e0:53:c1:06:fa:14:fb:5c:fe:24:a6:79:5c:63:28:
47:a9:8f:85:84:ac:b2:78:d9:65:cc:57:8f:e9:a4:
70:21:1b:f2:bc:1d:e8:2d:35:4f:44:e4:d9:f8:f0:
6c:3d:a7:70:16:9a:4a:a5:ee:58:eb:cd:ee:83:d2:
b3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:06:DF:EA:71:AD:45:15:33:15:3D:73:51:80:73:A1:3D:53:9D:5D
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:89:0b:63:18:eb:52:d9:70:4d:e8:ea:44:d2:8f:bf:99:d5:
de:7f:f4:8f:2e:b6:ac:e5:9c:97:78:ea:8b:77:da:01:d7:e3:
f7:96:46:06:0a:56:04:1a:9a:e8:86:1b:3f:86:bd:f1:7e:20:
28:41:f8:8d:50:27:2c:68:15:8a:0b:40:b2:c4:29:ef:2a:51:
a7:f9:ac:81:fe:62:a6:cb:77:cd:4d:6f:7c:77:e0:a2:16:39:
fd:60:01:d9:b3:13:2d:22:44:17:fa:1f:33:86:aa:81:d5:e8:
34:88:b4:98:45:05:e1:0f:ad:e8:8b:7a:0b:e0:80:63:73:f6:
bb:c0:69:88:cf:69:a0:db:9f:1b:c7:0a:57:bd:43:2d:77:df:
d2:02:fd:02:55:5b:b7:03:22:42:ab:61:bf:da:69:05:87:c2:
29:03:80:93:4f:ed:c1:4e:0a:c3:b6:14:3d:10:6b:6e:f8:fc:
a6:d0:31:07:67:57:0d:2c:e0:81:99:14:5b:3f:79:a2:e9:96:
a5:3e:09:fb:93:0a:e2:42:82:2a:9b:5a:30:fb:8c:79:56:8c:
a6:9f:a3:3e:6d:ba:54:4a:4f:d6:2b:7c:58:8e:86:91:bb:fe:
14:54:b6:0f:85:09:57:5f:31:2d:4b:82:36:e8:5f:9f:bf:1b:
29:2b:54:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:36:45 2025 by rpki-client