Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
File: z65GEYj_we8vOhR0VxqUOaVTdKw.mft (raw, json)
Hash identifier: Ii5PqDgAFzMtxDmYW+s8p3aUFUqMLf5NkbXrr9tjy9U=
Subject key identifier: B9:EE:ED:3F:72:55:62:5F:EB:CE:40:03:6D:87:D1:38:CE:95:CD:57
Authority key identifier: CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
Certificate issuer: /CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Certificate serial: 01977188C51DD92F4962D5726558DB7653A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
Manifest number: 02AA
Signing time: Sun 15 Jun 2025 03:01:18 +0000
Manifest this update: Sun 15 Jun 2025 03:01:18 +0000
Manifest next update: Mon 16 Jun 2025 03:01:18 +0000
Files and hashes: 1: 1k7B6OZhB1CFcx64eFikJ90IArY.roa (hash: BObzQX0NmXL+SkwyifLtayjL5iVc0jp/QAmHV8ZAgNM=)
2: z65GEYj_we8vOhR0VxqUOaVTdKw.crl (hash: /N8oGxgbkbJvNO8BHFT7IZA3aauv8ofLElTYGjJmu4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:c5:1d:d9:2f:49:62:d5:72:65:58:db:76:53:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Validity
Not Before: Jun 15 03:01:18 2025 GMT
Not After : Jun 16 03:01:18 2025 GMT
Subject: CN=b9eeed3f7255625febce40036d87d138ce95cd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:76:e7:a5:e7:1c:34:b0:7e:bb:67:07:15:
3b:61:3c:f2:a0:12:48:26:aa:57:2f:ba:3d:65:41:
bb:62:8d:76:82:de:80:dd:b5:5c:0e:dd:f3:ea:6e:
49:62:67:6d:9b:81:f9:c8:41:7e:76:a8:e7:7b:0b:
e4:f7:00:1e:7b:1b:7b:22:a1:c2:37:ef:d5:31:18:
c9:f7:c0:46:a5:aa:0c:98:eb:7d:be:54:ea:73:de:
dd:8c:55:3c:03:6e:a3:0b:04:0a:36:3d:b1:98:bb:
a0:41:e8:36:70:80:dd:6a:2d:f9:da:6d:8a:61:b2:
b2:9e:e5:e9:57:0e:dc:b5:0b:67:ac:d1:f4:dc:d8:
d6:d8:0a:8e:13:b8:b4:ed:03:d3:04:9a:93:28:44:
78:97:46:f4:7e:e2:fe:e9:84:db:7e:fc:75:bd:d4:
8b:5a:98:11:e7:b8:f9:ba:4b:ab:b0:bc:df:29:e5:
3b:06:84:b5:ac:e9:d7:5a:bd:b7:57:6c:19:54:c1:
26:d5:bd:9f:06:13:e4:d8:cf:da:c2:ca:15:f4:05:
f5:84:77:8a:11:d1:03:df:5d:7d:ba:dd:5e:d3:78:
98:5f:27:98:4d:ad:12:b4:e3:7b:72:64:98:81:83:
c6:9e:3a:f5:00:e1:13:03:c9:43:d7:c3:7b:34:49:
5d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EE:ED:3F:72:55:62:5F:EB:CE:40:03:6D:87:D1:38:CE:95:CD:57
X509v3 Authority Key Identifier:
keyid:CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d8:13:a9:ce:2a:91:92:2d:94:cc:eb:c9:82:34:07:eb:cd:
c9:65:e0:aa:f8:d7:64:d6:8e:a1:bd:61:af:94:b3:05:5d:83:
fd:d4:96:d0:98:08:9c:f2:f7:34:f1:79:51:cf:a4:9c:55:6d:
31:0a:91:4a:15:5b:72:7c:a2:a6:61:44:44:0e:0d:35:48:2d:
3f:c5:17:cc:e5:c9:9c:5b:6d:ef:ee:04:a0:71:3a:38:ed:72:
2c:75:5a:2c:96:0d:73:6b:50:ad:09:3a:c5:57:00:0e:da:1c:
f1:66:a2:4c:6d:97:78:96:82:5b:e7:34:2b:fa:ee:65:60:7c:
44:7b:ba:bb:76:90:49:82:6e:d2:65:61:d4:1d:2f:7a:02:50:
9d:25:52:58:2d:6d:84:81:5a:03:ae:ca:67:25:b4:e0:ee:2e:
88:53:58:e4:bb:1b:86:d1:5a:da:d6:c5:2a:82:37:7e:3a:64:
1f:ac:44:24:73:1d:3d:a3:d5:43:5d:58:c5:92:77:38:66:95:
df:75:80:58:80:e7:e9:fc:46:2a:6f:0a:a3:7f:08:c6:59:35:
72:1f:db:12:65:cf:6f:80:8b:52:83:38:d6:9c:a1:60:5b:4c:
b5:95:d4:18:45:dc:5d:13:56:f5:08:e9:23:40:99:12:6c:04:
a3:4e:1c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:58:55 2025 by rpki-client