Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier: 17eb8GkJb3KgNxzN3kzh+vf1ve09DpZKPwMuF1xaEro=
Subject key identifier: 5D:93:67:34:3F:4C:37:15:71:C8:E8:3F:25:89:B7:B1:B7:66:D7:1C
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 01976FD0FDDB0AF5DEB4DCDEEC1D788C5D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number: 0E16
Signing time: Sat 14 Jun 2025 19:00:56 +0000
Manifest this update: Sat 14 Jun 2025 19:00:56 +0000
Manifest next update: Sun 15 Jun 2025 19:00:56 +0000
Files and hashes: 1: 2W83qhPrVeT0ZBOGqzAyh11jqS4.roa (hash: nMU/AsGlDwVQqnZ4iKRGkAD06J73vEEF7NUQRjWCaME=)
2: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: 1MqRETh67z0QaLnv/B63MU39rFOu6aFkc4BOIw1/sx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:fd:db:0a:f5:de:b4:dc:de:ec:1d:78:8c:5d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Jun 14 19:00:56 2025 GMT
Not After : Jun 15 19:00:56 2025 GMT
Subject: CN=5d9367343f4c371571c8e83f2589b7b1b766d71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5b:4a:85:69:04:f1:92:a4:94:31:ac:f3:29:
e4:63:06:26:60:8d:6f:cf:8e:08:ad:84:75:bf:b5:
53:0a:66:49:81:74:38:f2:7f:28:ae:27:45:7c:cb:
4b:72:6f:28:77:b9:8e:0b:7f:d6:2a:f4:6b:68:2e:
5c:a9:a2:49:9a:52:f2:6c:6a:fc:9f:79:41:43:b7:
1d:8a:5c:1c:08:88:75:fe:9d:63:60:23:a4:a3:0d:
a8:f7:d1:85:03:f0:11:3d:de:b3:bc:89:4b:d8:0b:
0b:bb:cd:de:60:15:f2:88:47:11:f8:60:f4:8f:46:
c4:1f:57:ae:a0:d8:e0:8f:49:7f:3b:52:d3:7d:1d:
d5:15:3d:2a:40:4b:0c:3a:2a:07:f0:46:46:75:0f:
d7:b6:9a:c9:1c:27:8c:ce:89:a5:c3:c9:7e:93:cb:
01:ff:b0:d0:0d:98:44:be:30:5d:7f:e2:f4:0c:33:
a1:43:ef:be:17:9d:7b:6e:a0:37:4c:fe:a1:52:81:
81:7c:14:78:54:26:9b:2d:b2:e1:17:d9:d8:c3:94:
a8:7d:df:61:40:49:6f:ca:01:44:1b:30:e4:0c:f5:
ac:e4:ba:7a:ad:59:20:71:b4:9f:a2:b0:f3:9b:a9:
1c:19:c8:68:11:d5:b1:e5:06:ab:c7:7f:d1:19:0b:
8c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:93:67:34:3F:4C:37:15:71:C8:E8:3F:25:89:B7:B1:B7:66:D7:1C
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e4:68:f8:00:e2:50:f3:ca:0d:ff:2d:47:77:7b:45:47:74:
bd:79:49:98:90:ca:bf:19:7d:83:06:25:05:a5:01:40:04:81:
51:55:46:82:69:aa:d7:be:d3:e3:3f:9c:f3:3f:79:d6:7c:06:
5a:c5:20:a6:e7:bd:a0:b7:91:b3:f3:61:03:e2:36:56:31:10:
7c:e8:7a:99:02:ec:f3:46:32:df:6d:a7:6b:8a:e5:13:1d:01:
0b:13:a8:9f:11:9b:58:37:9b:37:4d:e9:8a:7d:8e:7b:b5:1a:
de:86:35:0a:ca:d3:2e:23:c8:50:27:1a:b5:f1:1e:63:07:d7:
6c:f2:d9:cd:7f:f1:d2:55:50:db:dc:20:40:8c:8f:b6:1f:6c:
d2:e9:1f:a1:ea:07:a1:f9:d6:37:ce:3d:58:07:fa:07:a6:b4:
6a:ac:1d:1b:e9:01:45:61:db:50:db:d1:40:09:ec:07:ba:d5:
4e:44:12:ce:ff:7c:33:45:44:0e:8b:e2:63:88:e6:57:00:c9:
e6:68:20:e6:4d:a5:6b:37:f0:7b:7e:25:dd:e5:aa:42:50:28:
35:3f:d0:7e:6f:91:c9:78:c4:3e:58:97:63:d3:d5:f6:aa:fd:
62:12:eb:4e:b9:72:08:05:0f:df:7c:3f:e8:7e:20:69:cc:f7:
b2:4c:d9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:04:57 2025 by rpki-client