Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
File: z58C29lyWVoxyr6rDNldcGqM3TE.mft (raw, json)
Hash identifier: avRoXSgKLe9MzHKl9XouTZZbxLKW9PTsDoKZsG0oT+Q=
Subject key identifier: CD:CC:FA:46:D0:0D:FE:D5:2B:7C:B3:E4:83:48:87:AF:7B:A4:C7:97
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Certificate issuer: /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial: 0197794221836411188D2F941595458BF411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 15:01:06 +0000
Manifest this update: Mon 16 Jun 2025 15:01:06 +0000
Manifest next update: Tue 17 Jun 2025 15:01:06 +0000
Files and hashes: 1: OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa (hash: zWfEvQNj+A4de5/9KNnrm0AaQsSkvDWrbOwMvnTm49M=)
2: z58C29lyWVoxyr6rDNldcGqM3TE.crl (hash: x4WgO+OuF5zd4l/TAGP6VBv1MDnGi+ffhBBQpm390Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:21:83:64:11:18:8d:2f:94:15:95:45:8b:f4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Validity
Not Before: Jun 16 15:01:06 2025 GMT
Not After : Jun 17 15:01:06 2025 GMT
Subject: CN=cdccfa46d00dfed52b7cb3e4834887af7ba4c797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b2:82:60:40:0f:ef:0b:78:22:58:87:29:c5:
15:56:b9:92:a3:79:6e:e5:09:48:1a:a3:1f:2b:3a:
af:db:fd:b5:c5:25:a2:43:ce:43:54:eb:f9:0c:81:
21:f2:da:31:c4:a5:21:36:d3:12:65:e6:f3:8e:43:
b3:9d:2a:dd:9e:3f:9b:2f:3c:2f:ec:a8:db:41:8c:
0e:b7:6c:52:b8:14:2e:50:aa:9e:3c:4b:a0:ec:53:
21:d4:6c:ca:f3:42:87:d1:ef:52:17:8f:44:d6:c1:
ad:b3:e8:ce:0f:5d:1d:b5:ab:1a:b4:2b:0d:75:68:
a9:d8:66:f2:0d:b1:8a:16:2d:d0:98:31:4b:e8:62:
41:a1:ed:a4:31:f9:d5:34:59:40:72:00:54:8a:d5:
89:19:07:8e:87:0a:d3:35:74:dc:40:a5:2f:54:01:
2c:d2:3b:cf:0d:eb:16:f2:17:ef:f0:01:1d:3f:e5:
ed:eb:92:42:f0:7b:2c:36:2d:01:f8:7e:aa:1f:b6:
f7:ef:63:be:d5:05:51:42:e7:2e:f1:66:a1:dd:74:
ce:69:f6:d5:66:12:8d:02:59:ef:4c:49:9a:7c:b9:
2b:18:32:16:3b:f2:13:60:ab:02:2e:08:f3:e7:f5:
b9:92:ab:f1:57:d6:8f:cb:1e:c9:37:91:5f:b4:02:
fe:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CC:FA:46:D0:0D:FE:D5:2B:7C:B3:E4:83:48:87:AF:7B:A4:C7:97
X509v3 Authority Key Identifier:
keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:da:ec:22:85:43:d1:1c:1f:8f:26:69:c1:dd:04:a4:13:18:
31:8d:fa:c0:83:0d:be:2a:58:ec:5e:f4:bf:0e:2d:b8:20:ce:
6d:c0:32:84:d8:5b:e6:b6:72:8a:0e:06:ee:e2:2d:79:8d:18:
d7:41:ae:71:21:81:ac:07:06:01:c9:5e:d4:c3:3d:b2:e4:17:
c4:ce:94:90:70:71:5c:a4:73:58:66:7a:36:ac:7b:37:fc:ce:
f2:cd:d0:00:68:14:e7:6c:ae:98:87:5b:48:c7:a3:fd:55:dd:
a1:ab:ad:5c:b2:45:ef:1f:a2:49:f5:37:58:46:8c:2a:47:b4:
63:3e:fc:f8:c9:d8:38:1c:bb:25:c4:14:d3:0d:57:21:0a:6e:
8e:0d:81:8b:5e:92:f8:e2:67:a7:d3:ba:6b:73:87:01:25:74:
03:d5:eb:ca:a7:db:1f:75:23:d7:91:05:76:e4:68:9d:b2:86:
2e:e6:79:ac:12:dd:f4:13:80:4e:40:4f:31:5a:33:b4:7e:ad:
31:2e:af:3f:5e:3d:10:2a:e8:d4:7e:aa:67:2d:96:2d:f3:ea:
24:48:bb:0b:5a:3d:ba:d6:da:0c:da:55:a1:36:6f:70:e0:94:
1a:b5:a2:41:35:cb:90:92:13:0e:a2:f2:64:97:62:47:83:a0:
70:b0:42:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:16:19 2025 by rpki-client