Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
File: 2Znl1k5EsXM8YXNzN86CtKaUOkY.mft (raw, json)
Hash identifier: bzJB1FmDxN7iOKGbzvrD8fgOmUq3RERXJ6E22ofqF20=
Subject key identifier: B1:B9:D7:02:F2:B6:57:7A:1C:8B:BE:81:E3:AA:19:BC:F4:EA:21:BA
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial: 01976C98810D1267611EE692F909F464F24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
Manifest number: 03CD
Signing time: Sat 14 Jun 2025 04:00:23 +0000
Manifest this update: Sat 14 Jun 2025 04:00:23 +0000
Manifest next update: Sun 15 Jun 2025 04:00:23 +0000
Files and hashes: 1: 2Znl1k5EsXM8YXNzN86CtKaUOkY.crl (hash: syU5AlHI0I+o6z7rZMs2GPnMN1M/0ZQAuNv1hjyY/6I=)
2: xandp5YxydZR7wlTUWsPRookRQc.roa (hash: TvsdUKw2eDJNV/EQUTSOnGCjImCSLoPXA7kEvQkSjo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:81:0d:12:67:61:1e:e6:92:f9:09:f4:64:f2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Validity
Not Before: Jun 14 04:00:23 2025 GMT
Not After : Jun 15 04:00:23 2025 GMT
Subject: CN=b1b9d702f2b6577a1c8bbe81e3aa19bcf4ea21ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:cc:83:4a:a6:29:08:77:5c:84:9e:a4:05:
67:c6:0e:a3:b6:f2:1e:12:b1:b7:6c:5d:4e:3e:ed:
a0:d9:db:ce:5b:87:13:2d:99:8d:18:71:94:cc:ec:
c2:16:35:61:0c:46:ba:1b:e4:0e:fc:4f:dc:6c:1a:
89:73:28:94:6c:77:a4:42:0f:1e:70:76:fe:13:aa:
d6:a4:c4:bf:73:e4:2d:ed:1f:64:e2:5b:52:f4:1c:
3f:b7:d9:50:3e:a1:70:56:39:08:02:d1:4b:ac:a0:
ce:47:1e:e9:64:5a:6e:a2:5f:d6:8d:29:0c:4d:f5:
f8:c6:5c:6b:db:b3:74:c9:d5:f4:8a:ed:5a:db:85:
a9:fa:d1:3f:aa:46:dd:70:5c:f6:da:8d:3e:61:2b:
08:dd:de:fa:24:4a:60:e4:bb:d2:b1:ac:0f:63:d1:
d1:bd:9d:3a:11:c9:d5:68:8d:5f:73:88:2f:ac:16:
6c:2a:27:34:c9:ca:24:da:07:0d:1c:7d:45:74:a7:
f8:e5:14:16:fd:df:87:2f:a2:ff:a4:1e:e7:57:35:
49:5c:cd:fb:66:1c:db:8f:df:68:24:91:4f:48:23:
28:fe:1a:a5:18:ca:19:ef:2e:bb:7c:aa:ae:79:d9:
fc:84:25:e4:0b:f8:05:23:99:54:0a:f3:e2:46:5e:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B9:D7:02:F2:B6:57:7A:1C:8B:BE:81:E3:AA:19:BC:F4:EA:21:BA
X509v3 Authority Key Identifier:
keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:20:10:88:34:80:0c:b6:6a:ea:db:c3:8f:9a:cd:d5:45:0b:
9e:d0:0a:c6:4a:b3:e8:bc:a3:66:e7:8e:b6:34:25:ff:cc:9a:
b0:68:6e:bb:f5:6b:06:88:78:55:87:1a:02:54:f1:9a:1b:e1:
48:ee:58:d7:4d:40:00:dc:43:5d:84:6b:f6:25:f5:e6:3e:44:
91:1c:07:5d:18:75:cb:8c:28:ba:43:78:0a:4a:6d:e2:bd:a7:
1f:fb:5b:9d:c8:ca:ac:ed:1d:00:3b:42:0b:e9:c0:dc:d1:43:
91:68:e9:86:07:a0:82:b8:37:c9:de:75:82:01:ad:16:89:0c:
39:5a:4f:04:e1:38:fe:a2:81:e4:64:4d:d5:bd:8b:41:cf:da:
7d:8b:ab:ca:af:43:22:2d:e9:ba:74:c5:40:3e:fb:b0:cc:21:
be:be:fd:28:a6:55:14:84:64:d6:24:eb:f3:27:90:6c:9a:a4:
b7:fa:a8:cf:60:be:30:63:e2:1d:e0:c9:6f:fb:59:ae:eb:22:
26:8a:fc:cd:11:75:b6:2a:4e:e1:01:ea:23:7a:8e:ac:1d:2c:
ff:25:04:22:cc:50:72:73:44:d3:63:61:75:b2:5e:72:18:c1:
e2:93:e4:95:66:e6:8e:8b:fd:45:0b:d5:bc:8f:9b:1b:1a:fd:
ec:c8:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:24:09 2025 by rpki-client