Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
File: mZYvXuAnimDLvNQWkZH3FIEhatQ.mft (raw, json)
Hash identifier: GMluYYDl8Yx4WDJcoJOnug6S7OeLNFjmEYs6U+CEMuM=
Subject key identifier: BB:86:C8:84:B0:C4:98:4E:3A:8F:37:37:60:DB:B6:EB:6E:A8:0A:68
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Certificate issuer: /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial: 01976C98A43C2ED425C401E4C5AE4ADA8C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
Manifest number: 12C6
Signing time: Sat 14 Jun 2025 04:00:32 +0000
Manifest this update: Sat 14 Jun 2025 04:00:32 +0000
Manifest next update: Sun 15 Jun 2025 04:00:32 +0000
Files and hashes: 1: PcKfcpxjxCfbogVi4GU3TNWXfWo.roa (hash: FyEhv9qszU5/I+NRa1KRYr4i13WZJNlUiL5+rA2wd9M=)
2: dKjh9OyM_cot3UzX7jW4QBDob5U.roa (hash: HTTUqeSNDV7AnFAFILfDkkX8OZRGZuFCWYdTMt5tQp0=)
3: mZYvXuAnimDLvNQWkZH3FIEhatQ.crl (hash: +8AyHRXnwcKs6oS6LDICwLgOeHLXiBVxm+nAshZflH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a4:3c:2e:d4:25:c4:01:e4:c5:ae:4a:da:8c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Validity
Not Before: Jun 14 04:00:32 2025 GMT
Not After : Jun 15 04:00:32 2025 GMT
Subject: CN=bb86c884b0c4984e3a8f373760dbb6eb6ea80a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:49:47:f5:7c:58:73:f5:84:3c:97:c9:46:
21:67:27:04:39:3e:bc:12:b5:4c:88:51:dc:e8:05:
16:9c:75:ad:f8:e9:3c:03:5f:12:4b:0a:54:37:f6:
34:32:63:dd:4b:70:05:22:e5:f2:dc:e4:f9:91:b1:
6f:8b:03:bb:ad:41:52:eb:04:ca:78:48:3d:ec:67:
6b:fe:e1:a5:2d:f2:be:fb:98:2e:ce:98:06:11:24:
15:16:ba:96:49:0b:20:1b:95:74:0b:60:20:63:fc:
a0:c3:e4:0c:f6:1e:8f:84:fd:67:c7:4b:8d:34:a3:
35:a2:22:e5:0e:64:64:2c:f9:8a:87:75:6c:74:6f:
7c:a3:e7:9f:e5:d0:c5:76:b6:b8:dd:6b:d5:28:c1:
29:c4:cb:09:c9:49:f5:d6:21:20:70:37:e3:72:c8:
4b:05:62:34:8c:5f:a7:4a:30:21:1e:5c:00:87:47:
ee:f0:c4:0d:16:9b:ea:b0:9a:10:71:2b:53:78:fa:
79:b4:f6:39:a7:8d:1d:3c:76:22:23:41:a7:83:4c:
c8:d1:f1:11:32:30:19:55:f9:0d:74:01:3d:2b:dd:
ce:1a:ea:d4:0e:64:03:94:6b:8c:92:d7:79:44:da:
be:c0:9e:23:9e:05:b9:41:b0:37:34:6b:bc:71:b6:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:86:C8:84:B0:C4:98:4E:3A:8F:37:37:60:DB:B6:EB:6E:A8:0A:68
X509v3 Authority Key Identifier:
keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2d:ea:1d:54:32:47:c7:2a:d0:f2:ca:36:40:d4:5b:1f:45:
71:d3:92:de:19:70:91:aa:94:f1:9f:23:22:58:89:65:64:3a:
87:2c:25:64:6b:1c:76:5a:c3:63:5f:66:82:3c:72:76:01:22:
e3:c3:cb:c2:8f:8a:42:36:1d:ae:9b:26:37:98:fb:52:17:85:
53:b4:dd:2a:9d:4c:2a:02:54:79:06:4c:ea:e0:b9:c4:d7:27:
c0:e0:46:a1:6c:94:d8:39:f0:8c:99:54:86:de:8e:bf:57:f7:
cd:7e:94:77:60:7f:8c:e2:b9:4a:1a:fb:98:44:e5:f8:e6:58:
84:77:39:db:7a:29:8c:ea:e2:08:d1:15:80:85:35:bf:bc:45:
df:f7:52:1e:73:a5:bf:12:39:df:af:f4:0c:bc:3d:a6:a9:30:
f7:34:ab:a3:ce:82:31:1c:c7:74:7b:7c:29:19:4f:77:a7:b8:
56:8d:6c:90:7d:d5:54:c2:de:a5:58:92:fa:3e:fb:39:9a:56:
22:85:6d:03:37:d3:f3:8d:69:a9:0c:55:29:a4:d5:01:2c:a3:
8f:65:7f:0a:d7:9d:07:20:a8:11:e1:bb:75:03:60:e1:b5:10:
c3:83:38:d0:f6:2c:a8:d2:82:56:70:3e:f0:c2:7a:49:74:c0:
e0:31:43:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:11:57 2025 by rpki-client