Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: LX0WbN0/mv5URmNvE2ruYnr8+a3Gab1Zd0uCeQQYX14=
Subject key identifier: EC:64:84:C4:C0:5D:70:7F:2C:9B:23:EC:8F:AE:DE:34:0E:E2:A3:79
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 01976C61E6A30E8FAC0D77D07A040FE00203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 03:00:44 +0000
Manifest this update: Sat 14 Jun 2025 03:00:44 +0000
Manifest next update: Sun 15 Jun 2025 03:00:44 +0000
Files and hashes: 1: Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa (hash: MX3HFB8kT23MsRMUZ5iOzHB5WYojkHCu+itSb597FCw=)
2: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: AxvWuox8wz5qhzAe7cpmmDJaFJzcFow3oan2bDVW/AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:e6:a3:0e:8f:ac:0d:77:d0:7a:04:0f:e0:02:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Jun 14 03:00:44 2025 GMT
Not After : Jun 15 03:00:44 2025 GMT
Subject: CN=ec6484c4c05d707f2c9b23ec8faede340ee2a379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:28:27:99:01:ef:1f:4f:d4:df:63:07:f6:
46:d5:09:e3:7e:ae:e1:50:19:f0:c2:61:2e:06:29:
d1:b4:0b:e2:2f:77:8c:3f:c3:35:88:09:9a:87:4d:
6f:37:6b:9d:ae:a2:15:b1:14:a9:07:15:a1:9a:f1:
4a:de:03:21:1a:0c:ee:72:b5:1f:3a:cb:d7:3d:10:
79:e5:db:46:cf:e2:ee:92:4c:92:a3:28:a9:4b:c1:
39:d7:ec:7e:60:da:d8:76:dc:23:67:e7:d6:fe:5b:
d0:cb:d4:e7:d6:2e:e8:ae:3e:41:3b:02:97:c9:84:
2c:84:6c:1d:89:bc:88:53:6b:5b:f1:80:07:51:1a:
90:63:9b:f6:88:10:0e:ce:d1:cb:16:59:60:30:4b:
1b:3d:ee:7c:6d:2e:a5:2f:f9:8f:0b:b6:1e:ce:c9:
9f:d1:bd:6d:39:37:5a:c1:d3:b0:9d:ae:0a:97:8b:
a9:7d:a0:26:0d:ec:b8:86:86:30:09:c5:3e:9d:b9:
f0:ba:e7:c7:7f:64:df:77:52:16:2b:36:57:2f:0b:
96:ce:d3:11:a6:b8:09:92:c4:78:18:ba:ed:f8:e9:
a8:4d:cd:94:d8:a2:db:c6:86:73:d2:2d:0b:0c:7d:
01:cb:77:4e:78:17:f1:9c:0d:9d:6e:00:44:35:1d:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:64:84:C4:C0:5D:70:7F:2C:9B:23:EC:8F:AE:DE:34:0E:E2:A3:79
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d2:e9:40:a7:7c:36:ba:9c:19:7d:21:1b:f3:bb:2c:6a:b7:
85:b8:cf:5f:a2:dd:d8:59:81:70:0d:b5:ac:82:7b:d3:1a:11:
bc:c9:3e:44:1d:e3:13:11:9a:1e:02:44:bb:db:a6:b6:47:51:
23:f1:a0:a9:6c:67:60:2c:c6:7c:db:e1:7c:9a:33:0c:6f:03:
29:70:2b:4d:0c:56:a6:a7:9f:08:75:33:2a:ec:6b:c9:be:f2:
6e:be:9a:b7:a4:a3:a0:2d:f4:86:9f:ed:47:53:ba:38:dc:73:
4f:c0:c3:08:30:5e:21:a3:9d:3b:48:97:40:ee:03:93:1d:b4:
3e:1a:dd:88:89:db:84:da:d4:83:1b:f4:d4:e6:6b:84:5f:44:
34:17:a4:b4:c0:d4:bc:20:30:18:1e:a1:c9:91:c4:23:6b:75:
72:b4:f1:9f:6f:f4:0c:36:70:47:60:18:55:1f:3d:8d:83:e1:
f3:9d:40:9b:ff:ce:4d:3b:ac:49:62:58:c3:89:12:05:a0:27:
b2:ec:8e:b9:5f:8d:a7:da:eb:d8:5b:70:c7:48:6a:6c:ad:58:
78:27:e8:28:08:e4:35:78:44:3e:b6:fe:4b:74:86:a6:a4:57:
08:01:01:77:37:5f:48:ee:cd:f0:f9:ff:c1:f1:6f:2a:72:27:
99:1f:88:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:27:54 2025 by rpki-client