Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
File: zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json)
Hash identifier: 30g749pFwXdE7X4w3eU/cE7OGnDSFe+VnBIkEQ+ZFug=
Subject key identifier: 64:00:BE:2E:E5:F2:F6:95:9D:D6:E5:EB:B1:62:31:4C:65:4E:1D:FF
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial: 0197789CC58F20E4F80038789EDF51DD0684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
Manifest number: 0A5A
Signing time: Mon 16 Jun 2025 12:00:29 +0000
Manifest this update: Mon 16 Jun 2025 12:00:29 +0000
Manifest next update: Tue 17 Jun 2025 12:00:29 +0000
Files and hashes: 1: 6FMleRn7QE-uKMdEakcsOaCZ1ss.roa (hash: mcv6vhN3tb3ONM9bZ3O2URAWmhAYPv+UUje7yYCRo5U=)
2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: hHS+OSyQUfyDLH2WQzLiMJIe/QxOTy5ha5OlFb+bD/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9c:c5:8f:20:e4:f8:00:38:78:9e:df:51:dd:06:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Validity
Not Before: Jun 16 12:00:29 2025 GMT
Not After : Jun 17 12:00:29 2025 GMT
Subject: CN=6400be2ee5f2f6959dd6e5ebb162314c654e1dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:57:eb:38:5b:4b:24:bd:97:ac:b6:18:65:
d9:6b:74:18:e4:d3:83:41:80:e4:e1:de:b1:6d:d5:
7e:8e:77:da:18:3a:bf:6e:35:f2:7d:d2:54:52:d6:
26:0c:fb:ef:9f:88:93:83:a3:19:46:59:9f:ee:07:
0f:73:12:79:bf:d4:ab:e8:3b:66:71:03:fa:fe:d2:
34:db:35:48:bc:2f:dd:5c:21:f0:bc:74:73:07:0d:
ed:e6:c8:da:38:db:cf:94:66:b3:4e:18:9c:10:72:
1b:1c:8f:4e:de:d2:dd:3e:ef:04:25:4e:56:21:c1:
88:92:fb:f9:4c:9b:ca:7c:0f:e4:53:3b:e2:35:f2:
12:34:df:aa:3f:17:8b:91:79:d4:3a:ee:86:d9:01:
e3:eb:c7:a3:67:ab:2f:c8:37:0d:5d:e2:42:56:6f:
ea:bb:7c:02:fc:ea:e0:16:d0:60:e2:a6:58:76:7c:
df:11:f1:1f:09:3a:6b:16:d6:5b:b2:60:40:1f:da:
d8:65:5d:18:93:70:54:32:5c:8f:f8:16:69:f1:72:
b3:58:75:93:b0:37:11:2b:c8:85:8e:1f:15:14:e8:
91:99:a5:4b:b1:94:8c:4c:1d:20:02:e4:c3:54:d7:
e1:b9:a1:0f:c0:df:7f:9c:74:e3:4a:72:1c:88:25:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:00:BE:2E:E5:F2:F6:95:9D:D6:E5:EB:B1:62:31:4C:65:4E:1D:FF
X509v3 Authority Key Identifier:
keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c5:37:6a:c1:8b:53:d5:11:21:29:59:97:d5:40:28:be:c9:
c3:26:ad:33:0b:0b:ff:20:dc:2b:77:06:6c:1f:43:29:b6:8d:
6c:5e:6e:04:3b:e3:f6:b8:1d:70:6e:62:c4:f5:d8:b5:a0:d0:
af:0f:2d:f7:4a:11:8d:35:b2:10:3e:92:16:75:29:50:54:b2:
ae:94:2c:ac:89:3a:75:8e:55:ab:5a:b7:df:03:74:a8:cc:72:
91:8f:dc:98:a7:e8:b2:1b:6a:37:a3:6c:27:f3:7e:23:c5:60:
5f:2e:47:7d:08:27:59:22:18:8e:b5:6b:2a:42:e4:75:17:3c:
f8:81:fe:7e:59:73:0f:bb:23:62:bb:96:56:20:18:7c:3d:4d:
4c:94:ae:98:f7:25:13:29:54:26:da:15:c1:e4:bc:d3:40:aa:
a6:e1:0f:d7:84:c3:ff:6b:f6:70:f3:4b:d5:86:1b:4c:7e:95:
da:bf:23:bc:18:97:7d:cf:94:33:c5:6f:ec:6b:8d:ae:9f:08:
43:6a:37:58:f7:0f:86:88:a3:50:da:35:37:08:a3:ba:66:1a:
87:ae:63:0f:81:4a:b7:c8:05:5e:92:af:34:05:a7:4a:28:bd:
2f:94:98:13:f8:55:45:99:3b:8e:c2:14:c2:4a:65:2d:57:6a:
4f:1e:12:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:31:36 2025 by rpki-client