Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File: 1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier: xha8Sh6qV0vH1xkcGvize1t5/hsHTP89XNgXO0De0ts=
Subject key identifier: 2A:58:41:1A:1E:83:CD:C1:B3:8F:DA:C3:D6:CE:AC:5C:29:E2:0F:03
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial: 019771F684ADB774ED19AC0A0AC935E4FBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number: 0E80
Signing time: Sun 15 Jun 2025 05:01:10 +0000
Manifest this update: Sun 15 Jun 2025 05:01:10 +0000
Manifest next update: Mon 16 Jun 2025 05:01:10 +0000
Files and hashes: 1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: ZXoEDgzvKsy7DTagKzRAPtc9LTAfex1XBplsoormQiI=)
2: 5xcSPqM5FqBggD3xhK_H_WBIj8c.roa (hash: 6UaEvDEdIHAI+VC/wqQ4jP8F3NZ9weH+TS5AN/LWzwY=)
3: NDt_WTrjoPL0cL8oTyPCRgNakA0.roa (hash: Hp1RzwRCWlMoxPuIUolhJVdqweoyQ9ReAqFHs5ETdBY=)
4: oTJ3WFdDrwDwPRwq0KV_9933-4Y.roa (hash: mhBZetUkSVK2917d65VbBa4ZgrfV11qg/and0h4flas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:84:ad:b7:74:ed:19:ac:0a:0a:c9:35:e4:fb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Validity
Not Before: Jun 15 05:01:10 2025 GMT
Not After : Jun 16 05:01:10 2025 GMT
Subject: CN=2a58411a1e83cdc1b38fdac3d6ceac5c29e20f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3b:0c:60:55:25:3e:62:25:79:2f:a3:ab:ee:
98:4a:f7:50:14:30:90:58:80:57:af:66:ea:0b:3c:
ce:dd:d8:e9:f7:09:49:02:cc:61:b7:03:0f:49:44:
6d:9c:80:71:88:c0:76:f7:cf:b5:8b:e5:2e:37:c9:
fe:25:68:69:65:b7:07:1f:98:e5:8b:c9:d0:59:38:
d3:4f:63:e3:93:7a:ae:6d:d5:fe:40:ae:7d:cb:8a:
8b:3a:aa:7a:2c:33:9b:ad:f7:17:8a:1f:6f:98:32:
d7:5c:bf:11:82:1b:3c:99:ad:83:11:95:7f:13:bf:
ee:00:4c:10:54:4a:ad:a2:7a:c6:c1:33:6d:0c:5e:
fe:cd:30:b1:1d:a9:40:09:6a:1f:b9:1f:0c:a2:09:
02:52:1a:10:21:13:1d:4f:28:18:5b:44:88:db:27:
09:bd:8b:1a:4c:17:28:e5:6d:cc:9e:c1:2f:d7:56:
39:ec:e5:85:1e:f4:a1:5e:b2:de:28:62:40:10:5d:
3b:8d:47:e9:d3:3c:83:e7:46:57:27:47:86:c6:8e:
de:55:c0:35:59:7a:ad:1f:44:14:83:26:49:7d:25:
ba:12:85:67:f0:d5:f3:db:19:e8:2e:2c:ce:07:3d:
11:93:07:36:b4:05:22:02:50:28:8a:c8:fc:c7:53:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:58:41:1A:1E:83:CD:C1:B3:8F:DA:C3:D6:CE:AC:5C:29:E2:0F:03
X509v3 Authority Key Identifier:
keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2f:bf:fb:67:e5:0f:21:03:5a:60:55:c7:4e:8d:8e:ad:29:
65:5d:50:92:d5:8c:a6:03:16:ed:3b:ed:08:25:9f:e6:2b:3b:
da:7d:7e:b0:8c:7e:58:39:31:8b:84:d4:79:e9:26:08:d7:ff:
5d:87:63:e7:49:84:93:0c:ec:c5:c5:05:7c:8f:ee:15:e6:82:
e6:cb:c2:87:2d:6e:8c:2e:b1:26:4c:96:4d:29:5a:e8:64:81:
bb:3f:29:3c:6a:cf:38:5e:38:da:bd:e8:de:d1:4b:8c:61:2c:
c8:75:32:fe:95:f9:ac:8d:7e:60:b1:67:24:77:1d:4e:16:e0:
73:af:b5:e1:f2:ee:7f:a6:22:07:32:67:ff:da:78:e0:80:98:
f3:c6:c5:09:92:e9:60:95:60:1b:fc:a2:4d:52:9c:b6:67:91:
58:37:a8:55:8c:bc:b9:72:9c:30:04:4a:56:ec:b4:dd:e2:e4:
95:74:28:2c:18:d7:fd:92:cd:4f:63:45:97:d7:22:a2:56:4e:
5a:26:03:b0:79:86:ae:83:19:8b:80:3e:f0:62:22:96:6e:7c:
8f:3d:8b:9e:02:f8:4c:e3:f2:8d:e4:25:0c:80:58:8a:cf:8d:
39:70:9c:88:8b:e8:3a:79:7e:0d:fe:13:bc:bb:b5:1f:fa:24:
b5:b7:a8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:49 2025 by rpki-client