Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier: Yg5TZdign378jjd//BZaYxRy4ULCxurSGuurjYpixPc=
Subject key identifier: AD:56:FD:36:5A:75:10:B8:95:A1:8E:F3:D8:8C:73:10:85:C4:94:FD
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 01976A06214544CF9CD9C6B4A4CE3C35C3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number: 1593
Signing time: Fri 13 Jun 2025 16:01:16 +0000
Manifest this update: Fri 13 Jun 2025 16:01:16 +0000
Manifest next update: Sat 14 Jun 2025 16:01:16 +0000
Files and hashes: 1: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: OcnMGVoBdfYOqzwdKGMyMsl5RwCn+ShkwI660cQuZf8=)
2: Z_jY3GWRnD6yHDyYL47ZMC9cQoU.roa (hash: WEDbZfz2xY2QG+1hs64UqV8JMCBq7ofZo+b0N35NykY=)
3: xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa (hash: lrgPvLXOCgVkDldPssS2AHRsC1SEtuYHBOG2NxYMrqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:21:45:44:cf:9c:d9:c6:b4:a4:ce:3c:35:c3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Jun 13 16:01:16 2025 GMT
Not After : Jun 14 16:01:16 2025 GMT
Subject: CN=ad56fd365a7510b895a18ef3d88c731085c494fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:35:de:ca:fe:f7:4c:94:c7:0a:98:87:8e:
b5:7c:91:8c:39:db:50:48:7c:f6:da:a0:41:f0:a3:
17:e6:a4:0d:b8:41:bf:0c:e3:67:29:19:27:87:cc:
f7:5d:94:5a:a0:52:31:c4:7e:72:ac:c6:c8:5f:21:
f8:d4:50:34:76:d6:c3:bf:44:11:9b:41:56:e2:e7:
58:e4:7f:5f:2e:92:81:5e:03:a6:a2:e6:24:56:8c:
d7:2a:16:e6:da:93:d6:c8:80:88:97:9d:fe:58:9d:
b9:9a:66:73:8b:4b:15:8a:35:8b:08:8f:c5:ad:43:
85:5d:6c:6b:5c:a7:15:a1:e7:2c:b0:02:27:e6:ea:
f5:e0:a5:80:54:eb:af:8c:15:5c:0f:7b:ae:30:bf:
19:5b:ea:a2:96:7a:da:ab:5d:de:55:96:5c:00:08:
42:c1:3d:f6:70:f6:82:4f:b1:e9:dd:27:21:c5:0e:
23:66:f7:d4:54:d9:45:7b:18:4b:91:5a:37:13:68:
d9:3d:2d:3b:cf:27:4f:6a:6f:9f:d8:70:08:fd:5d:
7d:24:ee:25:9f:c4:97:66:1e:de:ce:ac:da:0e:57:
df:29:ba:5d:d7:7e:a0:ac:06:ee:c4:ee:b0:d9:60:
c5:a7:53:f6:be:6c:fb:d7:d9:9b:b1:cd:93:69:da:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:56:FD:36:5A:75:10:B8:95:A1:8E:F3:D8:8C:73:10:85:C4:94:FD
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cf:0f:4f:71:f1:65:41:40:a9:8f:56:9e:b2:61:5e:3e:27:
4f:1b:06:1b:cf:40:41:58:62:f6:cf:bd:aa:0c:c4:54:c3:8d:
fa:19:69:96:be:cd:0a:3c:c6:51:30:44:a6:61:c8:8c:f7:ac:
1c:b6:d3:8c:7b:af:b4:97:6b:be:0e:7f:29:40:5b:aa:f1:1f:
1b:c9:a6:22:a6:fe:b4:4d:95:9a:88:83:73:7c:cd:90:3b:9b:
64:2c:f1:7a:15:e6:43:6c:39:b8:a2:59:3c:f4:95:db:e5:e0:
31:d3:e1:f3:29:eb:9f:87:f7:08:1d:37:1f:8f:90:fc:1a:d3:
d2:44:d7:2e:5e:01:ac:ae:46:33:e0:86:48:9c:cb:cc:29:c4:
b9:ad:7f:90:58:a4:f3:6e:87:f6:10:40:c6:1c:8a:d3:e0:ba:
51:48:b6:41:e3:99:35:e3:03:82:f2:61:7a:0e:40:b6:14:e8:
4c:11:34:65:cc:a2:f6:2c:46:a4:f2:b9:14:90:51:9e:bc:a6:
cb:4f:fd:cb:98:49:23:25:fd:0f:9d:11:76:8b:96:ff:49:36:
63:f7:bc:e4:b2:4f:3b:d9:71:4a:23:ab:c7:e8:36:0f:c3:02:
11:84:5a:1b:d2:27:b1:d9:a1:c7:f5:b9:1a:a3:2c:a9:41:0f:
8f:dc:ab:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:18 2025 by rpki-client