Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
File: zVW0Jf7PefCeB0stbzphbHtoVwA.mft (raw, json)
Hash identifier: KeTQvrqZThHDe3O1lpDsfwfsbG9uQCk7kYKqWDAF+R4=
Subject key identifier: 97:B0:10:21:B2:9E:6B:C2:12:64:5F:DF:DE:36:CF:0A:0C:B3:56:AE
Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
Certificate issuer: /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Certificate serial: 01976E194226C9504C793AED6E68E6A28527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
Manifest number: 12CD
Signing time: Sat 14 Jun 2025 11:00:38 +0000
Manifest this update: Sat 14 Jun 2025 11:00:38 +0000
Manifest next update: Sun 15 Jun 2025 11:00:38 +0000
Files and hashes: 1: EpL6n7YsTJUyCIMDB2XXj1UETF0.roa (hash: 0aITT3j5lY16SRph4DUvA4Lnw1Z/zDWpJihg1Nz305o=)
2: zVW0Jf7PefCeB0stbzphbHtoVwA.crl (hash: J2ef70GIoaPlDJD2QO5XQG0jJpyphVi5zpdfLI42GPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:42:26:c9:50:4c:79:3a:ed:6e:68:e6:a2:85:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Validity
Not Before: Jun 14 11:00:38 2025 GMT
Not After : Jun 15 11:00:38 2025 GMT
Subject: CN=97b01021b29e6bc212645fdfde36cf0a0cb356ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:9a:35:7e:bf:71:de:a4:b7:4a:c6:c8:85:
f1:1b:3b:d0:05:51:06:90:24:e7:50:f0:47:18:fb:
7a:a7:7f:a9:19:af:72:fd:0e:c7:63:04:49:d6:a0:
a5:90:45:d6:6a:e9:83:04:0c:b7:14:fe:56:09:02:
55:49:49:ca:65:13:e4:73:3c:20:2b:c8:d9:c8:08:
35:e4:85:65:23:19:49:74:53:1b:4a:f1:42:b7:97:
2a:5a:30:e9:65:a8:b1:ba:38:a2:41:3e:b0:8c:73:
18:49:e5:ce:8d:3f:c4:43:fb:ba:b4:53:a3:70:68:
89:44:6c:21:5f:2d:0c:a2:48:9a:9a:ec:a1:14:61:
52:63:2d:cb:9b:80:19:bd:56:cc:11:9e:f0:c5:52:
f7:f3:df:bc:5f:39:dd:a7:57:c8:37:3e:b6:76:91:
b3:7c:15:bd:d4:13:c4:42:0e:b7:ee:98:5b:91:cf:
df:b8:da:c3:42:79:f5:7e:c9:c8:dc:39:b0:67:db:
b2:c1:f1:10:f9:f7:f0:37:c8:85:cd:b7:3a:6b:43:
c5:27:8b:45:42:90:47:66:83:f6:68:42:08:09:2a:
29:23:8f:cb:4c:30:3f:62:e0:27:7e:58:7c:fa:f5:
14:ba:dd:7d:da:10:4b:69:03:00:fb:f1:e7:4b:ad:
50:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B0:10:21:B2:9E:6B:C2:12:64:5F:DF:DE:36:CF:0A:0C:B3:56:AE
X509v3 Authority Key Identifier:
keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ca:7c:c8:b8:c1:23:a3:e5:5d:6c:89:07:a8:0b:f3:aa:ce:
a1:15:36:87:98:8e:28:5d:da:72:cf:e7:ae:4a:b4:a3:52:2a:
4a:56:f2:3e:2c:3e:28:78:30:f4:61:7d:3f:c7:b5:a2:d6:bb:
bf:37:6e:7a:c9:7d:54:b3:4c:d8:64:f5:fa:8b:a1:03:6e:d4:
6d:b5:07:06:87:fc:d6:12:d0:a7:c2:5c:a9:06:16:41:1d:15:
8f:8b:5a:33:ae:1c:a5:e2:57:da:54:3d:04:6d:5e:ef:2e:2b:
dc:ac:e7:21:58:62:1d:09:15:24:59:80:05:ff:26:23:86:ab:
f4:04:32:ef:64:73:6c:a7:47:56:70:36:51:43:b2:e2:72:10:
bc:1b:d4:6d:eb:83:5e:3b:1b:56:ab:e2:f0:6f:5b:9c:2c:25:
cf:67:d9:3a:92:d6:e4:c8:38:f6:3f:07:b7:54:a0:6f:9e:f6:
55:0d:8c:a1:2b:66:d1:2b:80:f0:5a:69:c0:1d:1d:cf:24:35:
86:59:c1:7a:aa:a5:6d:fe:a8:38:28:cb:5d:8f:e9:50:33:a1:
2f:65:58:c9:1e:c7:00:a7:3e:cb:88:a6:21:72:b2:85:d9:aa:
cd:06:92:8b:3f:37:62:ef:3a:c1:9d:e8:1b:1f:5f:69:0b:2f:
b6:84:32:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:53:35 2025 by rpki-client