Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
File: RZYupWYFRlbvgqrOLXHHbRsLiLs.mft (raw, json)
Hash identifier: GPL+jN1LvLbH9YlwjZo7yzqhoKcFly8urPPbAkh4IOw=
Subject key identifier: 8F:62:5F:50:3C:F1:12:E4:8F:56:B4:DB:2A:EF:70:22:96:D1:9B:D0
Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
Certificate issuer: /CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Certificate serial: 01976BF48CC13242964AB3B80574438BE75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
Manifest number: 0ECB
Signing time: Sat 14 Jun 2025 01:01:18 +0000
Manifest this update: Sat 14 Jun 2025 01:01:18 +0000
Manifest next update: Sun 15 Jun 2025 01:01:18 +0000
Files and hashes: 1: QNIQdG4Tu9zIYU5pnHAiIv-6jdQ.roa (hash: iDeA+sQiPag5Td4fIdhnGBEsGTbasSmj20N0QdB9b24=)
2: RZYupWYFRlbvgqrOLXHHbRsLiLs.crl (hash: pIwXfdJFwpA9CdMa86gvDAnsOlJwdmtUau5vv1HdU1c=)
3: WEolIktBESdvgc8hNiaPN7u1uwc.roa (hash: epUS51OLDZ6qazQuvjy3IHtOX7T0vUZAhescISw2oWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:8c:c1:32:42:96:4a:b3:b8:05:74:43:8b:e7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Validity
Not Before: Jun 14 01:01:18 2025 GMT
Not After : Jun 15 01:01:18 2025 GMT
Subject: CN=8f625f503cf112e48f56b4db2aef702296d19bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:5e:74:a9:13:b5:23:cc:86:c7:7d:4a:3b:
84:2b:d1:2b:c9:62:89:39:08:a1:45:eb:7e:04:fd:
04:38:3e:81:9b:3f:ac:77:31:a7:e2:a2:2d:47:f6:
c8:26:3d:ae:01:2b:ac:d9:01:1f:ce:aa:ff:4e:82:
5a:d0:c1:15:e1:c0:ac:05:55:06:92:92:77:55:79:
90:47:70:40:76:bb:43:75:83:aa:36:f5:00:fa:47:
62:00:a2:7f:4e:1d:5e:d5:1f:c8:5c:cf:07:67:e4:
0e:d5:7f:64:fa:33:89:67:2c:36:86:67:3a:9f:18:
df:9c:b4:c8:06:8e:29:01:a8:f4:bd:67:4e:da:60:
72:bf:8d:f8:fd:37:8d:14:f3:d7:32:30:44:08:d4:
15:81:f1:d3:ff:f2:4a:6d:e0:71:c4:2f:03:09:0d:
f0:c4:46:c1:b1:d4:7b:3a:22:33:56:4e:3d:c6:62:
58:c4:14:be:22:23:75:8d:46:7e:d2:97:10:ab:9d:
03:0b:ec:ec:d4:2d:52:50:eb:8b:c2:3c:4c:34:77:
e1:71:3b:60:c1:bf:bc:22:44:2e:eb:40:35:73:af:
f5:19:12:a1:33:a4:b4:cc:b5:c9:e6:fc:05:c5:cb:
c3:4b:a7:2b:c7:14:27:b7:f6:d5:22:fd:c1:f4:bc:
a5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:62:5F:50:3C:F1:12:E4:8F:56:B4:DB:2A:EF:70:22:96:D1:9B:D0
X509v3 Authority Key Identifier:
keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e1:4f:83:0c:99:a7:9d:4e:e9:0f:8b:54:e7:8b:e1:5b:b5:
ea:bf:c4:3d:7e:85:d8:a9:a3:1e:1f:40:41:71:40:1a:69:e7:
07:6f:78:17:e9:67:d0:b3:5c:91:6d:8b:7b:34:ca:32:50:64:
ce:ef:20:96:e5:d1:17:d2:2d:e9:14:39:48:c0:4b:75:df:ab:
75:75:d0:7e:38:74:2a:bb:f2:ea:03:3b:16:29:1e:20:38:9a:
5f:ba:58:e0:ce:f2:dc:0f:fe:5f:fa:1b:9d:81:d0:44:fe:cd:
d2:b2:e7:c3:9e:35:c9:da:f6:c2:5b:fe:81:a5:6b:0e:0e:81:
70:ba:70:6a:b7:c1:2f:90:e6:55:ba:0c:ac:6b:f9:22:c9:f9:
1e:0b:9c:05:d0:d3:95:b9:2b:d2:d6:31:da:23:b3:c0:e3:80:
ec:e3:de:71:1f:cf:b4:0b:7d:02:b2:9e:9c:b0:ac:cc:db:c4:
11:59:15:b3:49:87:70:3b:22:b0:9d:99:08:c9:a7:66:b8:56:
ee:a3:f3:c1:46:69:08:3f:1c:6d:0d:8a:58:84:5d:e3:72:91:
73:82:18:6d:d2:26:55:14:7e:11:f4:e2:72:47:ed:05:84:a4:
a3:11:47:4d:09:64:e4:34:b7:15:ed:20:58:fc:a5:22:39:8a:
47:e7:f7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:44:05 2025 by rpki-client