Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: rM+xklAbrTOuWgKd/lxYSd+z+AdhtooDOkpsl2i9PC4=
Subject key identifier: 73:E2:ED:80:87:D7:22:9F:F8:4A:99:3C:94:CB:99:46:9E:AE:E7:FF
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 01977CB0DC7224EEA27605B804FCED3CBA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: 012D
Signing time: Tue 17 Jun 2025 07:00:54 +0000
Manifest this update: Tue 17 Jun 2025 07:00:54 +0000
Manifest next update: Wed 18 Jun 2025 07:00:54 +0000
Files and hashes: 1: RB7y6640f4SnVimQzu6JWvm3C6k.roa (hash: uwidWxkKZEKWtlEveUv5MeKzL8ydf3kx4CybcObpyPA=)
2: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: A5eWjQhZjfGB3OugkfFQV+YDwBIOcvyArmXQvAI0IPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b0:dc:72:24:ee:a2:76:05:b8:04:fc:ed:3c:ba:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: Jun 17 07:00:54 2025 GMT
Not After : Jun 18 07:00:54 2025 GMT
Subject: CN=73e2ed8087d7229ff84a993c94cb99469eaee7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:a7:fe:ea:88:a6:8a:d3:da:73:57:a8:87:
d4:23:d3:61:0c:64:f4:ec:f0:df:5e:9a:85:05:1e:
a0:21:12:5d:45:da:7c:3d:de:3f:a1:fb:70:66:6b:
a4:b4:18:12:2a:6b:fd:d8:10:0b:6f:12:1a:8c:1d:
a7:d9:31:27:4c:2c:42:20:33:b5:8c:c5:ab:72:5e:
fa:c3:83:3e:e5:cc:b8:ab:14:a9:e4:64:d3:09:b4:
91:e2:b0:49:4b:8c:ef:7b:98:f5:5f:68:45:f6:1a:
0c:54:8c:02:16:bd:09:5b:d7:e0:4d:bc:67:a2:59:
f0:ac:ed:96:05:fb:16:59:19:12:eb:ee:23:88:34:
93:33:14:f4:bc:e1:5a:09:b6:c3:a0:85:5a:a6:67:
2a:2b:c1:c6:26:91:96:48:f9:52:4a:2d:17:ca:01:
63:04:2b:69:5e:91:56:46:16:63:e0:ee:53:ad:05:
0c:06:6b:0c:6c:36:14:79:d3:43:3d:f7:b5:85:01:
60:23:1a:e3:fd:b6:70:eb:ec:09:9d:b5:f7:f4:0b:
72:17:1b:93:6e:3d:34:9a:45:21:dc:be:ec:0f:61:
b3:36:50:86:54:51:6a:01:c8:d1:38:f5:c3:2b:fa:
ea:93:50:32:52:37:6b:42:f5:89:ba:b5:e4:2d:7e:
2b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E2:ED:80:87:D7:22:9F:F8:4A:99:3C:94:CB:99:46:9E:AE:E7:FF
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:47:18:f4:e3:ee:dd:15:23:9e:71:5f:f7:76:a7:aa:8a:83:
ae:8d:99:21:fe:10:df:39:c4:b7:c9:5f:ee:d0:10:8d:fe:70:
e2:fe:b1:73:dc:c3:0a:e0:2d:97:b2:2d:83:94:a4:d0:ba:ad:
1a:4d:a7:79:62:2a:ca:90:e1:47:01:ff:91:2d:af:c9:39:0e:
f1:e8:7f:06:ff:6b:fd:bb:31:e2:a2:a1:8e:89:5c:9c:52:08:
af:2c:69:69:ab:9b:1a:50:d9:b5:18:a9:57:5c:cb:63:47:78:
a6:01:2e:25:47:5b:27:29:2e:65:5b:f5:da:85:85:85:61:ab:
cb:c5:2a:74:e7:7b:bb:9a:d5:ba:61:24:7c:00:73:1c:65:c1:
e2:1d:b9:1e:e8:94:74:d9:0e:8a:78:e7:df:f6:df:5d:75:4a:
d8:01:81:07:25:48:fe:f2:98:4f:96:2c:99:bb:6d:cc:2b:06:
50:e0:be:36:17:62:7e:08:ec:16:50:9c:58:5b:d4:a2:68:5e:
12:34:d7:5b:28:5c:9f:6c:50:de:55:ab:c5:3b:2a:5c:98:af:
93:12:49:ca:a5:5b:08:a5:7f:d9:1a:a9:a9:fb:73:17:1e:08:
90:7d:b2:c2:0a:57:fa:1e:a0:82:16:16:c0:7a:b8:60:81:1c:
d6:4b:02:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:27:12 2025 by rpki-client