Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: xv2EsAOoAVfkfZgl+NIJHchlVMO/TmI5O0fv7qkQJHk=
Subject key identifier: 6D:4E:F0:FB:A5:2C:59:16:09:A0:C2:DB:37:0A:BF:CB:BB:3B:E7:DF
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 019777C0F51B031C2AB1483B0462D09AACBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 0BEA
Signing time: Mon 16 Jun 2025 08:00:23 +0000
Manifest this update: Mon 16 Jun 2025 08:00:23 +0000
Manifest next update: Tue 17 Jun 2025 08:00:23 +0000
Files and hashes: 1: O_Eyba2hWiJ1G1yko5jMVf-Hi74.roa (hash: 6Ep9rh8riGcgqLK1eN8d8mtWbuCz5+WFjzg4sxJvKMw=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: Q6RKMxFrrcy7g+MolUDPgCk0eZUSyh0chIyYDYS3IdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c0:f5:1b:03:1c:2a:b1:48:3b:04:62:d0:9a:ac:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Jun 16 08:00:23 2025 GMT
Not After : Jun 17 08:00:23 2025 GMT
Subject: CN=6d4ef0fba52c591609a0c2db370abfcbbb3be7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b6:7e:65:dd:d1:b2:eb:c1:f7:0a:f0:25:e3:
a2:73:2b:e4:ef:8d:4a:1a:7f:e7:0e:31:a1:57:df:
f4:8a:a5:d8:89:fb:c2:a9:ae:b7:60:13:b0:df:e7:
22:eb:8a:da:2e:6f:ed:3f:73:cb:4c:cb:6e:c9:80:
f4:7a:d1:8a:a6:eb:2d:15:f9:ce:34:9b:7f:bf:e8:
0b:7f:6b:8c:5f:ab:6b:07:36:c6:a4:8f:ce:c0:7a:
75:b6:19:b0:f6:8e:52:c3:a0:a2:b6:48:80:37:dc:
45:dc:43:17:89:49:0d:cc:c3:2a:93:fd:81:c7:ab:
c8:05:b8:d2:f5:1d:5c:55:3d:d7:4c:bd:d4:e3:0f:
2f:a8:88:19:f6:b1:6a:25:a2:f1:74:97:66:70:13:
22:3a:c5:68:34:f8:0c:f0:b2:74:21:ae:e4:78:66:
94:ec:fb:ee:0f:39:36:0d:e0:cb:8b:c0:9a:1f:30:
5d:49:bd:24:4f:23:2f:0f:ce:05:73:f5:35:d8:a2:
e7:b3:c3:64:a7:57:f1:c5:6b:cd:8a:d9:a6:a5:dd:
a5:4d:4c:b4:62:bf:69:af:7b:43:86:e6:78:44:0f:
87:d9:13:46:ea:55:e9:69:51:bd:9b:06:2f:42:4b:
d3:1c:f9:dd:38:7b:53:fa:39:c4:1d:c8:ea:bb:93:
40:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4E:F0:FB:A5:2C:59:16:09:A0:C2:DB:37:0A:BF:CB:BB:3B:E7:DF
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cd:cb:fc:5a:39:30:4d:0e:a8:32:67:b4:c3:7c:6c:0f:1f:
21:37:fe:3f:f6:e0:ce:05:80:14:37:e6:62:30:2e:21:99:af:
97:a5:c7:fb:6d:3b:ae:e3:fc:d9:49:58:0d:b1:2d:b6:a0:0f:
c2:55:9d:9f:4e:76:e8:49:d5:2d:ea:dc:7b:cf:bd:9c:1e:d2:
0c:67:96:a5:67:4d:c7:8a:dd:95:49:eb:8d:7b:95:90:67:de:
38:ff:03:df:4c:9c:b0:4e:2c:88:39:8e:7b:3d:a3:bc:82:87:
54:f7:99:8d:58:3c:34:a3:ed:a6:02:73:f1:9a:9c:07:ae:0d:
7c:18:98:77:7f:f3:aa:35:ae:c4:8e:c9:a7:7e:e8:a8:b0:8d:
a6:9f:de:24:ed:8e:68:31:c3:82:36:d0:58:82:68:28:2f:36:
7c:c9:f4:34:cd:27:c2:b9:26:83:66:a7:2c:ba:4f:f5:f7:cf:
10:10:76:37:ba:cf:19:45:e1:46:8f:91:d8:6a:58:31:74:e0:
5e:10:17:a4:a2:b6:ba:9c:d0:f6:fa:2d:bc:bc:e0:8d:46:02:
21:20:78:1f:a5:94:df:06:bd:ad:8c:bc:b9:76:bf:0a:67:c0:
e6:79:0c:c4:06:a1:66:aa:49:14:a2:54:df:c7:55:e5:e1:b2:
2a:14:19:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:06:13 2025 by rpki-client