Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: CAGzNc0PXaP84WtNPMISWNxQzDEoISPxJ03RLe2p1Ng=
Subject key identifier: D4:51:C4:BD:69:02:0C:F0:14:BE:70:0F:CD:21:DA:F1:B8:B6:3B:FD
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 01976DAB68BE987DD6FD3560617D07595B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0897
Signing time: Sat 14 Jun 2025 09:00:39 +0000
Manifest this update: Sat 14 Jun 2025 09:00:39 +0000
Manifest next update: Sun 15 Jun 2025 09:00:39 +0000
Files and hashes: 1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: zZPDj1gRrwhyxdvFxbCoGyIEmqRhq5+0jDYzmkhbKOk=)
2: sPYhG40WeNs4D0fdLBoDQKTV_Eo.roa (hash: bDpPm+4aHa819Yue2u9g5oa22BJIhkWyJ4aj3sH99kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:68:be:98:7d:d6:fd:35:60:61:7d:07:59:5b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Jun 14 09:00:39 2025 GMT
Not After : Jun 15 09:00:39 2025 GMT
Subject: CN=d451c4bd69020cf014be700fcd21daf1b8b63bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ea:27:b9:e3:17:6a:74:5f:b1:f1:59:8a:45:
cc:ee:09:f0:60:31:c0:13:05:2d:2e:d8:aa:d0:5b:
e2:52:e1:ae:3a:03:32:73:da:14:5c:1d:e0:f9:ff:
6c:1b:dc:1e:5d:34:4f:06:c5:70:58:ac:d6:34:7b:
12:71:c1:2c:01:1e:31:da:4c:11:fe:71:d9:27:e1:
54:9b:80:f6:d1:0b:b2:92:a5:be:cf:af:f5:cb:31:
84:14:77:18:3f:17:4c:de:49:bc:1d:9c:a5:d3:36:
14:b2:a3:32:be:17:a2:55:86:d7:a2:68:5e:2f:7a:
75:b1:5c:39:7d:55:4c:75:c6:c4:cd:98:2c:b5:d6:
61:cb:38:58:9e:86:c4:d7:33:b4:19:7e:e3:84:4b:
15:c4:b5:1f:8b:65:a2:88:07:58:d0:8d:f1:be:fa:
90:52:4b:c0:0a:7c:f1:79:6d:a8:b4:d2:1f:78:0f:
63:14:d1:cf:65:3b:c3:ac:cb:20:44:b0:5b:09:ba:
fa:1c:91:43:b3:7a:b2:89:c6:d6:15:7f:ad:15:29:
3d:39:63:0f:ed:8b:cd:97:76:46:90:2a:87:ac:30:
ca:4c:b2:86:cc:15:87:ba:ac:62:f4:dc:87:96:c3:
99:97:68:15:8e:64:2e:18:7d:69:38:66:8d:7d:b6:
a1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:51:C4:BD:69:02:0C:F0:14:BE:70:0F:CD:21:DA:F1:B8:B6:3B:FD
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d6:6f:bd:ee:bb:ce:3b:97:09:78:26:32:cb:e1:79:cc:81:
00:ae:0a:62:70:76:5e:6a:3d:dd:bd:e3:91:ec:d9:4c:83:54:
14:73:91:a5:6b:1d:16:f5:ae:71:2e:6f:35:e7:43:c8:30:6e:
7c:f8:8d:1c:2a:73:5f:81:b5:f3:d4:5d:26:3a:8e:87:3a:9a:
25:a5:d5:2d:0b:a2:fc:92:15:5a:b6:2b:4a:01:94:cc:f3:27:
65:b2:67:3c:ef:0f:8c:fb:30:d5:98:94:27:13:9a:c3:b0:ec:
1c:c5:08:39:a6:bf:68:cd:de:45:16:98:a7:fe:23:1d:ed:be:
34:f2:4d:13:ad:ca:89:31:9c:19:11:24:4c:7e:0e:7f:0e:b8:
a3:de:f3:55:c2:89:ba:cc:e2:c6:8e:85:fc:6a:9a:82:b3:46:
0e:47:be:46:41:b7:b9:ca:fa:8d:66:e7:e2:8e:98:ab:ca:1f:
90:18:df:67:11:cd:92:9a:9b:7b:31:30:fe:db:24:91:23:da:
39:bb:16:d5:ae:60:03:84:89:2f:2d:59:d4:a4:f5:d9:bd:f9:
a4:d4:8a:50:0c:57:37:46:5d:5a:f3:ca:b2:13:64:a0:c3:89:
a8:68:c2:7b:9f:7e:08:ea:55:82:48:b9:55:93:ac:e8:c4:a6:
43:5c:d0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:46:02 2025 by rpki-client