Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: 10tyMcjjtDrLbVuQVUzZebExYOHFvYAccZEzxqu7V8M=
Subject key identifier: 13:F5:8E:D8:AD:A2:6B:B0:93:13:65:D4:9B:A5:D0:1C:A8:86:A5:1F
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 01976BBCCF4B625674B5B67E521EC8784C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 00:00:25 +0000
Manifest this update: Sat 14 Jun 2025 00:00:25 +0000
Manifest next update: Sun 15 Jun 2025 00:00:25 +0000
Files and hashes: 1: d_ez2cyGpZurFZ-hpnWjbzeo_AA.roa (hash: BKsaK8mj+d0uYjbNGmD8zcdEWfPMS3oZwiGIKYpkp0U=)
2: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: DDPqLDw72Lb77konW5lN0VOLeWPFGwl0sskdsv3EEo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:cf:4b:62:56:74:b5:b6:7e:52:1e:c8:78:4c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Jun 14 00:00:25 2025 GMT
Not After : Jun 15 00:00:25 2025 GMT
Subject: CN=13f58ed8ada26bb0931365d49ba5d01ca886a51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:87:29:77:15:ca:93:b0:32:99:4a:af:68:
a1:a1:75:ae:c9:7f:24:9d:82:b8:23:ca:e8:10:0b:
c6:10:5d:72:d6:58:01:8a:b8:dc:fd:a4:11:91:b1:
ad:25:54:7d:a5:de:18:cb:98:fb:35:25:a9:7a:51:
56:51:14:fb:dd:82:9d:df:d2:cd:f7:b5:9e:c9:48:
19:b9:7e:4b:50:31:ef:47:d9:5a:16:07:11:54:d1:
3a:70:6b:cf:74:8c:11:99:d8:95:77:16:be:61:c7:
11:1b:a8:c9:e8:bf:d5:00:d1:b0:d1:3d:80:c3:4f:
5f:8a:7b:cc:5f:47:4d:4a:e8:b5:71:1a:b1:21:18:
5f:11:70:91:cc:1b:c4:3e:4b:37:8d:68:2f:44:3d:
0c:7f:0c:db:db:4b:02:b1:28:99:fa:c5:a9:66:26:
f7:12:d7:23:98:1b:02:ea:44:d1:90:54:20:2a:b4:
f4:cc:5f:f4:96:80:9b:be:5a:75:1e:59:2e:99:e2:
c6:6f:5e:50:ce:e9:c3:69:27:7f:57:2a:5d:e1:cb:
81:c6:df:7f:dd:35:7e:5b:9c:63:ce:36:3d:f6:6c:
b9:80:a0:87:64:a9:a8:88:35:8e:f0:55:a5:b1:5e:
a6:f5:16:7b:a1:b5:22:f8:51:72:93:d4:86:db:34:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F5:8E:D8:AD:A2:6B:B0:93:13:65:D4:9B:A5:D0:1C:A8:86:A5:1F
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d6:00:31:5c:fb:db:d5:fa:ef:7f:6c:e2:a4:18:d7:39:a5:
9b:59:bd:f9:01:09:be:a2:f8:5f:15:17:e0:ff:30:6d:3c:69:
d1:05:b4:eb:08:42:20:c9:34:f6:dc:00:84:c8:59:82:64:23:
06:10:49:46:aa:30:3b:15:35:28:a0:14:a4:cd:87:ba:8b:0c:
27:cb:1f:45:ff:b1:32:0c:34:71:14:a5:ac:8c:ba:65:8c:52:
d3:4a:94:fd:45:6c:a1:a2:01:31:58:3f:dc:6c:02:87:00:e9:
ff:f1:47:d8:cb:53:c3:2f:38:30:9f:68:c7:29:1c:f7:51:04:
fb:d6:95:21:a9:0e:57:b1:2c:6d:93:75:71:a5:a9:1a:29:43:
3e:58:68:65:48:a3:45:97:d7:bc:fa:56:0e:5e:23:49:f2:8b:
51:c6:f3:9e:af:e6:10:21:ce:c8:a6:34:b7:47:ea:9d:f7:bb:
75:bb:d5:0f:6c:58:3f:cb:86:7c:85:0b:88:d8:5f:fb:e5:ba:
13:ee:80:a5:c9:d5:57:08:18:92:63:e4:f5:7a:c9:b4:e4:df:
1a:67:30:3c:d0:dd:22:e9:41:13:c8:e6:3b:ee:0f:09:ee:45:
f1:bd:46:b1:d0:9d:7c:71:99:4c:d7:27:f3:6f:57:6c:c0:f0:
d7:24:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:02:16 2025 by rpki-client