Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: YxE7JFBG0VuF58t0NG8iLRcaPweszp5RH85B8bpzIvk=
Subject key identifier: 06:A8:B6:D8:A0:59:6D:18:B5:64:4D:41:2A:FA:84:F0:F2:D9:5D:AD
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 01976885537786A4CEAAAD92C32C26F8F8E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 03A7
Signing time: Fri 13 Jun 2025 09:00:57 +0000
Manifest this update: Fri 13 Jun 2025 09:00:57 +0000
Manifest next update: Sat 14 Jun 2025 09:00:57 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: 0U659exGoL2atE5g6pf1QREUQ+Vk6xlDx7W6os8uf+g=)
2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=)
3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:53:77:86:a4:ce:aa:ad:92:c3:2c:26:f8:f8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Jun 13 09:00:57 2025 GMT
Not After : Jun 14 09:00:57 2025 GMT
Subject: CN=06a8b6d8a0596d18b5644d412afa84f0f2d95dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:e3:1f:8e:bc:94:40:92:8a:22:7a:20:ef:
fb:ab:86:75:71:14:04:2c:56:be:be:c9:d1:f2:44:
9d:49:30:c6:af:08:fa:f0:b2:eb:0e:ee:03:d2:ea:
d8:71:e8:e0:af:94:b1:fe:62:b9:55:64:4b:0f:85:
31:57:22:f9:b6:e6:ca:79:d5:96:b3:64:b9:d9:e5:
52:50:a7:8b:98:d7:38:95:2e:38:83:c6:ea:92:5e:
3d:93:63:a5:78:3b:fc:99:dd:d4:d2:ae:b9:30:9f:
58:05:3e:05:f9:c5:61:9d:4b:e1:20:e5:b1:51:33:
ca:78:63:14:21:0e:2d:82:07:2b:19:82:e9:9d:c1:
ef:79:ff:cd:ee:31:d7:a2:30:56:0b:80:02:34:b8:
13:a6:e2:d6:c3:ac:ab:b3:ea:2e:14:ea:bb:d2:01:
61:78:fa:77:8c:0f:f4:97:c9:24:02:c4:3f:3b:16:
5a:db:b9:57:70:1e:9d:73:18:cc:17:88:fa:89:de:
b3:36:d9:f5:9d:59:90:dd:78:13:5f:7d:3a:ec:8d:
3f:04:e6:04:2d:34:f1:ab:40:31:75:64:2a:9f:17:
4a:28:5a:d1:e2:cb:43:d4:b7:a7:bd:9c:bb:a8:dc:
31:d4:97:d8:44:fa:ab:99:d9:1e:36:dc:70:28:4b:
0b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A8:B6:D8:A0:59:6D:18:B5:64:4D:41:2A:FA:84:F0:F2:D9:5D:AD
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:44:b6:8e:8d:58:de:8c:49:84:ec:6c:e9:23:8d:83:5a:29:
aa:05:07:16:da:00:1b:ad:20:79:ee:79:02:6c:38:b5:5c:72:
9b:47:ff:b6:62:72:1e:f8:e1:fb:1d:eb:08:59:8f:18:ef:bf:
44:a8:15:2a:f7:55:a7:c9:f6:f9:87:3d:8e:13:79:b5:f4:e3:
92:cc:c6:7f:ff:e5:e9:15:1b:02:6c:db:d0:d1:f4:d4:ce:9c:
34:4d:37:13:ec:6b:a6:84:2b:65:90:db:08:a2:05:ea:4c:ca:
d7:e6:31:e6:27:c9:22:67:a4:f5:ac:2c:ee:9a:3f:37:e0:34:
df:d0:9c:7a:3d:49:d6:3f:b6:9c:f7:5c:bb:37:04:86:11:db:
a3:45:c3:8a:22:8b:9a:5d:b8:f1:26:32:72:d4:7e:02:3b:e0:
84:e7:c7:9f:88:fb:71:8d:de:6e:f9:ba:2e:6f:2a:4d:e1:17:
36:27:e5:17:f1:56:75:c6:23:f3:7b:3f:9c:cc:e9:06:c7:4c:
91:70:4a:1d:e7:7e:c7:1f:3b:55:44:ee:33:d7:e9:1f:5a:81:
04:52:fe:4c:eb:1c:93:b9:2d:d3:36:cd:9d:75:13:d1:cd:a8:
6d:92:56:fc:c6:98:a4:41:aa:df:b7:c7:97:c1:07:d7:c5:3d:
f0:38:95:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:06 2025 by rpki-client