Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
File: ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft (raw, json)
Hash identifier: ilPs/l8LEXxYOxwMS8ZoK9ejizaKaJcziWQ9punkaiU=
Subject key identifier: 6C:0B:F4:38:8E:27:3C:DE:02:58:2D:1B:4B:6E:A2:0C:DC:8A:E8:4C
Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
Certificate issuer: /CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Certificate serial: 01976997EDA96CC8FA8A7D1D3AD78BDD9776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
Manifest number: 10D0
Signing time: Fri 13 Jun 2025 14:00:53 +0000
Manifest this update: Fri 13 Jun 2025 14:00:53 +0000
Manifest next update: Sat 14 Jun 2025 14:00:53 +0000
Files and hashes: 1: W5Hmap82286bMvYRGfhj5P6hiJY.roa (hash: /qhhKBqlDLllBtHRejTtA1t4Bm+9enZEcvJRIbXk7e8=)
2: ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl (hash: VuwBQ2yye0quoxYaxyWX9CzCGa757xg6gV3wH/WY9Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:ed:a9:6c:c8:fa:8a:7d:1d:3a:d7:8b:dd:97:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Validity
Not Before: Jun 13 14:00:53 2025 GMT
Not After : Jun 14 14:00:53 2025 GMT
Subject: CN=6c0bf4388e273cde02582d1b4b6ea20cdc8ae84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:2a:54:2e:78:27:44:ce:83:73:b5:fe:d4:
ec:aa:d6:28:04:e0:d4:9c:62:28:52:2c:aa:2c:5a:
86:f5:60:82:a4:a2:e2:b3:ff:cb:6e:49:c2:6a:16:
fc:d8:01:ed:19:0f:00:e9:14:8f:06:2e:45:54:e1:
12:81:25:c2:10:d7:37:64:19:fc:cb:20:2a:36:f7:
43:76:93:5c:47:c9:86:83:33:2f:67:cf:52:a6:9b:
a4:9c:29:1f:20:c9:89:45:81:d3:5b:c2:ac:ee:5d:
88:a9:64:e8:e9:fc:b6:a7:56:9a:b5:1b:b7:0d:ad:
e7:d7:f3:d0:dd:91:00:11:1d:7e:45:a7:c2:aa:93:
db:0e:14:ea:4f:15:49:f3:41:c9:d7:15:be:1e:4d:
a8:8e:12:13:73:0f:7e:a0:a4:3e:2d:00:36:39:8e:
c0:89:db:ad:58:ce:e9:f5:7c:33:68:01:e2:6c:a8:
db:f6:c8:fe:0b:4e:ca:6a:6a:ef:41:4e:2e:37:67:
5f:4e:7b:78:87:18:fa:40:de:d7:9f:80:20:22:3a:
54:46:17:48:f5:0e:ec:a3:c6:f8:27:e6:2f:84:cf:
ee:d9:7b:f4:4c:ad:cf:c0:e9:b9:14:57:89:48:31:
ff:2a:b8:c4:a2:b7:b6:95:99:41:f0:9d:73:86:47:
c9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0B:F4:38:8E:27:3C:DE:02:58:2D:1B:4B:6E:A2:0C:DC:8A:E8:4C
X509v3 Authority Key Identifier:
keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:56:82:f3:46:ab:84:80:5d:8a:5d:51:e3:ee:81:e8:05:15:
51:11:d3:02:a2:f3:e9:8c:34:92:a6:a4:95:cd:ce:b1:68:a2:
c9:45:56:45:2a:8a:ee:24:02:ff:0a:47:95:c4:18:c3:37:b3:
b6:04:ed:3c:8d:00:45:f2:c9:78:25:9e:fb:c6:d4:63:40:cc:
15:9b:69:26:12:97:cf:c0:7a:83:9e:f8:3d:29:23:0c:06:2d:
35:68:08:c8:3d:69:ac:76:b2:9c:d9:a0:4a:53:06:f8:40:56:
46:38:23:4c:e7:71:68:00:31:82:d1:28:aa:cc:87:3b:57:31:
bc:89:2d:4f:5e:c6:e4:da:31:50:9d:f7:0f:09:2c:a1:30:2d:
22:98:5b:18:49:67:cb:36:ac:29:d3:17:14:e8:98:e0:c9:f2:
85:05:3c:bb:a7:fe:0e:14:7f:3d:5f:b2:b3:22:31:48:aa:18:
e7:d9:6d:fc:a8:f2:91:46:d7:c9:ba:a5:85:52:53:16:f4:f7:
b5:56:45:71:56:c6:d8:01:c3:28:68:49:e8:ad:ad:5e:d1:aa:
a6:23:93:48:4e:c2:f3:d2:48:c7:9b:a5:ed:a1:73:f4:f9:60:
96:3f:20:ec:d0:ca:1b:07:e8:bc:fd:64:72:cd:dd:28:7c:73:
88:57:74:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:37:51 2025 by rpki-client