Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
File: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft (raw, json)
Hash identifier: mWrM/yc7d+zD2xTagTjKxixME/pXpkT9u3G7WczfWCc=
Subject key identifier: 49:C9:77:46:18:AA:55:18:13:8A:A0:76:48:FD:0E:CB:BF:C1:FE:1E
Authority key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Certificate issuer: /CN=cfc025a9d55bfd643757da4d499dce17201774d2
Certificate serial: 01976884C991492218DE335DBC1A3B2F8CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 09:00:22 +0000
Manifest this update: Fri 13 Jun 2025 09:00:22 +0000
Manifest next update: Sat 14 Jun 2025 09:00:22 +0000
Files and hashes: 1: 6U3Xs040zPO-wT1n1ipqEnLqdc0.roa (hash: iVKPeVo4dn6/xoX4wf7rwRU8cdeCDU4NP9VqaFlc7Ic=)
2: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl (hash: kOBZFOB69FS1x3NhZQQuT38Lj7GRblndMGNhcX4sGjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:c9:91:49:22:18:de:33:5d:bc:1a:3b:2f:8c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc025a9d55bfd643757da4d499dce17201774d2
Validity
Not Before: Jun 13 09:00:22 2025 GMT
Not After : Jun 14 09:00:22 2025 GMT
Subject: CN=49c9774618aa5518138aa07648fd0ecbbfc1fe1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:dc:3b:9b:f5:6a:b3:bb:cc:83:f2:04:7e:
a8:7a:cc:90:00:cd:37:8c:bc:a1:6a:f2:16:5a:d0:
aa:ca:bf:96:5a:46:9b:68:63:39:ab:99:44:d7:f7:
01:17:5c:c2:9e:9e:5c:40:ea:cd:16:f8:35:73:5b:
d7:0c:bb:08:de:55:86:e2:1c:8d:de:66:8e:44:fb:
b7:3b:4f:2d:e4:3d:48:03:77:e0:93:7c:d5:2e:63:
12:18:9b:e4:89:cb:19:8f:84:36:b9:b9:70:9c:ab:
8c:85:3e:d1:f4:d7:3d:88:48:bb:cb:cf:13:f9:f4:
7f:3e:39:03:34:8a:74:48:c9:02:f5:7c:d4:bb:35:
68:71:63:41:ca:ac:51:ba:48:d2:4d:6d:e6:2b:71:
7c:79:ef:54:7a:f5:7b:70:d6:1e:b5:94:61:de:87:
59:10:cb:06:e3:3f:ca:09:43:d0:eb:08:6a:4a:b8:
cb:c1:cc:05:ed:24:90:f8:1a:15:ea:44:e5:7d:85:
43:46:44:fc:2a:1f:97:68:b0:19:86:84:af:cc:23:
eb:ab:29:75:cb:94:10:1f:89:5f:02:da:51:37:c3:
93:dd:f5:6a:e5:8f:11:9b:68:ab:6e:da:10:fb:3a:
3c:e6:0b:0b:1f:ee:2f:a0:c3:01:d4:6e:b8:a5:e2:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C9:77:46:18:AA:55:18:13:8A:A0:76:48:FD:0E:CB:BF:C1:FE:1E
X509v3 Authority Key Identifier:
keyid:CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0e:58:f8:e5:e5:1d:ed:bc:99:90:73:39:96:e7:17:ff:d0:
eb:e6:56:42:3a:9d:01:f4:5f:fb:fa:77:be:a9:be:35:fa:37:
70:e7:c9:4b:65:f2:ca:1d:46:b8:22:2a:8f:37:93:0b:00:e4:
ac:14:09:30:cb:dc:7c:6a:d9:48:0e:69:b7:c5:a4:cc:f0:92:
08:e0:55:b5:c7:5c:53:4e:5a:3d:f1:13:e8:1b:83:ae:76:8f:
aa:07:1d:3c:e3:ea:fd:92:17:a5:1a:2e:e7:f3:f4:f5:f0:b1:
7f:5a:66:88:35:6d:2b:9b:78:94:57:71:0a:6a:d8:e6:10:7b:
93:38:29:b5:37:9e:e7:b0:f9:8a:9a:2d:24:28:66:82:a7:2c:
51:e4:32:4c:63:a9:0b:35:17:83:e2:ea:c0:7f:09:fe:e0:4f:
ea:53:1f:d2:34:53:63:e2:85:d1:49:f3:7c:0f:10:8e:28:d5:
91:ad:1a:ed:92:79:31:da:05:b0:ac:72:83:1f:5d:9b:5f:fe:
c5:c0:86:cf:4a:30:8e:46:7d:05:1b:b1:a0:73:ab:0b:a9:be:
9c:b1:d7:a4:f0:ac:26:35:91:82:73:a9:0a:25:72:68:cc:e0:
0d:89:4a:00:22:8a:18:4b:01:48:68:e2:9f:19:c2:2a:60:43:
ad:7a:f1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:21 2025 by rpki-client