Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: VwBt9b1prG2fYmt9ZCI4KgX6nsaFSKmvzjjjQ3XmdD4=
Subject key identifier: 40:D7:FF:76:CD:1D:86:FB:C0:2A:CF:3D:CF:13:BC:99:30:B1:22:5C
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 01976E873C6F1183009CA10DCF21913A46F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 13:00:45 +0000
Manifest this update: Sat 14 Jun 2025 13:00:45 +0000
Manifest next update: Sun 15 Jun 2025 13:00:45 +0000
Files and hashes: 1: 08D6A8hDDz8EmWz4TWfTzIZtuw4.roa (hash: c9bmK28UA0mGlnzCRW7yMDsTOGRfKW7u6iqtfGSyl+c=)
2: beEuyHtj6-YxYYEBP6CwFITtXCo.roa (hash: 15tHsK0ns4vomu3PpRO0w+CWAE5FrW5s/l3utsU9ZCI=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: jNVlooAZUbxq+WipqTI2iCFG1OWA50ZA/2RqDmSHMwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:3c:6f:11:83:00:9c:a1:0d:cf:21:91:3a:46:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Jun 14 13:00:45 2025 GMT
Not After : Jun 15 13:00:45 2025 GMT
Subject: CN=40d7ff76cd1d86fbc02acf3dcf13bc9930b1225c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:21:61:1b:43:ee:32:ec:80:03:7d:e6:5e:a4:
25:67:e4:db:0f:58:99:39:ad:72:ac:9c:45:31:ff:
33:f5:1b:18:7d:be:11:12:d5:7c:7b:e0:f1:f8:10:
74:59:d6:45:7a:00:12:29:0d:a4:25:89:c0:68:1c:
9b:01:62:f6:3a:57:55:3d:5e:96:1c:15:63:fc:35:
8d:a5:6a:12:61:b6:a7:51:4c:55:0b:9e:dc:c3:9a:
06:8c:d7:28:98:e5:16:fa:0b:04:60:7f:b7:d6:5c:
a9:97:f0:6b:f5:53:22:67:41:9b:0d:1b:ae:7c:db:
8f:ff:86:0b:5a:6e:02:1f:03:76:43:d4:50:3c:51:
c6:bd:39:7a:31:4d:f4:ee:94:8c:1f:6c:62:36:6f:
0b:2d:40:d7:54:33:3b:e7:3f:d3:a8:dd:2a:9f:7f:
4a:8a:d2:e4:cf:a8:bb:59:a9:af:93:85:7e:db:98:
86:93:b0:6c:94:c4:01:7e:c9:9b:b7:3e:82:20:94:
a8:83:dd:45:75:59:ae:25:f1:a2:1a:59:ae:bf:fb:
4e:df:63:75:d1:b7:69:8e:19:1a:db:1c:ba:fe:bd:
1b:c6:ef:d5:5f:cf:f6:42:92:6f:7f:bc:91:ae:d6:
73:e7:72:17:97:3e:30:99:09:c9:56:dd:29:41:7f:
ef:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D7:FF:76:CD:1D:86:FB:C0:2A:CF:3D:CF:13:BC:99:30:B1:22:5C
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:19:a0:88:c3:3a:cd:42:83:61:0b:99:a0:ec:78:1d:0d:94:
27:69:16:de:0c:e3:6a:fd:c3:45:e5:09:6f:26:81:c9:4d:e6:
b1:58:8e:d8:9c:19:4e:65:cf:11:66:c2:24:7c:2e:e0:2b:fe:
ce:32:2c:31:a2:36:e9:a7:30:ec:f9:07:1f:c5:93:90:d7:f9:
00:97:b5:72:00:af:cb:8a:e8:c3:06:51:2e:b1:00:f8:d6:6e:
c0:54:16:29:ea:65:7b:8f:b5:1f:bd:3d:c0:53:ce:f3:bd:41:
77:f7:6b:db:52:d3:d4:3c:45:1f:cd:5a:7e:be:2a:97:22:5e:
b5:39:52:c2:31:a1:cd:5a:97:c2:31:d0:c7:56:f3:86:be:3c:
27:ed:c4:70:c0:ee:7e:be:01:43:62:97:df:c9:00:ff:92:b9:
3d:b2:f9:16:5f:45:d9:95:ca:46:bc:3d:ba:85:2b:e2:63:ab:
92:49:d0:48:68:f4:b8:b2:10:fb:7c:cc:ff:fc:31:ee:df:17:
95:4f:ee:b6:2b:4e:2f:03:cd:e6:aa:d7:c8:58:9a:87:0b:1e:
5f:24:10:3f:fd:64:96:b9:1f:bc:95:2b:37:68:79:86:16:fa:
ca:8b:c8:5f:32:2e:1a:b3:e6:3a:a4:11:b8:d6:bd:4c:07:c2:
83:c8:cf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:52:35 2025 by rpki-client