Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: 3/2gG86BYVjStWh1dyyLm2+SVu2OootOgVF6zuw689o=
Subject key identifier: 6E:D6:05:44:01:51:DE:74:34:7F:50:EE:69:45:33:6E:B1:A3:CC:7D
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 01976DAB15987752BCDCEC6E440FEEF22D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 09:00:18 +0000
Manifest this update: Sat 14 Jun 2025 09:00:18 +0000
Manifest next update: Sun 15 Jun 2025 09:00:18 +0000
Files and hashes: 1: JauXkuBrJ-Jj9T7iuekamPiA2KM.roa (hash: +JxWUzvZHawG/TTDHvvjcR4tNCgM0dBRjS+5hf64dGM=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: AO7ETHb8mRD8zWhj5Dil4VFgHd+K21Vcg+uIXISpCAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:15:98:77:52:bc:dc:ec:6e:44:0f:ee:f2:2d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Jun 14 09:00:18 2025 GMT
Not After : Jun 15 09:00:18 2025 GMT
Subject: CN=6ed605440151de74347f50ee6945336eb1a3cc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:43:d3:bb:43:d1:16:bf:96:f7:75:2c:20:
8d:eb:5d:f8:39:27:35:a1:35:4f:ab:da:5b:cc:ae:
28:33:7f:7b:81:3c:80:9a:9b:6d:10:64:bf:d9:34:
c1:74:c7:75:fa:8f:9d:d0:7c:d1:8b:2a:ce:67:1f:
95:e5:fe:b9:25:ef:99:fc:b3:bf:9d:35:bc:8e:4d:
08:c9:97:c3:3d:ab:ba:13:ec:89:0f:4b:52:47:dd:
79:87:cc:c2:1e:b0:ef:06:1e:e8:eb:d0:5d:dd:dd:
2e:59:77:10:f1:22:89:67:57:7a:bb:32:31:27:7e:
88:bc:47:c1:d6:7f:22:04:5d:ae:a0:72:96:d2:e6:
8c:37:7c:66:f0:bd:2b:3d:3e:14:4d:ba:0d:78:58:
a2:d1:ff:9f:d7:cf:e7:c2:b6:24:c6:d2:eb:e6:f9:
cb:41:d2:fa:8e:42:b4:92:b4:02:d9:9b:7a:a4:66:
d4:8f:d7:d8:f0:b2:79:e9:ea:77:59:d5:ec:96:4d:
c0:3b:46:a9:c7:f1:aa:a7:37:17:29:00:ab:3d:45:
67:0f:1e:5e:3d:8a:e9:42:66:d2:82:29:22:7c:0e:
ec:73:86:1f:68:58:9a:f3:7d:63:e4:5d:c7:42:2b:
34:73:b5:98:58:16:6a:9c:3f:ce:9d:d4:b1:cd:c9:
5b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D6:05:44:01:51:DE:74:34:7F:50:EE:69:45:33:6E:B1:A3:CC:7D
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1b:9a:de:cf:75:b0:a6:72:e9:b0:c0:ca:82:df:63:94:34:
a1:ce:13:4d:7f:f5:5f:20:d9:03:ba:27:f2:c7:c4:54:04:3b:
fe:1d:89:4c:9e:45:1b:4b:23:70:17:14:3b:da:75:b8:5b:26:
ac:3d:ec:06:ff:b1:b4:3b:77:63:e3:d1:7c:87:7f:da:0e:2b:
73:74:90:b6:49:18:49:7a:35:b9:22:ad:12:53:19:e1:4e:9d:
41:97:51:9b:5d:79:bd:f9:29:ec:6f:1f:d6:c5:5e:37:f0:65:
32:1b:b9:11:6a:9a:85:90:31:f3:17:06:07:53:2c:e7:de:73:
73:bf:cd:e3:4c:54:90:3c:aa:c5:d7:37:b9:bf:ad:cb:92:55:
3b:36:a1:7a:5b:6e:dc:b4:08:98:c4:b0:bd:60:eb:62:d4:0f:
13:54:f4:26:b4:88:63:7a:62:5b:29:5f:8c:a1:fa:35:c9:68:
e3:48:f5:e1:20:d1:7a:68:2b:7d:d3:16:5a:ab:9c:37:12:e2:
a7:76:35:2f:98:8a:8c:da:2f:7f:3d:18:85:26:c7:0a:9d:26:
28:c5:e5:24:65:3e:1c:5f:f3:85:63:84:e5:15:5b:66:38:c7:
7a:18:13:e7:36:5c:91:67:f6:10:ad:d9:6c:57:60:12:6c:63:
87:e6:fe:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:12:03 2025 by rpki-client