Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier: 5MOb3lguy1Ct9eAYH7hx27tSe5K3b64M8mjAlw7cb6k=
Subject key identifier: FF:94:5B:82:2F:EE:D7:05:4F:83:EC:47:22:1A:38:05:C4:BE:FB:44
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 019779E6D3A0F0836B2C3839AAA1E7C236BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 18:00:59 +0000
Manifest this update: Mon 16 Jun 2025 18:00:59 +0000
Manifest next update: Tue 17 Jun 2025 18:00:59 +0000
Files and hashes: 1: 3XfxhYPaNkk8RYgtHf2GQ9-31bw.roa (hash: IyuGzJvfjXAVgnfQEKPJlaaX+BmI0xIhxqPUz3ur7Ug=)
2: K-1wTW4J6sLpv-6DuCiwUF12vdI.roa (hash: n2u+VQEAXcWUcGFe9BbTAMBCmji0TY4jRMY2BGuQA34=)
3: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: WnLNaNfLjypD6H5U5hrYj7FN8r6K24/E9vehZyGxf2Y=)
4: tC9oEvPrRK3aKuK17Fq_gw6oxGU.roa (hash: V3atHxuVAp6RmJ/WmMRTwEnC2jY5957dy0nURReA0co=)
5: zeoM8BTDMIvmahMcB90qnpwzClY.roa (hash: kC/8T/vBTQ+SF6IsbbebB8UCkgdezLGje3ANXS8WqT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:d3:a0:f0:83:6b:2c:38:39:aa:a1:e7:c2:36:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Jun 16 18:00:59 2025 GMT
Not After : Jun 17 18:00:59 2025 GMT
Subject: CN=ff945b822feed7054f83ec47221a3805c4befb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:f2:10:33:16:e8:f3:4f:82:5d:da:2a:de:
61:a8:f0:7e:09:d0:0a:c7:d9:81:44:15:64:f4:49:
87:26:1b:e5:41:83:ae:94:2a:e3:6b:4a:df:57:29:
52:0a:a4:84:bc:52:40:52:4b:79:8f:3e:e3:74:37:
d6:f2:ce:49:c6:df:40:c0:ca:e6:2d:a2:0e:60:8f:
18:01:fc:6e:0a:07:79:b6:b9:5d:db:f1:01:c6:63:
1e:98:d1:2d:91:75:6a:9f:54:68:1e:17:24:8e:f4:
06:d2:ad:dc:9e:14:76:5d:c7:30:46:8d:6a:27:31:
6c:af:0f:fd:74:bd:75:a6:50:62:27:08:41:87:a9:
6d:98:b0:84:66:99:79:43:01:cc:c2:c9:8c:59:66:
93:17:af:79:dc:46:76:a3:bd:aa:7a:cd:25:b3:ed:
0b:cb:fc:a9:f9:30:c9:ab:2d:45:f0:59:8a:76:a1:
44:62:57:35:b1:d3:be:28:c6:55:a7:4b:d4:98:02:
49:b0:89:3a:20:f6:eb:17:53:ca:21:e2:41:66:d4:
b9:20:f8:94:46:c5:5e:a5:d5:cf:4d:af:38:42:9b:
7d:d4:06:24:06:2d:10:4a:e5:6c:34:64:b1:2d:5a:
df:e3:1c:7a:f5:40:af:1f:38:eb:f9:16:14:4b:ad:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:94:5B:82:2F:EE:D7:05:4F:83:EC:47:22:1A:38:05:C4:BE:FB:44
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fa:7b:db:b6:fd:af:e3:66:7c:58:72:85:56:25:6c:0b:8a:
c1:91:9c:bf:c7:54:ac:b4:8c:71:b9:18:9e:39:27:ba:8e:ea:
a6:b5:c5:89:f4:69:3e:38:b0:41:1a:44:b3:4b:93:91:af:4e:
52:ec:d7:e4:2f:6d:19:e5:85:25:81:91:94:3d:ab:73:8e:3b:
69:91:28:73:03:12:42:05:df:d8:c9:69:37:32:3d:34:a0:fe:
9d:17:df:97:62:1a:1f:0d:4c:d1:0a:f5:b6:88:be:b0:68:b6:
49:08:98:27:f4:c6:10:b5:84:68:9f:a2:08:f6:3d:2e:2c:09:
46:44:c4:8a:48:cd:e2:cc:ee:7f:49:bc:f8:a5:58:9c:df:9f:
37:db:76:fb:25:4f:1e:00:55:66:20:e7:a5:1c:44:b8:e4:8a:
eb:6d:8e:81:c4:b6:f0:c9:75:ff:95:b7:4c:71:77:b9:cd:74:
c0:10:a5:c7:af:4a:fd:e1:f9:9d:15:30:bd:b7:7c:9b:4d:fe:
9f:ed:5f:44:9f:57:78:e2:ed:64:03:f7:4e:2e:d0:07:6d:f9:
bd:1a:f7:a5:28:df:e8:30:34:9d:e1:fa:48:3f:10:57:40:d9:
f0:02:5e:44:ff:1b:83:3f:f5:53:75:75:01:f1:96:40:f7:5d:
8a:e5:51:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:00:47 2025 by rpki-client