Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: c+iKdy+V1VJjc77sK88g07WxEuBg3zeg3sraq6B81+0=
Subject key identifier: F4:64:DD:27:2D:80:03:91:85:77:2E:72:27:D9:EC:23:1A:A2:F8:29
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 01977941F80FD92A19B25007C2A3DB3C6BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 15B2
Signing time: Mon 16 Jun 2025 15:00:55 +0000
Manifest this update: Mon 16 Jun 2025 15:00:55 +0000
Manifest next update: Tue 17 Jun 2025 15:00:55 +0000
Files and hashes: 1: 1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa (hash: B3C32+APojLLpoq0P/3+v4OioF2SbZXBsRXy/mWXSxY=)
2: COMbxzyzKVM41psIVJ8PmeUG95I.roa (hash: HMyhqISaMC1CfLL3HrKjqu5egWDMTFnCQiTmRwonrws=)
3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: JNNLnoNniWXESpns8A24gyGyVhYaRmxOj8DYQYIfV24=)
4: pYhg1n_DxPby2Wa8o54wKMCV-TY.roa (hash: jyg5bkFKPwfKRdHY+XAYFgW1xWFYhzO9CuP3U/F9zhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:41:f8:0f:d9:2a:19:b2:50:07:c2:a3:db:3c:6b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Jun 16 15:00:55 2025 GMT
Not After : Jun 17 15:00:55 2025 GMT
Subject: CN=f464dd272d80039185772e7227d9ec231aa2f829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:0c:70:0d:4b:f4:0b:9f:2f:34:a9:6f:6c:
3c:78:04:1a:3e:06:ed:4f:65:1e:ce:78:8a:d3:95:
04:71:84:65:69:4f:5a:e7:c2:8d:a2:d5:ed:d9:e9:
88:b5:94:d4:5a:1d:59:1d:c4:74:68:9a:46:12:24:
00:3b:7f:bf:9c:95:6d:7c:63:ea:c6:38:3d:b8:20:
9b:00:24:c9:8e:7a:9b:33:cc:cd:85:c7:30:68:5b:
3d:6e:2f:df:2f:6c:0c:5e:9f:42:e5:23:bb:1d:74:
82:c0:5b:3d:57:26:26:db:6d:96:cf:61:36:98:28:
c3:19:39:4c:e0:98:56:d6:ae:e5:0d:40:46:69:55:
87:80:10:5c:26:e8:da:70:59:72:78:f9:e2:fe:1e:
33:c1:d2:d2:9b:4b:75:48:53:aa:47:bc:50:29:20:
e1:b5:e7:02:94:75:38:14:ad:4c:60:8c:7f:f3:45:
c5:ef:44:df:14:ed:f0:6b:63:f1:a9:4e:18:89:21:
c6:b1:9a:8f:15:ae:d5:8d:6b:96:7d:0f:f2:92:45:
a7:dd:19:89:c1:84:8c:2f:d2:a1:37:d7:a9:a1:e4:
73:82:b5:a7:db:43:f0:8e:b2:10:5a:51:37:9a:8b:
e8:59:8b:b0:95:c0:32:6d:91:a0:ad:4a:01:f0:6a:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:64:DD:27:2D:80:03:91:85:77:2E:72:27:D9:EC:23:1A:A2:F8:29
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:98:8c:f4:40:17:65:bb:55:18:45:a4:cc:f6:d1:15:ee:8e:
c0:89:15:42:54:03:b4:43:f3:89:92:d3:e9:8c:5d:49:07:ea:
16:8e:5d:32:46:5f:a6:28:78:b9:f1:26:f2:f4:05:5e:96:14:
26:98:40:4b:ba:d2:58:34:19:45:6d:7e:f2:01:f2:f3:eb:6b:
ce:c0:7e:70:3e:30:af:3a:ec:a3:01:6d:fe:39:3a:db:19:a5:
02:5f:1c:61:39:1c:26:83:9a:d5:b0:20:e8:01:fc:ed:f5:97:
15:88:87:cd:a6:c7:a0:0a:59:c9:fe:e7:93:76:fc:0c:f9:2e:
90:77:1a:33:5a:03:dc:8b:5b:78:15:33:b6:aa:be:09:12:3f:
a4:3e:f6:27:2b:95:53:6a:45:0c:48:be:ea:a3:9d:18:66:54:
38:24:67:c0:f1:b4:2a:6c:c3:af:75:83:63:79:79:33:f2:e0:
4e:6c:d8:68:20:f6:3b:72:3f:2a:50:e6:33:0b:60:fc:09:cf:
a0:41:0d:61:f5:de:af:5a:72:f1:79:e6:75:5d:87:f7:a1:24:
c1:91:80:92:84:45:2e:72:d2:8e:a7:bc:33:88:b9:50:e3:61:
76:af:04:73:49:8f:f4:dc:5b:3a:86:af:c9:90:d2:8c:bb:9e:
ee:45:0a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:03:30 2025 by rpki-client