Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: rcEqEaeEA2/jhtFc1aFpKy2ge98E50tw9AQzO5erhag=
Subject key identifier: 01:14:05:85:55:BB:5D:90:56:0B:8A:99:D7:A5:46:2E:C9:F2:E3:05
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 0197C312CE52121A8BA001D5AEF2B7C974DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 08DF
Signing time: Mon 30 Jun 2025 23:01:18 +0000
Manifest this update: Mon 30 Jun 2025 23:01:18 +0000
Manifest next update: Tue 01 Jul 2025 23:01:18 +0000
Files and hashes: 1: 3EEDSMX4c2BQtUFlexj7ViVaNFg.roa (hash: i/HEM5WN4SpMsFYFUufkSvdwrDOTS979dTw2WJmTqxo=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: IMOxNcGuHQSxfURsAz9P0v8k1pG6lLrqyLtYLbBOYIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:12:ce:52:12:1a:8b:a0:01:d5:ae:f2:b7:c9:74:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Jun 30 23:01:18 2025 GMT
Not After : Jul 1 23:01:18 2025 GMT
Subject: CN=0114058555bb5d90560b8a99d7a5462ec9f2e305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:f0:e4:e4:92:7e:7c:ad:65:5a:85:42:96:
f4:14:a0:b4:9e:eb:bb:17:f3:46:07:35:d1:39:0d:
7a:97:79:86:9f:53:83:53:68:ed:01:0b:28:42:2a:
ff:2f:6f:b7:93:50:62:00:f1:b7:6f:f4:9a:97:e8:
4e:bb:ee:e3:eb:d4:a1:0c:f5:49:fd:d7:18:8b:e3:
94:90:c7:52:37:47:fc:d2:45:c7:44:58:26:d7:d8:
c9:82:3f:0d:02:93:5c:20:74:26:4c:04:f0:36:09:
94:66:09:da:6f:c7:14:dc:9b:28:12:61:28:c2:0f:
e8:84:bc:37:12:b1:81:89:9b:1a:84:b1:77:3a:6e:
f0:40:bb:c0:20:b9:36:69:12:23:ed:45:24:20:f3:
ac:bd:da:ee:b6:9c:d0:05:51:b1:35:02:9a:aa:33:
77:aa:6d:35:9e:58:5d:56:b0:d2:bd:c5:d5:d7:f3:
27:c8:12:92:57:57:d7:89:99:76:d9:3f:48:bb:fb:
4b:56:3c:d0:5f:00:c8:73:22:73:c2:26:2e:d7:9d:
66:c0:ad:01:4a:59:01:b6:c8:47:9d:2d:8f:40:21:
11:2b:d8:b7:a5:0d:10:f6:55:b5:a9:40:ec:72:cc:
ea:51:b8:f8:e7:94:4f:e5:61:d2:82:58:45:f9:84:
5e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:14:05:85:55:BB:5D:90:56:0B:8A:99:D7:A5:46:2E:C9:F2:E3:05
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a0:1d:b6:8c:4a:7f:ab:69:f3:28:51:0f:18:45:da:d2:87:
f6:2a:fd:6d:26:88:d5:27:bc:e7:9f:f4:6b:7b:ce:73:4e:6a:
3d:6e:9d:99:bc:dc:56:ca:d2:56:83:6f:23:1b:b0:38:4d:53:
06:50:e8:35:fc:37:8e:05:2a:f2:75:03:1f:87:01:5c:05:1e:
e1:70:46:67:ff:ca:4b:98:aa:70:c8:88:84:7e:be:48:2d:d2:
16:e5:af:dd:91:9a:ee:c3:c9:8c:6e:97:2d:9a:00:f0:83:bb:
6e:2b:86:b7:9e:67:ba:b7:41:e1:d8:c0:55:08:dc:7c:93:15:
37:98:9b:6a:7d:90:9e:05:55:8e:34:0f:e9:e5:1f:78:88:0f:
d9:69:f5:9d:74:73:af:0d:27:93:36:11:e8:24:df:ee:e8:e8:
1c:7b:39:19:12:0a:d0:3a:82:fe:8a:88:9f:7c:34:46:7f:92:
02:cb:2a:c9:31:c6:db:67:79:be:e1:8f:d1:5d:bc:d7:be:26:
b6:d5:25:70:3a:7e:8d:98:63:c9:08:f1:a5:2e:52:68:0a:c7:
cc:09:1d:df:aa:1a:42:8e:74:fc:e8:0d:63:7e:1b:71:cc:82:
e3:6a:71:5f:7c:c6:12:f2:9b:81:b3:82:ca:28:f4:90:34:7f:
6e:72:f4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:49:12 2025 by rpki-client