Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
File: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft (raw, json)
Hash identifier: iWIFaeuFMCc/cSvv1egDDeLxguhS5d8BP9+CmRNz9Mo=
Subject key identifier: F2:35:08:0A:E0:CE:9C:4F:A1:FF:13:05:EE:6B:30:3B:23:72:97:B9
Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Certificate serial: 0197B7B3483697E8C89C70FAD0AC7DD37253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
Manifest number: 02CE
Signing time: Sat 28 Jun 2025 18:01:09 +0000
Manifest this update: Sat 28 Jun 2025 18:01:09 +0000
Manifest next update: Sun 29 Jun 2025 18:01:09 +0000
Files and hashes: 1: seG0cSvUmJpa8tNqX_V-DMKTXGE.roa (hash: 0BF0vQ0Y+DaO6qvrnPzJ13hBughhON940nySfXNNYFI=)
2: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl (hash: Fk2m6xKXs0tZejvTBSMUHk7wp7Hit9B6z69dtau4jrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:48:36:97:e8:c8:9c:70:fa:d0:ac:7d:d3:72:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Validity
Not Before: Jun 28 18:01:09 2025 GMT
Not After : Jun 29 18:01:09 2025 GMT
Subject: CN=f235080ae0ce9c4fa1ff1305ee6b303b237297b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:ec:d9:e3:22:ae:71:41:13:67:fc:c4:b2:
10:ee:7a:88:81:81:ba:93:89:8d:65:5e:b4:b8:f9:
62:11:cc:87:af:4b:52:86:29:99:d4:28:d5:2c:37:
63:da:19:ff:14:04:4c:60:13:ee:89:fc:6c:e4:66:
0e:c4:d7:ef:ff:0f:ca:bd:e2:32:4a:40:6c:b3:fe:
95:2a:fa:db:b7:55:b6:e5:1b:57:d9:cd:28:27:09:
d4:64:76:d0:33:2a:28:4f:53:91:4d:a1:32:54:43:
dd:82:e3:62:7c:d4:9c:42:b8:3d:95:e6:a0:17:38:
86:ae:a8:86:fe:a1:43:a5:9c:54:11:e6:58:25:37:
da:a6:5a:94:85:b2:27:65:9c:1d:c1:a4:a7:a2:b9:
f5:04:3a:fe:39:01:d9:72:45:13:4f:c4:96:98:ea:
37:39:2b:67:66:c2:90:48:c3:c3:7d:54:02:de:e2:
7e:7f:fd:32:18:55:20:50:8b:4f:c5:b1:42:ee:00:
0a:0d:71:c4:4d:c1:d3:58:18:bb:ed:bf:13:2f:cb:
98:c6:f7:23:0e:a5:45:42:ce:e2:67:a8:df:5c:a8:
39:bf:e7:22:46:8c:fd:28:3c:62:32:f4:e8:f0:13:
7a:52:22:22:2a:79:37:0a:7b:ed:a4:b8:99:7c:fb:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:35:08:0A:E0:CE:9C:4F:A1:FF:13:05:EE:6B:30:3B:23:72:97:B9
X509v3 Authority Key Identifier:
keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:40:92:aa:94:b5:35:90:6b:6a:e7:b0:bd:ad:6b:38:db:d1:
39:4b:c9:3f:df:54:c1:da:23:76:0d:9f:ed:08:0f:5d:09:27:
80:b0:73:5d:42:34:c5:e9:31:9e:75:93:df:c7:32:c3:52:1d:
87:34:49:54:51:08:18:f1:e7:b9:ee:45:cd:66:2c:e4:29:04:
d6:5c:7d:8d:e5:00:e6:a8:e1:e4:7f:ed:b9:4e:ca:28:aa:04:
19:be:a8:ff:b5:ec:6a:a6:1b:5c:7f:ad:2a:35:51:f7:14:14:
40:91:6d:2f:e0:e7:21:96:3a:20:e6:3c:73:52:0b:9a:06:85:
6e:d4:ed:3d:2f:9c:c7:4a:42:72:f5:79:14:c6:d4:80:de:6f:
87:d3:3c:b8:a8:45:48:0c:41:59:7b:5f:39:80:d7:3d:9f:6b:
25:41:9c:f8:ed:e8:56:95:7b:14:1e:a9:4d:f9:3d:7c:45:73:
84:4a:91:34:cb:44:33:79:86:6b:0d:2e:0a:96:cf:1d:07:8b:
2b:74:5b:38:94:35:17:0c:84:93:ff:3d:41:6b:b3:9c:ed:c0:
7c:29:9b:77:dd:92:5f:fb:9d:6d:e3:5c:21:4f:2f:2b:d0:bf:
49:6d:b2:e1:ba:55:18:a2:13:6d:1c:c8:6b:a7:ce:b7:b0:7b:
2f:d4:fd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:44:24 2025 by rpki-client