Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier: ippsW+7rdj2UV54X9e/hSMv9wSoCPVzF8Skhu+NqMQc=
Subject key identifier: 6E:72:1F:5B:A4:AC:72:5F:FD:E7:F2:EB:96:E3:7B:D2:8F:CA:32:BA
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial: 0197B77C61EB6F48062D6D2845C48DF6211A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number: 12F0
Signing time: Sat 28 Jun 2025 17:01:11 +0000
Manifest this update: Sat 28 Jun 2025 17:01:11 +0000
Manifest next update: Sun 29 Jun 2025 17:01:11 +0000
Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: nxmC1T6s+jsXdJXvHoyI+kJvt2txl9mc4MoQr/5rs8A=)
2: oilk7jUBzGUsKxQiO3ENxMgz50c.roa (hash: uezrIJE13+ePzqQZQpEOEl7mUMI9j3C9B4RgtY410tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:61:eb:6f:48:06:2d:6d:28:45:c4:8d:f6:21:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Validity
Not Before: Jun 28 17:01:11 2025 GMT
Not After : Jun 29 17:01:11 2025 GMT
Subject: CN=6e721f5ba4ac725ffde7f2eb96e37bd28fca32ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:08:9e:b6:ee:cc:04:37:07:38:bb:36:f1:
b0:71:cb:7a:1f:6e:04:7e:f1:e5:3d:66:9c:c0:3d:
84:04:18:6d:7c:ba:f5:9a:94:50:df:38:a4:88:d1:
ae:b4:11:fe:85:b9:61:66:04:ad:56:14:3a:61:63:
8f:7d:7a:11:ac:a4:05:d2:7d:ad:f8:8d:9f:e3:c6:
67:8d:fe:be:30:d1:54:0e:09:51:dd:98:e5:82:76:
69:f0:4c:0e:b3:ef:a3:c7:f7:cc:db:ec:b3:b3:f8:
b4:4b:f4:7e:7c:77:56:94:83:f1:03:88:07:9d:a7:
5c:4d:bc:9e:f0:11:67:87:3f:f6:61:a9:13:12:a3:
8b:e8:e3:21:84:fa:11:09:e2:43:26:84:31:17:0e:
b6:4a:94:48:fd:a7:96:44:8b:4c:56:28:f5:c5:cb:
c8:a9:84:df:31:54:2f:ca:7c:7d:13:09:86:a0:a1:
65:cb:e6:7e:37:f1:d9:9d:af:25:94:e0:95:d5:80:
80:60:d7:18:f1:d5:be:64:39:e4:99:c2:34:3f:33:
3d:23:98:29:01:cd:1e:b0:b5:02:75:fe:c8:ce:8e:
31:e2:91:a7:ba:92:81:8c:28:ba:30:75:06:25:2e:
ec:f3:c7:fe:0d:f0:d9:8c:6f:d3:87:aa:9b:ea:b9:
9c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:72:1F:5B:A4:AC:72:5F:FD:E7:F2:EB:96:E3:7B:D2:8F:CA:32:BA
X509v3 Authority Key Identifier:
keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3f:fc:6c:77:72:4a:1e:da:59:50:07:4b:fe:02:1f:42:cb:
81:36:e5:ae:86:01:40:16:2a:81:66:95:e7:ac:a4:5b:d0:fb:
ee:f5:1f:ae:3d:6b:49:61:1c:2c:f7:d6:3a:20:ae:d7:43:55:
fa:20:d6:27:5b:f2:b8:8e:1c:3e:96:bf:4b:cd:de:1b:a6:c8:
78:a1:49:0b:17:3c:56:ca:f0:f6:ba:9e:b4:a4:4f:3b:45:7b:
b5:1e:1f:80:05:7f:35:b7:68:f4:be:6e:d4:43:d3:86:f0:c8:
bb:9f:0f:1d:a4:de:c6:4a:41:eb:7c:2d:aa:59:89:0b:19:e8:
cf:84:10:92:40:18:98:95:e2:e6:17:a7:e9:1e:cf:c9:fa:41:
1b:a1:a7:8d:b5:be:56:7d:f1:de:58:cf:cb:8c:74:2d:a4:5e:
67:09:eb:ac:50:56:d2:bc:b6:c0:4b:3b:45:74:8d:1f:6d:07:
35:1b:a4:7b:02:09:45:c8:5d:c0:c4:e8:6c:ed:18:75:e8:30:
7f:38:79:d0:ce:5a:6e:f3:ce:29:cb:ed:f2:61:12:fb:6a:06:
e9:b0:f1:f2:25:a4:7d:b8:dc:39:32:9e:cd:16:48:1a:ec:46:
d9:74:04:7c:5b:19:c8:da:8c:01:4b:30:f2:94:9a:a3:6f:85:
2a:49:c3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:16 2025 by rpki-client