Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: Sr7M1sg7v9Pl7b9eNuioPx9SRDQaJO3te24/HiktDTM=
Subject key identifier: 61:67:73:89:76:9E:CC:C1:F2:F3:0A:72:5E:7D:8B:18:30:90:81:1B
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 0197C64AAE3565E860776FB2E25BB7712D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 13F0
Signing time: Tue 01 Jul 2025 14:01:12 +0000
Manifest this update: Tue 01 Jul 2025 14:01:12 +0000
Manifest next update: Wed 02 Jul 2025 14:01:12 +0000
Files and hashes: 1: dHcu1Xe1bMDTNim9SJl30JSk4hI.roa (hash: qRzLbHq22DmrTaMRCm+OCQCo4sWL5SJUeqY8R0TqngI=)
2: g1AtdX4-A4stQRdXTWV50haWr_U.roa (hash: SfjbeTWsFCpHADmiaD0ANERB3vzQ++Aj8Swnoj6lsUI=)
3: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: IRyG5FEcJQ6bA4WREF2Hyv+ilY7/qXLzPBbqkFdAXSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:ae:35:65:e8:60:77:6f:b2:e2:5b:b7:71:2d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Jul 1 14:01:12 2025 GMT
Not After : Jul 2 14:01:12 2025 GMT
Subject: CN=61677389769eccc1f2f30a725e7d8b183090811b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:62:58:1a:9d:a2:6d:32:60:81:86:e6:29:
80:75:00:43:12:b3:3b:fb:51:12:00:f2:4d:46:c3:
0d:a2:de:cf:b3:9a:6d:09:19:9e:98:56:90:1a:d2:
3c:5b:5a:33:51:a0:bb:1f:d8:09:d5:b0:19:76:39:
aa:55:2d:4d:c8:24:c2:a2:f0:7c:43:09:3a:f5:0f:
c4:b2:4f:f9:87:56:39:30:26:af:fd:e7:87:31:42:
05:69:de:78:0b:e9:c3:7f:12:f0:50:ab:79:f2:37:
7e:45:98:9e:a2:18:89:5c:93:7f:bb:9a:24:59:b1:
ad:1b:db:7b:e1:1e:38:2b:eb:c6:c4:fa:f5:ef:21:
d8:fd:e4:a4:0b:cd:bd:ab:bb:af:a5:ec:1f:95:2f:
cc:e9:4b:a2:96:e8:bb:a3:0f:3c:4f:84:aa:44:b2:
ba:2e:c1:54:4b:ae:d8:93:3c:9a:b0:ee:be:29:c3:
f5:c8:b1:1e:a0:53:1f:8a:48:ff:d4:29:73:6a:79:
7c:f6:55:f4:87:6d:fd:22:68:cf:66:7a:2e:b7:92:
a0:8a:ec:3f:59:2c:66:4e:8c:80:67:d2:c9:38:91:
86:e6:71:e3:22:99:56:ca:c5:12:a1:36:f1:a9:bd:
0f:f2:98:49:75:c5:1d:11:a9:5f:df:ae:a3:69:58:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:67:73:89:76:9E:CC:C1:F2:F3:0A:72:5E:7D:8B:18:30:90:81:1B
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cf:02:e9:4e:df:8f:fe:75:a2:7f:47:9c:bb:8a:16:54:22:
d0:b6:61:8c:77:24:9d:2d:aa:f5:a0:13:7b:22:18:b4:1e:21:
03:0a:fa:2a:9d:8e:f7:1c:12:8a:fb:71:99:58:eb:b8:7b:15:
ca:b4:ed:ae:1a:3f:44:4d:d1:5b:4b:23:1e:f7:15:e4:39:3c:
5e:22:13:13:7b:63:7f:27:f3:0b:a5:90:de:3d:ed:a9:b9:9c:
08:92:79:16:e7:e6:ad:d1:c2:a2:f0:a7:dd:da:f3:78:aa:41:
64:c3:90:f3:d6:c0:32:8a:c5:28:3f:3c:f1:5c:b2:c3:db:27:
f5:1a:58:4d:4a:9a:a0:3e:a8:1d:a8:51:6a:18:43:fa:02:c3:
40:6f:eb:c6:e1:6f:ce:81:b2:17:ee:7e:2c:c2:93:3f:bb:8a:
fe:4b:03:07:b9:25:54:3b:eb:e9:70:f9:2d:29:c7:93:0e:4d:
b3:ef:50:28:7c:68:61:92:21:8a:37:c3:be:a0:a6:fd:2f:88:
e4:7d:67:06:70:ad:c2:c1:1b:69:83:1c:61:af:52:a2:0c:1d:
f7:33:23:a9:a1:17:74:0a:df:b8:a9:bb:af:f6:0f:b0:0c:2d:
72:6d:97:e5:c0:d3:28:dd:b4:9e:b0:cd:30:0c:fb:e0:09:d5:
fd:98:ab:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:57:05 2025 by rpki-client