Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
File: 1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json)
Hash identifier: ZkoakWSIxzhjdhVw2PqiRdW9ujXxVo9FWAZ3v8BoB8Y=
Subject key identifier: 37:60:A3:BE:C3:72:AA:6F:ED:17:DA:25:45:E5:E9:E2:12:A1:69:BF
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Certificate issuer: /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial: 0197B6D78A9C156AA2F7EBBA8196B85AEBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:01:08 +0000
Manifest this update: Sat 28 Jun 2025 14:01:08 +0000
Manifest next update: Sun 29 Jun 2025 14:01:08 +0000
Files and hashes: 1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: G1QnR6tbJoz4q2fG1NUMlsVWLRzjUsf8uqsg4fKpcH8=)
2: v5B9bil7tlbUN50h6GDN8m6sKFE.roa (hash: 47YbpbDGbrGPtLvV/Gf30olGqwG6mqrNB3XSB3G5VQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8a:9c:15:6a:a2:f7:eb:ba:81:96:b8:5a:eb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
Validity
Not Before: Jun 28 14:01:08 2025 GMT
Not After : Jun 29 14:01:08 2025 GMT
Subject: CN=3760a3bec372aa6fed17da2545e5e9e212a169bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:79:6e:23:71:9c:67:43:00:07:2f:5c:a6:
7c:db:96:cc:9f:14:d7:5f:74:1a:f9:90:95:3e:c9:
7a:91:31:a5:7d:ee:ba:9f:e6:27:ff:8c:02:09:29:
14:2f:7f:85:da:6f:94:22:a4:ce:8a:15:40:1e:96:
7e:52:f9:cf:22:5e:80:6a:c5:f6:df:a4:c0:ff:67:
24:ef:ce:66:37:e4:70:31:ae:6c:20:78:be:fd:af:
e7:0a:ec:4e:d8:32:c3:f4:f4:88:6d:14:47:33:20:
ce:9b:3f:98:55:54:80:7f:ae:3f:13:02:10:49:bf:
51:5b:68:05:71:32:c3:36:61:c6:a6:64:c7:e1:fb:
92:e5:70:5d:fd:ac:65:77:30:bd:cc:0b:e4:6e:a9:
bd:65:8d:57:ff:4c:a6:18:fb:4e:fb:a3:75:91:f8:
5c:1d:d9:a5:7d:10:aa:bb:be:bd:3f:58:26:de:5b:
9e:d7:e3:90:aa:b4:54:3d:ea:77:ec:25:6a:b0:12:
79:8b:36:1b:27:b6:9e:82:e3:f6:38:6f:d8:39:25:
2f:5b:15:aa:ed:c0:1a:b7:cf:5a:34:94:70:e8:32:
71:ad:35:5b:d4:df:cf:0f:bd:65:cf:2c:5d:e9:c4:
5c:42:34:60:55:ab:fa:40:b5:31:93:4c:e8:46:b3:
d9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:60:A3:BE:C3:72:AA:6F:ED:17:DA:25:45:E5:E9:E2:12:A1:69:BF
X509v3 Authority Key Identifier:
keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a3:3a:e2:ae:88:8b:84:fd:7a:a8:41:77:39:a0:82:64:b5:
94:76:91:f3:ff:b2:14:36:11:cc:95:8c:ae:33:b1:99:c1:37:
af:78:47:e6:8c:a3:e6:63:8d:f4:2c:c7:a4:a5:db:b0:69:08:
2d:b5:a7:fd:29:bc:91:5b:46:22:b6:2d:ea:fd:39:8e:bd:f4:
e0:0f:3c:40:29:2e:42:5b:6d:0e:18:77:0a:b9:b3:fc:f8:bd:
24:e4:8b:dc:53:44:8d:e8:35:8d:0e:35:08:c3:3f:06:5e:a0:
13:0d:3a:44:d0:e8:30:83:c2:e5:91:87:47:86:83:3f:b6:a4:
f3:41:d3:3b:74:d1:00:58:92:f1:b0:26:73:ca:72:b6:6e:e5:
fb:48:1b:e0:ff:ba:1e:97:d2:ee:59:62:e6:fb:2e:84:f6:61:
2f:76:63:34:21:aa:7a:4d:c1:de:9a:f2:fe:46:b8:dc:3a:1b:
a4:60:73:5b:26:f7:fc:9c:cb:a4:22:36:e7:c2:e9:70:fb:df:
f8:d0:4f:e4:0c:d8:28:82:c7:27:dc:8a:af:2c:08:4a:7f:5d:
19:fd:96:2d:57:7e:5f:6e:30:c6:be:43:e0:46:de:b3:51:38:
18:48:aa:ba:6a:17:07:dd:ec:aa:df:2b:1b:03:6b:69:e2:56:
e4:56:3b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:04 2025 by rpki-client