Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: +u97T6QDPxOxts0mNHxIEJu+/YmBFci5apzMgK2Mv88=
Subject key identifier: C3:0F:B2:85:F8:00:B8:81:30:20:26:72:CF:AA:1C:F5:E0:5E:AC:27
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 0197B70F004B220C82CA54BA50BB7F51F4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 02D6
Signing time: Sat 28 Jun 2025 15:01:42 +0000
Manifest this update: Sat 28 Jun 2025 15:01:42 +0000
Manifest next update: Sun 29 Jun 2025 15:01:42 +0000
Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=)
2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: PgmarqPmGn1sKTcVmHZwzYX/MMDheJZnGKtZM4IBP2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:00:4b:22:0c:82:ca:54:ba:50:bb:7f:51:f4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Jun 28 15:01:42 2025 GMT
Not After : Jun 29 15:01:42 2025 GMT
Subject: CN=c30fb285f800b88130202672cfaa1cf5e05eac27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:df:ff:3c:bd:78:dd:59:cf:e3:31:62:26:
ac:c5:54:c9:47:62:c1:86:f9:88:db:75:4b:fd:fd:
2e:2e:d3:5c:3e:ad:a4:2d:96:10:14:e8:f2:19:55:
da:9b:ff:40:14:7c:90:19:40:6e:07:7d:dd:37:9d:
04:3a:60:18:49:dc:87:5f:c1:62:d9:75:49:13:02:
c3:4b:c8:1a:97:57:66:8c:9e:1a:3a:a1:ac:eb:b4:
b8:dc:45:36:13:c1:46:34:98:ad:4e:fc:c0:14:49:
58:13:c5:0c:c2:9d:9d:55:83:c9:44:fb:3c:aa:b9:
6e:d5:f3:bd:64:54:f5:ad:50:01:38:c0:25:30:5c:
5d:90:a5:2c:bc:96:9a:52:ec:6c:9a:65:79:0c:11:
c8:41:bd:bd:59:16:ac:d9:0a:02:fe:ac:1a:f0:2f:
1e:38:79:08:16:ff:79:27:82:2f:f0:9e:be:6f:49:
5b:73:02:31:c9:b0:1a:67:2f:11:80:f3:5b:fc:88:
91:5d:37:06:bb:8f:89:f8:fc:87:25:ab:e4:03:b6:
96:55:3d:42:1c:40:26:de:b6:5e:6e:89:3b:6e:4b:
3c:d7:ca:44:90:8f:0d:ec:65:30:b2:75:49:aa:71:
b2:b7:69:16:35:7d:73:2e:ab:f4:3d:4a:e4:24:92:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0F:B2:85:F8:00:B8:81:30:20:26:72:CF:AA:1C:F5:E0:5E:AC:27
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1e:3f:31:94:80:c6:01:05:f4:fd:56:4a:ae:db:c1:b3:d4:
aa:aa:d4:ad:c1:dc:fa:d2:7e:d8:8b:c9:8d:d6:69:26:8f:cd:
74:03:65:c7:64:71:8a:5e:18:16:de:a4:82:33:37:9b:54:af:
bb:00:b0:25:8b:fa:ef:87:a8:9d:31:ea:c2:d7:c1:8a:92:06:
ff:9c:7a:b9:c9:ae:ad:34:e9:5c:09:ee:33:e0:55:91:a4:1e:
93:ea:30:0c:f2:f6:45:20:8b:a0:43:65:a8:34:4a:9d:6d:90:
39:fc:51:89:f3:40:98:b6:bf:19:f3:be:59:30:5e:37:2f:ba:
a6:85:a8:e7:6e:bf:64:6c:dd:75:54:56:f2:e9:dd:ea:17:02:
c6:b8:ea:6e:3e:99:9c:30:02:4f:0d:62:64:d3:54:6e:da:63:
4b:58:d2:ed:e8:d6:fd:b8:d3:7a:96:85:05:2b:7f:36:60:85:
39:2a:52:19:95:1d:c8:8e:a2:3b:5d:5f:45:65:bf:12:c7:c4:
a1:bc:98:02:c1:e9:f9:a7:9b:a5:72:d6:a9:84:99:f3:22:01:
16:4f:55:da:6f:de:fd:a5:19:4c:20:5f:ba:9a:47:61:24:cb:
49:4e:ec:ec:17:b0:f9:09:85:ea:9c:e5:3e:00:49:a0:7a:13:
5f:ba:bb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:32 2025 by rpki-client