Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft (raw, json)
Hash identifier: V/EWFyCcyHGe9pnUxwry/fmxmbdZjo1VD9FD9VoTozU=
Subject key identifier: 2F:D9:61:A4:C5:7E:02:B8:B3:92:E0:39:45:57:80:5D:8E:D4:92:77
Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d
Certificate serial: 0197B88F4F02E956E42D89376E2FEF4C0589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
Manifest number: 04CE
Signing time: Sat 28 Jun 2025 22:01:28 +0000
Manifest this update: Sat 28 Jun 2025 22:01:28 +0000
Manifest next update: Sun 29 Jun 2025 22:01:28 +0000
Files and hashes: 1: Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl (hash: wb1/j2fwTyXhf1hRvoTPp6klG3D7Bp4y47RO2lMuT/8=)
2: e9CofsvHtUd9nOdIWFYukSYHblY.roa (hash: bRaoXZzCxY/+WP3cSFPKma8SeEgItuQDnpy+HQsr3lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:4f:02:e9:56:e4:2d:89:37:6e:2f:ef:4c:05:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d
Validity
Not Before: Jun 28 22:01:28 2025 GMT
Not After : Jun 29 22:01:28 2025 GMT
Subject: CN=2fd961a4c57e02b8b392e0394557805d8ed49277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:2b:9f:5f:50:50:ab:18:ce:62:0a:5d:e5:
5a:2a:db:e7:93:d3:53:8a:7a:8c:b1:db:93:a9:e5:
b1:92:ce:e9:f0:7e:2f:60:17:d8:94:a5:0d:75:df:
55:fa:56:43:e0:c7:eb:f1:93:3a:39:48:33:c4:5a:
81:4a:1a:bf:59:52:7a:f4:40:7e:b1:b5:b6:fb:e5:
03:43:7b:73:fc:bb:b5:3d:c9:3c:f5:fb:3e:0f:9c:
d4:d9:77:b9:17:55:fb:df:86:03:a5:26:06:a2:e3:
71:a5:1a:89:12:3d:51:d7:4e:8b:c9:b9:5f:69:a2:
b4:4b:d6:8f:51:09:88:fa:09:c3:7f:21:4b:0b:20:
35:6f:64:3c:a7:78:ac:8b:5b:91:76:2c:fa:b1:f2:
b8:20:37:e6:21:3a:41:2d:bf:f4:73:93:82:3c:02:
b3:3b:41:69:38:57:1a:df:4a:e8:05:b7:c7:0b:a2:
76:3b:33:ec:9d:7a:0e:fe:b1:f0:68:ed:77:39:92:
3a:ca:ed:ab:8e:ab:b6:18:75:38:24:ed:93:97:fa:
61:42:e3:f8:a5:ab:4e:bb:b2:09:46:44:4b:81:e1:
b9:29:10:d0:28:8f:b4:87:8f:55:a1:16:a5:5c:85:
69:e2:ed:9a:1e:ba:5c:7a:81:a7:2d:7e:4e:67:6a:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D9:61:A4:C5:7E:02:B8:B3:92:E0:39:45:57:80:5D:8E:D4:92:77
X509v3 Authority Key Identifier:
keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ea:21:3b:ee:0f:a3:32:7a:98:3e:d2:35:08:cb:ae:93:8f:
74:22:e8:c3:97:2f:d6:80:a2:8e:ea:3d:16:47:87:b4:9a:42:
a9:08:01:2d:a3:d5:3b:8e:14:dd:28:c9:46:29:ce:2e:6d:61:
42:96:57:45:03:d9:31:00:d0:d6:52:80:b0:57:dc:04:cc:b0:
18:18:ae:69:af:af:0c:e4:5f:1a:bf:f9:2e:aa:fd:27:bc:82:
69:fc:c2:b3:87:3f:01:ce:37:37:01:b5:27:1d:9a:2b:0a:16:
d8:84:d0:80:6b:f1:b9:a2:65:25:aa:5a:4e:dc:28:72:a4:de:
19:35:f2:99:d6:a6:1c:52:ed:21:80:b0:dc:ce:13:4d:f8:ad:
18:56:4c:99:14:a0:e0:cd:99:65:12:4c:ae:7f:23:e5:3c:e9:
de:44:9a:87:b0:77:26:b9:66:cd:6c:64:69:ac:26:8f:3b:03:
4b:92:0c:0c:d3:0f:a6:8f:e9:ee:33:aa:1b:a6:60:db:01:7e:
9f:8f:c2:c3:28:2f:3a:0c:bc:3b:9d:61:ab:e7:ca:62:14:ce:
80:d1:a6:b1:15:d0:08:20:8a:c4:b3:77:57:b9:7c:23:9c:d1:
ae:c8:30:ac:83:81:82:4f:d2:32:9d:d2:a4:8d:47:02:b2:71:
17:01:34:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:05 2025 by rpki-client