Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: J1P5W67cZeU+1IDL73fvvbSMOoTb+t/lr+YpnwMu1Cg=
Subject key identifier: 83:B2:41:EC:0D:96:77:42:4B:34:42:F9:DF:BB:5E:77:24:0C:38:2B
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 0197CA956071A554D61B1B0381DDED2E504F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 0E69
Signing time: Wed 02 Jul 2025 10:01:16 +0000
Manifest this update: Wed 02 Jul 2025 10:01:16 +0000
Manifest next update: Thu 03 Jul 2025 10:01:16 +0000
Files and hashes: 1: KV7R1N_V77pOGNFqnvFI6VhE9Go.roa (hash: ih2S77Xnd5LfWtkG7w1ATz4hnQOa5DPl2XBfQ5D61xc=)
2: YoriHP_16arPHdOvDoMYO04hQkM.roa (hash: /lTd6A0sIeKscoeYGd/TO3yXs/PZBXapXa0ik8V7+LM=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: gAogRSMrA3l9CLHAMivpGc3D5YgJEZY9e1Bv8oYxvv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:60:71:a5:54:d6:1b:1b:03:81:dd:ed:2e:50:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Jul 2 10:01:16 2025 GMT
Not After : Jul 3 10:01:16 2025 GMT
Subject: CN=83b241ec0d9677424b3442f9dfbb5e77240c382b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:ac:1c:22:32:82:83:d0:2b:f3:0f:c5:89:
06:8e:ec:a7:51:ba:25:36:4c:52:a1:c3:b7:d2:bd:
a4:15:ea:29:97:15:d8:8a:9a:5e:65:65:74:75:d6:
96:8f:dc:84:16:3f:3d:c8:9f:ef:a4:f1:de:ef:ca:
b1:2f:b1:aa:2b:bc:15:7c:56:ab:e1:34:ea:60:c6:
d2:59:71:b9:d8:3d:7a:bf:16:35:a4:7c:ee:06:83:
00:31:6c:20:67:50:59:92:c6:b0:7b:e6:fa:c2:05:
ac:c0:ef:a1:e2:8a:a3:13:7f:a7:3e:d3:fb:d3:d7:
f2:ed:f4:eb:9d:a1:cc:66:d7:2d:33:58:de:ea:88:
ab:99:e3:a7:cc:83:19:09:9a:c5:66:60:3e:89:3b:
dc:ba:a3:bc:46:3d:32:00:3c:b2:4c:0c:c6:9a:e5:
8c:ee:4b:0a:10:10:19:72:21:47:32:f9:89:49:35:
8f:d4:06:96:90:4a:5b:c2:50:77:16:06:89:a5:3b:
c3:bb:23:8a:2e:e8:61:fd:1c:80:30:fd:82:df:03:
be:33:82:5e:14:4a:de:ba:07:13:8e:9a:6d:e5:4c:
d1:93:cb:b6:0e:42:d9:70:dd:c3:9c:51:e4:ee:04:
0c:6a:18:ed:d0:bb:09:47:8b:01:46:03:48:58:0c:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B2:41:EC:0D:96:77:42:4B:34:42:F9:DF:BB:5E:77:24:0C:38:2B
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:46:6d:cd:8b:7f:31:5d:77:f3:0a:bf:06:07:6a:7a:ac:14:
fc:98:4d:bb:73:fb:e0:68:1c:db:e8:de:ad:15:74:4f:cb:28:
5b:fe:68:ba:1f:f0:71:dd:0e:70:0d:02:00:c2:1d:05:d7:1a:
e7:fe:fd:00:d8:36:77:13:73:d1:df:5c:7b:0c:9b:9b:87:bc:
a3:46:a2:89:64:44:69:2f:f1:f5:2c:af:06:f5:bb:95:b6:f8:
6e:66:ba:79:79:ef:c1:03:1e:89:cc:80:d6:49:c4:e9:ba:68:
43:1d:c5:e3:d4:b4:58:0b:8e:34:73:b8:e0:f8:e6:84:7f:f7:
fb:c4:2e:a6:06:44:92:91:6b:46:fb:b8:75:53:03:43:e7:06:
47:1d:85:ce:91:9e:cd:9b:f7:24:bb:f3:e1:18:d8:2b:d7:b8:
b4:b4:0b:e5:9b:b8:ac:2f:ed:22:6e:9c:12:5a:a0:99:a5:63:
f6:0b:66:6b:28:7b:14:79:61:9f:6b:f2:d6:67:ad:36:9e:d1:
33:66:5b:dd:f2:ab:0e:8b:c7:bc:70:32:33:b1:db:69:c6:f9:
34:26:45:b4:10:a2:89:19:31:c7:eb:bc:68:fa:a8:49:b9:58:
7a:d1:d7:f4:c7:af:78:49:25:8d:0b:34:17:2e:6c:5d:b1:5b:
dc:69:3e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:07:01 2025 by rpki-client