Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
File: RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json)
Hash identifier: 3agIdi6qk3WzbgTzmLRkNsR5ynpjKEKK0ukVduP8hoY=
Subject key identifier: D6:83:EA:67:C9:EC:EC:7D:77:15:F7:47:8F:1F:45:2B:D0:DC:AC:F0
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial: 0197B8906CCA86547CCC9C0C6B0FB65E5389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:02:42 +0000
Manifest this update: Sat 28 Jun 2025 22:02:42 +0000
Manifest next update: Sun 29 Jun 2025 22:02:42 +0000
Files and hashes: 1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: o4JwPaLFoHL1UQ54lnx0fKawW7S5kMrNweNiYpm+wSM=)
2: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (hash: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:6c:ca:86:54:7c:cc:9c:0c:6b:0f:b6:5e:53:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Validity
Not Before: Jun 28 22:02:42 2025 GMT
Not After : Jun 29 22:02:42 2025 GMT
Subject: CN=d683ea67c9ecec7d7715f7478f1f452bd0dcacf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:c6:93:f4:dd:fc:2e:c5:fe:d0:da:9c:21:
9e:ed:52:4a:11:58:66:24:f8:28:2a:e3:75:4a:b0:
bd:65:58:9b:bc:ee:c5:9a:4f:65:a0:13:d8:00:5e:
87:b0:84:94:54:72:89:57:a2:5c:f2:03:8b:c8:d5:
e2:ce:ae:b9:f8:5b:a7:ea:8b:59:e9:82:2f:b1:88:
a0:bf:df:72:71:8e:56:b0:0b:13:0c:0e:0e:12:91:
8c:a0:03:39:a2:3f:2e:f3:da:ca:f3:26:79:bf:47:
d4:55:c0:50:bd:44:ca:06:8c:7f:4a:4a:0f:34:5a:
db:61:35:4c:fc:3f:b0:c5:d9:2b:b4:38:c2:13:cf:
a0:a5:93:45:0d:b2:eb:43:89:d8:1b:1a:e9:ba:29:
0b:06:2d:d1:0f:f0:be:ec:7b:4a:9c:23:7c:21:90:
2b:44:3f:9f:b1:cc:da:7d:fc:c4:d9:1d:65:d2:45:
ca:93:fc:5b:49:e2:b9:60:ee:7d:dc:6c:c6:4d:f7:
97:aa:65:21:34:b3:33:aa:92:c3:92:f5:bc:27:e9:
f1:6d:ba:73:84:42:cc:46:8a:97:09:5f:f9:39:a0:
a8:d6:27:4a:97:f5:4c:00:3b:4f:78:6d:0b:54:bb:
60:6f:84:48:c9:ad:b1:50:a2:61:e0:aa:04:dd:b4:
a4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:83:EA:67:C9:EC:EC:7D:77:15:F7:47:8F:1F:45:2B:D0:DC:AC:F0
X509v3 Authority Key Identifier:
keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fe:2a:9f:be:20:62:6b:00:20:30:00:02:af:cc:ed:f3:f2:
77:b5:13:e8:50:c5:40:20:f3:82:fa:1e:f3:75:2f:03:b6:70:
63:56:e7:4f:5a:ad:57:c8:85:b2:56:da:23:32:ed:07:ba:6b:
2b:0e:64:41:60:42:76:f1:a9:48:68:91:87:97:43:12:76:35:
ee:2c:5a:6f:64:28:b1:03:ed:7a:44:8a:ff:e8:cf:2d:01:e1:
86:5f:27:8d:ac:cf:44:b0:10:c0:70:56:ac:bf:4a:e4:c1:95:
bb:35:85:4c:c6:e5:35:ba:ba:e5:65:38:7b:64:96:e8:41:5f:
63:0f:f3:09:fd:e4:9f:33:24:74:f7:31:c0:d1:80:c9:1f:c1:
50:a1:a3:82:37:6e:15:37:24:38:97:96:97:7f:af:13:89:3c:
b9:0a:01:4b:bb:ce:06:d2:44:cf:f2:89:c6:f0:49:76:5f:19:
f2:08:73:49:ba:88:56:98:38:e8:c5:da:10:39:71:ab:5a:cf:
15:bc:11:5b:31:d5:97:8c:48:78:ec:f9:22:89:6f:6f:3a:8d:
70:47:89:48:2c:86:bf:51:25:d5:1d:40:d2:e6:d8:f8:0b:1c:
8f:fd:9e:09:13:19:03:eb:67:2c:bf:f8:7b:54:68:fb:f7:8c:
9e:83:6a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:50 2025 by rpki-client