Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: vVW2dVHJffDhS0kWgBf5uVVrC284wN3Q4ve7yNbjvW0=
Subject key identifier: D0:AE:33:6B:1A:67:C8:7E:FB:9B:34:BC:99:3B:6E:00:D4:5C:63:91
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 0197B88EAC7D36F8FC0D17F8BDC0EA2F286B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 12D2
Signing time: Sat 28 Jun 2025 22:00:47 +0000
Manifest this update: Sat 28 Jun 2025 22:00:47 +0000
Manifest next update: Sun 29 Jun 2025 22:00:47 +0000
Files and hashes: 1: S0pNJSWXYYXq-25eb1GwpN3HQK0.roa (hash: m9B8zg7UBpImnvUAy09vDVUi2G4915DaZZi26V5t6xo=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: rPTM7EkzTrXADl2TYQ7/W/6INCRxruN7Pz+jbvWfRp4=)
3: bXUvwPEgFNH1kM9-zFhBBlN0jGo.roa (hash: 3Ie6IrqVMtZvkUhbCRibjgIELU/61w4y/T2SSNFuyr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:ac:7d:36:f8:fc:0d:17:f8:bd:c0:ea:2f:28:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Jun 28 22:00:47 2025 GMT
Not After : Jun 29 22:00:47 2025 GMT
Subject: CN=d0ae336b1a67c87efb9b34bc993b6e00d45c6391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:eb:3b:4e:56:12:60:99:99:a4:d2:63:05:
cc:5b:38:f1:bc:ea:bd:53:d0:64:83:3c:22:12:4c:
e6:96:aa:8c:12:1f:08:6c:e5:f6:98:6a:d5:54:c7:
0d:1b:fa:65:77:d6:48:5c:ad:c5:89:6d:6c:61:9e:
f4:28:4e:52:63:ba:5c:68:6b:bb:9e:fa:2d:0d:ff:
34:db:bc:f1:1d:99:14:ea:a5:8b:83:c9:be:b7:37:
05:ac:ed:26:cf:c3:4e:de:f2:c5:35:c6:8a:7f:2c:
09:09:f4:f2:eb:4a:d1:ae:2d:1b:bc:91:33:05:f3:
9a:8d:53:01:2b:4e:ea:04:d5:f2:d2:75:7f:a6:f9:
20:8d:67:40:ee:f6:a9:f6:4e:66:72:35:eb:4a:cb:
0f:e8:28:d8:14:b8:45:28:82:ab:d9:cf:ad:27:62:
c4:71:11:66:c9:16:a2:48:a6:35:cf:d4:34:d6:d2:
9f:ca:a3:83:c2:ea:75:e2:e5:6b:5f:4a:38:dc:00:
c9:c9:9c:8b:d7:3d:31:05:49:b7:d5:3a:45:f1:03:
27:56:70:e0:d2:bb:a1:1b:9b:cf:c3:15:21:99:71:
49:76:94:73:d7:a8:75:67:56:96:48:49:cc:5e:23:
04:f7:39:4d:df:3e:ce:b3:bd:28:f0:4b:f5:82:c8:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AE:33:6B:1A:67:C8:7E:FB:9B:34:BC:99:3B:6E:00:D4:5C:63:91
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3c:23:72:1e:50:4b:63:10:87:6a:0d:4d:6c:30:d8:6d:22:
a0:ef:a2:db:cc:67:3e:4f:c7:3d:9e:60:24:f0:6d:e3:ad:9c:
8f:5f:d1:a1:30:3a:5a:6c:e3:90:b6:40:f3:a7:5c:07:f0:52:
1a:6d:65:9e:51:e1:6a:0c:56:71:91:64:96:fc:fd:96:55:5d:
0f:91:87:02:66:cb:9f:ad:08:bd:20:b4:b8:ee:99:8e:8c:6b:
f6:ae:32:34:32:85:da:e4:d5:10:02:15:1c:ec:7e:eb:d3:8b:
ed:e2:5b:1b:4e:08:90:24:24:d2:af:d6:66:d0:d4:a2:f8:fd:
18:83:e9:61:99:6c:9d:40:71:55:85:db:8b:8d:e1:ad:d7:4b:
eb:6b:0e:c9:74:98:62:af:bd:7a:a3:eb:13:87:9c:80:bc:cf:
e4:86:e7:90:2e:ba:8d:31:63:75:f2:ff:8d:35:15:28:9d:af:
28:a5:bb:dd:28:cf:d1:86:db:24:e4:62:38:2a:6e:b8:4d:4f:
d3:e4:6c:d9:68:a8:28:d4:13:22:7c:d1:4d:5b:dd:dc:6d:c7:
fc:15:52:1d:9b:b5:3e:61:41:c7:11:ad:1d:10:54:2e:2c:88:
b6:b8:64:cd:f4:85:87:ba:7a:ff:75:a4:e1:9c:9e:d1:f7:e3:
65:36:63:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:15 2025 by rpki-client