Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File: 10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier: 62i8nvi9B+ygxmSM0shp0ZGRInBBipuMREvtgTKJXLQ=
Subject key identifier: 33:94:B5:A8:28:E1:47:1F:A0:0A:21:51:9D:7B:4B:97:9E:B9:BA:3A
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer: /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial: 0197B70EB2F2DA2C62385D319BA1A1AFCEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:23 +0000
Manifest this update: Sat 28 Jun 2025 15:01:23 +0000
Manifest next update: Sun 29 Jun 2025 15:01:23 +0000
Files and hashes: 1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: xJ+YdqXDPPo0shnkRLrbX4DJj47I+noGMBB6d9VWuJE=)
2: ukTm-wxzEJj-s_OEsyy8V9c_Wr4.roa (hash: fj9aOH6SJjD+OTCiFFLafnYvA1jJNlZv9daAJcHZMJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b2:f2:da:2c:62:38:5d:31:9b:a1:a1:af:ce:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Validity
Not Before: Jun 28 15:01:23 2025 GMT
Not After : Jun 29 15:01:23 2025 GMT
Subject: CN=3394b5a828e1471fa00a21519d7b4b979eb9ba3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:fd:9f:91:ab:1a:5b:22:5e:9b:59:09:02:
56:26:81:47:3a:dd:32:37:14:68:34:2a:ab:f0:e3:
75:85:86:34:f7:d3:62:b8:b6:5c:73:c4:45:7e:bf:
6a:96:cf:de:4e:cd:e1:47:29:0d:48:15:2d:5f:98:
5f:43:15:44:61:9b:99:01:a4:9c:d9:b4:ab:be:61:
ff:92:75:1c:19:b2:1e:bd:8c:a9:9d:ea:68:c8:bc:
42:5e:4b:6b:49:06:f4:4f:f3:54:f5:14:62:eb:df:
6f:69:fa:76:88:58:04:63:b2:4f:9a:d3:70:a1:84:
ce:32:89:49:19:03:76:d6:52:fb:51:dd:f3:62:b3:
49:cf:8a:08:2b:b9:2e:96:df:12:a4:0d:36:09:f7:
3b:ec:7c:41:c3:c6:ac:af:cb:66:8f:3d:9a:83:76:
dd:c7:d9:87:9c:6d:5d:08:cb:da:63:5c:b9:f4:cc:
d5:1b:98:5e:59:72:6a:e7:fa:7d:6b:47:72:ff:2c:
c5:f2:0c:c8:67:ed:51:11:63:3a:1d:7f:e5:a9:16:
f1:9d:04:d6:4e:e0:e0:6f:2b:58:f2:d4:22:2f:d5:
c3:3d:2b:a2:bf:e0:44:5d:da:5e:40:1e:53:56:5e:
07:ba:01:e3:8b:34:cf:5c:01:cc:95:56:8a:80:54:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:94:B5:A8:28:E1:47:1F:A0:0A:21:51:9D:7B:4B:97:9E:B9:BA:3A
X509v3 Authority Key Identifier:
keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:98:ce:ac:b9:11:b3:66:00:43:59:58:9d:dc:0d:ec:af:79:
4b:8a:b1:11:9e:6e:07:ec:a2:b9:fd:24:7f:fd:0b:13:4a:bc:
d9:9d:8b:c3:ae:52:10:20:14:0d:1c:0a:e1:80:d5:13:63:5d:
24:ca:2d:26:65:37:dd:00:5c:fc:2f:87:d9:8e:07:94:12:83:
ef:78:1a:2b:d9:83:51:7e:6c:1a:9a:0f:72:dc:8a:30:9e:bb:
94:12:ad:25:4d:06:69:54:eb:fe:b8:a0:da:23:fd:bd:c8:26:
47:e0:54:69:65:50:2d:04:e6:5a:7f:6c:17:b9:c8:5c:31:51:
b3:6d:60:02:85:e0:e3:dd:aa:2b:5e:4c:54:9c:f2:ae:62:a7:
2f:3a:d1:0f:70:c8:b1:a4:d6:9c:86:ac:5c:5d:5f:4b:ea:c5:
69:e7:fe:86:72:ef:b9:68:a1:06:d3:ba:cd:e5:f5:48:fe:96:
37:b9:45:62:48:6b:a1:b5:f7:0a:f1:9e:48:a8:dd:47:1d:85:
08:65:ed:8b:06:b5:11:b0:83:5d:56:b9:ac:7b:88:f1:9f:98:
34:88:11:ce:ea:63:8a:af:9b:79:c7:39:37:a0:b3:55:55:26:
ab:98:52:8c:36:82:55:df:05:0f:e6:88:2a:61:37:d1:6e:27:
dc:be:70:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:15 2025 by rpki-client