Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: VdmUYskun309DdG3jVEApdGEm//8/DrOQ2YbO71cGyw=
Subject key identifier: 10:9B:19:74:2D:AC:D0:C1:83:0C:0B:C5:26:66:6F:16:35:E6:88:A3
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 0197B70EC8095C82F9FD8B3D803DD87C5D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:28 +0000
Manifest this update: Sat 28 Jun 2025 15:01:28 +0000
Manifest next update: Sun 29 Jun 2025 15:01:28 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: 2Kt+5vZ7j488ovfumQ8LHUsI6L8/6JMwJWnxMcgYlds=)
2: Tpjw3Nc3KI-z5sFPTugglehoVro.roa (hash: hQVvNBqIbdUFIzp+3WsVNIaxhLKQfbJlxs6hdH4n1Uk=)
3: diSC8nPgEABB-CJx_ksMgSsNles.roa (hash: P6nuoJWWHEaEC3HR83/5oy/90/lUhtiTHhAwuDUVMMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c8:09:5c:82:f9:fd:8b:3d:80:3d:d8:7c:5d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Jun 28 15:01:28 2025 GMT
Not After : Jun 29 15:01:28 2025 GMT
Subject: CN=109b19742dacd0c1830c0bc526666f1635e688a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:74:62:b1:43:10:37:a7:35:37:d6:f2:17:
3f:56:f2:28:7a:bc:6a:8b:f7:62:20:57:6d:bb:f6:
d1:6a:50:61:d7:52:82:18:0f:1e:1d:e1:5b:d1:29:
d0:8f:72:a6:76:91:69:ca:cb:23:0f:57:03:a0:e6:
db:6b:5a:a5:2e:42:0a:87:ad:55:10:ec:99:a2:ee:
6c:3c:47:5f:b5:dc:ec:8c:ac:7e:e9:15:19:ec:f5:
85:d2:99:81:49:ea:7d:46:30:1b:7a:49:9a:49:0a:
37:6d:77:66:13:78:99:64:93:72:e1:bc:04:42:10:
01:e1:93:d7:0d:94:62:95:5f:15:5c:04:90:97:b2:
d2:4a:a1:eb:9e:a4:df:57:1b:f1:ad:7f:54:4b:7e:
a3:b0:0b:fd:78:9e:79:07:0d:63:7f:aa:6a:f1:75:
5f:65:06:98:c8:f1:ee:70:4c:a6:b3:fc:a8:42:89:
ad:04:7c:7e:a0:04:dc:de:3e:46:c0:6a:9a:07:2c:
32:5c:87:d4:61:c7:70:4a:2b:4f:fa:11:cc:9a:2e:
ef:98:fa:49:4c:6c:05:d4:2d:b0:47:7c:95:22:9c:
0a:b4:11:21:3a:34:11:52:83:c6:49:06:a0:ba:c7:
30:99:b6:e8:a0:8b:11:b1:37:f1:fa:8e:0b:c6:96:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9B:19:74:2D:AC:D0:C1:83:0C:0B:C5:26:66:6F:16:35:E6:88:A3
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:72:9b:44:fb:ea:84:aa:db:a7:c0:dc:85:41:44:ea:14:4f:
71:55:1c:43:5f:2e:dc:77:f2:31:a5:6c:37:d0:6c:11:92:12:
dc:8e:43:4d:ce:19:e0:c9:da:af:5d:7b:14:b0:d9:c5:14:28:
9a:23:ba:6a:38:cc:ad:97:1e:46:48:1b:31:ba:10:33:cb:3c:
14:bc:77:2c:b8:49:4c:13:1b:58:c0:9d:e1:31:ae:7f:cf:90:
ca:1f:fb:00:0f:12:ae:8b:65:df:2f:82:18:52:fb:e6:f9:e5:
fd:d5:6a:92:8b:4d:a8:78:f4:f8:6a:a5:98:49:67:27:c6:19:
d0:2f:62:64:a8:0f:15:bd:37:69:4a:88:08:6b:98:ba:6b:69:
7a:a6:b7:28:7f:20:e9:14:e9:57:1c:78:e4:9a:5c:7b:cf:bc:
68:47:d4:53:f0:a3:d5:af:34:2b:94:f9:0d:61:1a:10:b7:79:
57:13:14:56:3b:4c:bd:b6:35:b1:90:a6:2d:b0:f7:c0:92:3e:
a7:bc:cc:ab:25:65:bf:0e:61:78:d3:c4:56:1e:df:87:53:4c:
cc:cf:7a:83:16:bd:e6:a8:55:20:7a:22:67:bb:d2:e3:e0:f8:
d5:92:55:fa:9b:5b:9e:9f:65:b6:cb:c2:42:9f:c5:e3:e7:05:
fb:37:f7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:57 2025 by rpki-client