Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: cX/9E4w0bXPCAdBMPNNaPAL5UhMIfqTsB6FpxCSJGUo=
Subject key identifier: E5:C2:DC:EC:F5:EB:6E:1F:36:41:AE:A7:61:CC:2C:CD:A5:4B:C3:96
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 0197C68167B36E7297673C784B1A88B22651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 1264
Signing time: Tue 01 Jul 2025 15:00:58 +0000
Manifest this update: Tue 01 Jul 2025 15:00:58 +0000
Manifest next update: Wed 02 Jul 2025 15:00:58 +0000
Files and hashes: 1: GeqUCcFpQ21Ke1I_WIJvk2jePiQ.roa (hash: 26yR+VCk/Hf4BfoJU9xGk7UFdbLVpFDxyv4u/gu5wGA=)
2: wbMPRaPeBCBjr_X1gpDO7WwYRg0.roa (hash: GEEk7uH2XTiN16zpAji2ekHgUSjOP6/rQg31rkY0wKE=)
3: xG8mhMV87H4zrHIWKqzuRUqeQPg.roa (hash: urIMILztFQN60p/ZQRBKUgWXG4HvMI/s4ku0GaXCltA=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: ogUvA3Ab6aFzMZNiiGoQ7ZPIPVWWdsolTA8zN2l3p48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:67:b3:6e:72:97:67:3c:78:4b:1a:88:b2:26:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Jul 1 15:00:58 2025 GMT
Not After : Jul 2 15:00:58 2025 GMT
Subject: CN=e5c2dcecf5eb6e1f3641aea761cc2ccda54bc396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:bd:26:43:05:6c:37:33:dc:84:b2:94:da:
db:ec:92:ed:59:94:20:6b:94:3c:d1:7a:41:ac:35:
18:4e:00:d2:9a:a2:9f:7b:05:3f:6f:f8:bd:0d:ac:
b9:59:6b:ed:25:4a:c2:c5:6a:c3:49:73:8f:a7:84:
13:19:09:c2:77:de:31:ff:41:47:75:4b:a3:cb:a6:
f7:6d:c1:af:49:1b:d1:26:8b:e9:e0:38:b8:a2:9d:
93:04:7f:0c:4f:1b:f0:0c:a4:a8:1c:a1:a0:74:2c:
0f:4b:ae:a7:07:21:0f:cc:7b:12:5c:85:40:33:ba:
ba:01:32:65:86:0b:a3:97:a2:ff:be:ec:51:63:9e:
36:00:2e:57:99:d2:3b:a6:ce:cf:34:d0:05:26:12:
3d:30:40:14:09:4a:a9:73:75:db:4e:3d:fa:85:06:
70:64:8d:f9:d8:88:4a:fb:a4:85:01:3c:d3:ac:e0:
9a:6e:dd:08:ff:0d:28:86:b1:2f:4c:c5:ab:04:2b:
fc:16:04:3e:e9:f8:38:44:8c:da:61:1d:98:e2:f9:
dc:f7:d6:2b:7e:92:a8:5e:db:37:90:d4:0f:64:67:
85:aa:a1:94:32:c1:39:47:d7:f6:c0:24:f1:50:1e:
4e:4a:01:6d:6b:fc:82:eb:b3:6a:06:8f:c3:c3:6d:
5b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C2:DC:EC:F5:EB:6E:1F:36:41:AE:A7:61:CC:2C:CD:A5:4B:C3:96
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6a:70:7b:31:d0:93:46:10:b2:90:61:ca:5e:11:96:db:9f:
3f:03:9b:87:5f:c4:de:f2:d7:48:bd:cd:64:4a:f4:fb:48:96:
4d:27:7c:4a:e3:1e:6b:c4:d7:20:a3:cb:bb:e3:7a:55:a5:20:
15:b4:31:6c:7c:47:89:9a:4b:56:bc:84:3b:21:39:22:2e:ba:
18:9e:1c:6e:06:f8:33:4e:87:51:a5:3b:cf:6d:1c:1d:1b:38:
70:80:a7:e8:35:2e:a9:ee:c4:cf:ed:c9:01:a4:40:11:4a:56:
8b:82:cf:0f:63:16:e7:5c:ea:cc:33:eb:e6:59:eb:5c:0c:98:
40:49:37:59:8e:b7:0d:72:46:fb:f3:5a:39:22:a5:a7:e4:df:
49:19:ef:88:79:a2:d8:ce:fc:0f:37:2e:55:92:16:e8:31:1d:
83:5a:83:46:2e:14:e1:b7:a7:6a:fb:a5:ca:7e:03:27:2b:fd:
c1:fc:33:95:9e:6b:9c:07:86:7b:63:9f:54:bd:c4:b8:29:de:
e7:6a:85:a1:39:22:14:78:95:08:6e:05:d7:51:2b:a4:5d:4f:
90:6f:29:0c:86:9f:97:65:26:c3:f8:1b:7c:2c:73:92:f0:86:
e8:d2:13:26:e4:17:61:1e:ef:51:0c:b8:45:53:eb:c7:d3:e1:
00:07:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:54:25 2025 by rpki-client