Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: dDXCw+GlI0u7lCtY6tXgiGMu0hIo6dTDsUqFxrqRVWE=
Subject key identifier: 30:A2:B2:FB:C3:6E:6F:C0:CF:FC:CA:29:1D:2D:07:CF:04:1E:9E:DB
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 0197CEA95FDFA0384F4693B157FFC5A7C675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0C5D
Signing time: Thu 03 Jul 2025 05:01:36 +0000
Manifest this update: Thu 03 Jul 2025 05:01:36 +0000
Manifest next update: Fri 04 Jul 2025 05:01:36 +0000
Files and hashes: 1: ENbIvSiky0xTTmpR2FVxu0--bgo.roa (hash: kRIWqam56yg8b60+kfVGTR0gSg2YZCsqJwpEULom/h0=)
2: nNWdjwr0xgGVJaCe_DYGorxBhkQ.roa (hash: SXK0O56Ci3eJ9gJYE9BhG0c41FN4Hi9wlYESeQNJAmY=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: RaAWOoakmtKeqH4XTdpUkopkN30OV5aryf/cnZoh7go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a9:5f:df:a0:38:4f:46:93:b1:57:ff:c5:a7:c6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Jul 3 05:01:36 2025 GMT
Not After : Jul 4 05:01:36 2025 GMT
Subject: CN=30a2b2fbc36e6fc0cffcca291d2d07cf041e9edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:99:5d:f7:14:4d:d0:83:19:b7:ef:10:95:
ba:c4:cb:71:1d:d8:2a:aa:5c:18:cf:9d:20:6d:88:
92:ee:0f:b6:ed:fc:0e:f4:2e:6b:38:04:92:23:2d:
96:d1:e5:94:27:15:4c:0c:a7:2c:0d:ea:97:68:ae:
11:47:70:a6:21:a5:27:ef:22:b5:22:e3:09:0c:eb:
b6:53:fa:60:e6:15:43:60:4c:28:fa:94:a4:f0:1a:
44:87:8b:18:08:57:66:68:64:89:10:f8:97:3b:ce:
37:fb:a1:43:f8:9a:a7:fb:60:94:5f:b0:cd:fc:b4:
83:21:07:c8:d8:25:f2:29:a5:17:c4:b0:4c:cb:20:
d1:90:30:2b:41:3d:49:66:70:26:2c:c4:40:aa:5a:
06:fe:51:85:65:c0:40:ac:53:fa:cc:c2:ba:f9:20:
fe:2a:67:a2:0b:e6:8e:9a:a2:44:5e:0a:b6:b5:98:
e7:7d:6f:cf:b2:fe:35:33:08:14:41:54:8d:83:d7:
2b:a2:40:ac:32:b8:7d:61:17:36:1b:21:85:79:af:
58:26:64:63:a8:63:a1:38:ca:c1:e6:c5:f3:61:0f:
2f:aa:d0:96:fa:9a:f2:06:58:c6:fe:fc:ee:17:76:
0f:ed:1a:e1:8b:5c:f8:4e:05:c9:eb:92:3e:4e:44:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A2:B2:FB:C3:6E:6F:C0:CF:FC:CA:29:1D:2D:07:CF:04:1E:9E:DB
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ad:45:71:bf:d2:0d:c1:b8:e7:2f:a1:9c:6b:f0:22:19:37:
1e:5d:f3:42:41:bb:b3:ad:b3:df:fb:23:a6:1b:5a:d2:1c:af:
bc:af:40:ed:4d:34:8b:7f:16:ba:c2:7a:c1:f9:06:fc:d1:4e:
51:1e:f8:4d:6c:c5:53:08:1e:f5:61:85:a4:12:cc:99:2d:fe:
44:c1:4a:fc:b9:72:de:d3:76:e9:c7:3d:d2:be:9c:07:39:1b:
df:2e:03:15:f7:6a:5c:7c:f7:69:93:5e:d5:01:5d:c8:e3:8d:
92:62:f1:62:20:45:3d:07:68:be:b2:e3:82:6a:83:99:f2:b1:
97:8c:fc:70:68:8c:ed:05:bf:df:9f:60:82:fc:e4:0d:b3:f6:
6c:04:23:d0:b5:09:7a:d5:15:9d:97:e5:82:25:4c:48:70:f6:
81:d1:f0:33:87:6b:b6:53:d0:40:c5:57:66:48:c8:9b:99:d7:
ae:ea:b4:76:06:0f:c0:d9:77:34:4c:2d:b6:0f:fd:1f:53:3b:
1d:2e:f3:7a:18:ee:d7:56:5a:5e:44:30:ff:4e:f6:56:14:f0:
b5:a6:86:fa:ee:9e:6c:51:ae:48:6e:c7:60:a0:54:01:3b:6c:
60:23:1e:f8:a0:6c:45:01:96:2c:81:df:f5:03:c4:f3:dc:f5:
a0:03:22:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:12:35 2025 by rpki-client