Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier: uIsD7DY3UPjP53Nikmp2PP90ZzXHY6HGl6NmB4vk6ew=
Subject key identifier: F1:97:14:30:19:1E:14:06:7D:8A:E6:B3:4C:1D:91:6C:CE:DC:21:23
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 0197B88F6A3327F3B4284645208F040E32AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number: 10C1
Signing time: Sat 28 Jun 2025 22:01:35 +0000
Manifest this update: Sat 28 Jun 2025 22:01:35 +0000
Manifest next update: Sun 29 Jun 2025 22:01:35 +0000
Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: iMLhYfWWsM6X1N3lPk1jhzjsedaWfPA8RiJqlP1kB20=)
2: ZIWXo67jPvL3hLYa3gap-960Rno.roa (hash: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:6a:33:27:f3:b4:28:46:45:20:8f:04:0e:32:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Jun 28 22:01:35 2025 GMT
Not After : Jun 29 22:01:35 2025 GMT
Subject: CN=f1971430191e14067d8ae6b34c1d916ccedc2123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:3c:46:ec:50:82:0b:e1:f4:2b:74:5e:07:
13:b8:83:c0:6c:ba:b0:dc:b1:21:99:62:fd:e6:6b:
b8:83:75:c5:ce:35:1a:01:71:c8:e1:4b:72:a2:37:
5d:9b:f9:dd:1d:0c:2e:00:91:e2:12:55:58:77:fc:
b7:86:31:f1:57:d2:e5:71:40:da:db:32:93:02:a0:
ab:b1:85:c7:9b:b0:eb:e2:aa:17:12:e3:c6:40:6d:
14:ba:c0:93:ee:0f:e5:b0:36:fb:6a:3d:2d:8d:c4:
72:a5:34:29:cb:30:bf:e0:51:5c:d3:df:7a:f6:2b:
b9:fb:d7:15:2a:bc:a1:4c:30:ae:d8:ab:b0:8d:0c:
95:c8:b9:d2:e9:4b:27:91:58:3e:9f:90:a7:85:6f:
1a:65:df:9c:e1:cb:f9:7e:ef:bf:c9:18:29:70:0d:
6f:dd:da:da:9e:79:ef:4b:02:fd:9e:f2:81:02:6f:
8b:2e:24:10:39:c6:65:1e:b2:b4:f0:3f:e6:83:94:
75:51:ee:53:d9:4d:5a:93:94:eb:71:ba:c0:6c:42:
60:9b:e9:15:6e:cc:8a:8d:ef:a3:c3:e2:7b:e0:d0:
8b:8d:77:56:1d:94:2d:93:97:f3:14:ba:d7:b0:bc:
3b:9b:dc:34:b1:03:3a:36:86:41:a4:69:55:93:e1:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:97:14:30:19:1E:14:06:7D:8A:E6:B3:4C:1D:91:6C:CE:DC:21:23
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c7:f9:26:89:a3:ee:bf:64:92:0d:f1:59:42:b5:5b:9c:f8:
d3:d9:22:12:84:53:87:ba:43:59:e4:0f:a1:54:df:5b:53:23:
c6:a4:5c:2b:a5:41:0d:c9:c4:0d:40:c5:4f:66:21:09:af:d4:
23:a2:a9:37:49:02:9f:c5:8a:b4:6e:26:e3:4d:48:e8:a5:98:
e3:66:6d:06:98:44:1b:dc:78:54:cb:72:10:c4:38:bc:05:f1:
da:f4:7b:0d:b3:ef:14:14:a6:02:b7:7e:d3:6e:fc:61:c2:c8:
47:50:01:83:f6:30:a2:36:18:f2:38:b5:a7:e9:ab:fc:7c:70:
9d:10:9c:b3:2d:bf:ff:73:f1:bd:35:75:36:2b:3b:37:31:22:
2f:93:74:a1:08:a3:1f:f0:d6:35:5e:db:a7:72:52:05:3a:ac:
5c:2a:09:04:a2:68:86:f3:f9:28:81:0e:4b:75:6a:d4:2e:94:
cd:69:22:68:d1:19:c6:28:6c:ad:cb:b3:ec:15:5f:28:80:12:
a8:03:33:da:45:04:64:34:10:ab:d5:af:06:2f:d6:46:ac:bc:
f5:63:a9:b0:99:14:53:f9:4e:2b:62:60:f7:83:6b:e7:fa:ba:
b5:ee:81:7f:4b:e2:90:12:d8:f3:a6:15:6b:1d:34:6a:80:e3:
8d:aa:3c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:34:08 2025 by rpki-client