Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
File: z58C29lyWVoxyr6rDNldcGqM3TE.mft (raw, json)
Hash identifier: PvEOEDgAJ1WerpsU6cllNjUqKAo5UPwdv/NkHVmxOZQ=
Subject key identifier: 89:57:40:DC:48:82:11:8A:AC:F0:70:07:36:EC:84:62:5A:C1:72:D8
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Certificate issuer: /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial: 0197B8FD425809E8F4DB29A22C80C6445DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 00:01:34 +0000
Manifest this update: Sun 29 Jun 2025 00:01:34 +0000
Manifest next update: Mon 30 Jun 2025 00:01:34 +0000
Files and hashes: 1: OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa (hash: zWfEvQNj+A4de5/9KNnrm0AaQsSkvDWrbOwMvnTm49M=)
2: z58C29lyWVoxyr6rDNldcGqM3TE.crl (hash: 26lb8+kVa2MNw40fCWXtY57NBzpX0m0XT/Rwv4l8Hzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:42:58:09:e8:f4:db:29:a2:2c:80:c6:44:5d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Validity
Not Before: Jun 29 00:01:34 2025 GMT
Not After : Jun 30 00:01:34 2025 GMT
Subject: CN=895740dc4882118aacf0700736ec84625ac172d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b2:03:c1:a9:f2:af:72:54:51:9f:1b:7b:66:
d9:27:83:bf:88:f4:55:37:4c:bf:af:45:cb:6d:8b:
5c:1f:ca:48:37:df:e0:6b:c4:e4:86:d9:7e:6f:cd:
c7:8b:ab:bc:b1:cf:2a:d3:13:86:99:d7:46:6e:2b:
30:31:4d:2a:35:d5:f6:de:6a:e8:ac:1e:11:35:22:
4e:d4:6f:28:fc:89:99:07:0d:04:81:37:8d:d2:c8:
49:bb:26:28:3e:cc:4a:1b:62:9e:a2:5f:81:a4:d7:
7f:2d:db:12:f9:9d:43:d2:f5:8a:0d:e7:71:ca:a0:
bd:09:e2:c0:48:4b:16:58:06:3d:44:04:89:c8:ea:
9e:e0:cd:91:da:91:79:17:f3:07:58:2f:89:8a:50:
72:50:ba:66:28:cd:39:5d:a4:cb:ca:d7:10:69:03:
31:8e:87:89:16:69:7a:8b:31:20:af:c0:f9:b4:25:
33:76:09:e8:59:08:60:58:aa:fc:ab:14:fe:d1:eb:
6d:d4:61:3f:3a:76:e7:0c:e1:80:0d:5f:69:80:dd:
46:cf:aa:94:47:90:9d:1c:17:05:e9:e5:5c:30:78:
ac:62:d1:eb:d2:2b:2b:fe:91:c2:e0:50:8c:a1:e4:
5f:ab:84:91:76:81:55:9f:ab:4e:85:96:19:30:8c:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:57:40:DC:48:82:11:8A:AC:F0:70:07:36:EC:84:62:5A:C1:72:D8
X509v3 Authority Key Identifier:
keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:09:1f:df:43:df:61:aa:e8:1b:f7:92:72:03:c6:fa:9c:1b:
4f:3c:42:69:87:d4:25:40:c6:00:eb:10:76:c6:88:64:66:78:
ce:47:2b:13:06:2f:89:94:3f:c1:fa:cc:ca:82:05:7f:a8:fe:
ef:fd:08:d7:df:54:ba:58:4c:73:25:8b:3e:3a:fe:89:a2:8c:
96:27:b8:ad:a2:b1:96:6f:b3:2f:a9:c1:5b:5f:21:ad:70:7b:
45:1d:66:6d:96:1f:be:7c:4c:18:79:1c:77:8b:8a:18:77:39:
e0:ae:90:4e:95:b8:0c:ee:5c:c9:e2:72:91:b3:4e:5e:bd:81:
da:71:6e:40:02:e6:90:eb:3c:ff:41:56:a3:55:6b:92:63:6f:
2c:f1:73:c3:14:0a:60:b4:48:da:a5:c6:f6:e2:3f:57:83:1e:
67:9d:67:08:9c:f5:1d:87:5e:54:b0:e7:29:1b:e6:2a:9e:d6:
1e:84:a6:aa:f6:fd:04:0e:c6:c6:f0:1a:b9:1f:b9:b6:2e:b5:
10:1e:6c:f4:8f:92:b3:78:2d:34:5d:3e:7b:bc:ab:68:eb:93:
90:1b:46:3b:e1:0a:68:f4:6b:04:d3:b4:18:44:f2:ce:0e:7f:
f4:d3:d6:bb:5e:e3:7d:b9:3c:3c:17:81:34:55:9b:5b:c0:df:
44:4c:4c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:11:48 2025 by rpki-client