Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
File: z-DfghIUOCcckTwk_1D9O2LUDcY.mft (raw, json)
Hash identifier: tt0Ibtq4b+iNT2arwV2ZhXYayJSKPCbQLnOuql/3y9g=
Subject key identifier: 8E:F3:F1:7C:F6:CE:DF:19:41:FF:8B:0A:6D:A4:B4:A1:B5:7A:97:35
Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Certificate serial: 0197B8C5E0E2004D3A45C888399BEC76AB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
Manifest number: 05D5
Signing time: Sat 28 Jun 2025 23:01:05 +0000
Manifest this update: Sat 28 Jun 2025 23:01:05 +0000
Manifest next update: Sun 29 Jun 2025 23:01:05 +0000
Files and hashes: 1: dg19fPDPdlao_unFvCVYC9RvrNk.roa (hash: 1cfvjDRPYU7JD/YdM+FbsUT+iUhZddEmRAh2tZhtxpM=)
2: hjhGPiy3UFBr9ANkRCMDMmtPbyY.roa (hash: sqw0T+Zj9m/aPxSyQB0liPAB0Jl/klsDHqYei7sLIoY=)
3: mrfqZX09-GYD22YGA7OHI1KATR0.roa (hash: iAu2ErUzWfhvcM5+CamqqvdYTRwJsRA5N+3mtIKS/Kc=)
4: ovGP4arKXoonSAQIQ1WNcsWj-gQ.roa (hash: T9HKSRGXUzrIsVuq9KTvv/Pp6ahuWPC0kj3dMzK0+WE=)
5: z-DfghIUOCcckTwk_1D9O2LUDcY.crl (hash: Wcvg64CbeRxi1p1vUgG4PGln2a5uvZ4UfGEtC/9BeMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:e0:e2:00:4d:3a:45:c8:88:39:9b:ec:76:ab:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Validity
Not Before: Jun 28 23:01:05 2025 GMT
Not After : Jun 29 23:01:05 2025 GMT
Subject: CN=8ef3f17cf6cedf1941ff8b0a6da4b4a1b57a9735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:a4:3a:5f:7c:c9:8a:a1:90:81:9a:82:2a:
f2:e2:ee:11:69:cb:12:ed:76:91:17:4e:22:b5:8d:
88:8f:84:1b:f5:e5:7d:03:9a:6c:63:92:50:35:6f:
54:27:f3:0c:23:a9:64:45:4a:ed:c7:a1:6f:37:a4:
82:bb:bc:69:3b:7e:27:9b:9d:81:d4:4b:9a:13:56:
9d:2a:1c:e2:c1:b5:1e:20:5e:ca:f8:9d:28:a4:1d:
a2:78:f9:d7:75:46:45:00:85:b9:2e:86:1d:b3:ad:
0f:ce:45:cc:a3:a9:c4:05:c5:79:5e:97:c9:cc:2a:
e0:b9:99:56:26:11:eb:b1:50:0d:67:a0:7a:69:12:
41:02:97:1b:c1:22:52:d1:41:ad:f4:2a:fe:f0:05:
7a:34:dc:9f:50:f0:e0:0b:aa:6f:08:fa:6c:1e:ee:
51:fd:d4:4c:39:87:b0:c8:7e:c5:8c:a9:7c:e9:5a:
c0:59:54:ad:82:3a:ac:83:b6:4d:fb:70:ca:34:1c:
97:bf:cf:8e:3d:8f:1b:3a:c0:6a:49:90:07:9c:1d:
76:1f:b8:ad:dd:5a:04:36:3c:d4:cd:0c:3d:32:53:
ff:ba:63:4a:9d:9e:0b:8c:56:6d:83:3d:e2:6b:f9:
8c:32:54:9d:e0:54:fe:fc:42:17:5f:be:56:62:7b:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F3:F1:7C:F6:CE:DF:19:41:FF:8B:0A:6D:A4:B4:A1:B5:7A:97:35
X509v3 Authority Key Identifier:
keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:38:53:cb:f1:22:ba:5b:73:8c:cb:f4:ea:14:24:f7:d5:ae:
ba:71:c5:5f:68:9a:30:09:57:5a:a7:62:6e:0d:8f:75:6a:ae:
1b:dc:61:ca:e8:0b:1b:5e:08:ba:f8:33:86:4f:2f:f9:54:ec:
e9:f7:da:06:44:9e:77:ee:e5:f9:8b:09:49:fa:9a:4e:aa:8a:
e9:f8:95:08:be:9c:9d:78:43:7d:46:ce:2e:33:ca:ee:fc:ab:
af:ce:b4:45:0c:7a:5c:2c:a4:1b:18:66:5f:5e:69:7c:ef:bf:
ed:7f:30:ad:7f:65:67:27:75:df:0a:ff:3e:0b:8e:de:2a:98:
b0:e6:75:4b:2a:7c:3a:1c:b5:f1:dc:56:87:8c:60:60:7b:49:
19:b8:f9:c2:7a:6f:8e:68:8e:1b:eb:9e:33:a2:54:c0:83:6a:
1d:90:20:81:01:b2:e9:2a:f7:9b:81:67:27:71:ce:05:98:db:
e4:2b:48:7d:c3:53:6c:d3:3a:af:16:5b:3d:97:89:e4:cf:2c:
64:67:f4:db:34:77:87:56:a3:42:b3:8c:22:01:d4:cf:ef:c9:
3d:a1:b8:12:a3:c0:af:6a:b6:2d:d3:9e:a6:e7:7b:08:bf:60:
82:41:f5:39:28:10:ec:34:14:a8:f1:c4:6e:a4:ce:16:b6:04:
fb:c3:44:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:20:20 2025 by rpki-client