Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
File: Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft (raw, json)
Hash identifier: ySl5Xh8VMtPCkg/m5t5T7i/ehStt4qpmHV3XTxD1ZBs=
Subject key identifier: 2B:31:59:9C:DC:6E:6C:CA:23:EF:0C:00:2F:79:BC:39:FA:78:C3:9D
Authority key identifier: 67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
Certificate issuer: /CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Certificate serial: 0197B6D73DB08404EBCBC4DB57BCEDC38D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
Manifest number: 122C
Signing time: Sat 28 Jun 2025 14:00:48 +0000
Manifest this update: Sat 28 Jun 2025 14:00:48 +0000
Manifest next update: Sun 29 Jun 2025 14:00:48 +0000
Files and hashes: 1: R2hIzPH7WznpzB3A9VGA94-nqD4.roa (hash: kT7LJSBIR26R77fVHHIPqJYdfVy6esu3U3f7NvLKrOU=)
2: Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl (hash: CGglBaHGX/M7u38wisgfZoY5gdYmOduZF3z93hnGyN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:3d:b0:84:04:eb:cb:c4:db:57:bc:ed:c3:8d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Validity
Not Before: Jun 28 14:00:48 2025 GMT
Not After : Jun 29 14:00:48 2025 GMT
Subject: CN=2b31599cdc6e6cca23ef0c002f79bc39fa78c39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:ed:ef:1f:b5:f7:7d:90:a5:d6:45:62:3e:
9b:fc:de:b4:fa:ae:1f:67:60:91:ca:65:9f:b9:7d:
8f:bd:a5:d8:cb:71:6b:1e:c4:5a:19:bd:ff:2d:1c:
bb:a2:21:e5:20:ab:5b:35:cd:d2:22:58:54:2a:f8:
26:cc:f7:c3:96:ed:dc:b8:ff:11:72:4e:90:a0:8c:
81:8d:ab:0a:58:05:2d:25:69:b2:da:b4:eb:03:70:
82:5b:1f:04:d2:9f:88:1c:53:56:3f:d2:91:0e:68:
7d:55:2d:4d:32:54:01:13:14:1d:dd:c1:c9:53:52:
16:1e:cd:2e:b6:1d:07:b3:20:64:50:b4:11:9d:89:
16:1a:1a:22:0f:a6:b4:ad:4f:40:39:5f:0f:27:1b:
89:11:3b:0a:94:2c:05:81:d3:5c:c9:95:29:27:63:
06:c4:36:e1:8b:5a:7f:b9:c7:b4:d7:3d:da:cd:1c:
4e:88:e5:b5:50:f6:26:95:0b:c0:bd:23:66:c2:cc:
f1:d0:53:6f:6d:96:90:01:75:0e:64:94:8e:6c:c1:
71:f7:39:55:c7:54:ae:11:19:fd:2c:6c:e5:c4:ef:
5d:8c:b8:5f:cd:65:86:82:d4:6c:c6:10:e5:7a:a9:
7c:55:1b:f3:f4:ec:a7:e3:ac:66:f8:e5:37:1b:2f:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:31:59:9C:DC:6E:6C:CA:23:EF:0C:00:2F:79:BC:39:FA:78:C3:9D
X509v3 Authority Key Identifier:
keyid:67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:88:1b:25:ed:f2:e1:6e:61:99:27:44:a9:2d:07:f0:65:f7:
d1:40:64:c1:f0:aa:74:b9:15:2a:c5:f8:18:16:a4:47:4a:44:
b0:9f:f0:26:c9:bd:94:e9:2e:0c:38:34:7d:18:0e:67:cc:5a:
a6:df:de:b9:a6:e0:81:36:fc:9d:bd:6d:bd:92:1c:ea:3a:ce:
0f:3b:ac:f6:a2:10:6c:f7:f5:60:29:77:1f:4d:5e:73:79:59:
2a:77:be:26:54:ad:64:47:81:c3:41:b9:90:43:1d:41:12:e0:
27:03:fc:f6:02:3e:9a:fc:55:78:0f:3c:2c:47:e3:2b:47:4b:
8c:3e:8d:37:2e:c6:e9:65:bc:73:10:eb:f4:88:fe:44:16:76:
08:cd:9e:11:5e:6e:1c:66:70:9a:4e:39:2a:85:c6:91:c6:34:
3d:d2:52:ca:50:a5:3d:41:41:43:f6:d1:2f:d3:7e:bc:42:17:
08:4d:cd:4e:2a:29:1f:63:54:2f:71:4f:a8:33:f2:2b:ce:ae:
7a:51:84:e5:8d:d5:c4:43:9b:92:05:ce:8a:9b:23:be:8a:07:
3a:14:6e:74:da:b7:c6:0c:96:c2:c8:72:9d:48:67:35:1f:5e:
a2:68:8c:81:3f:11:df:06:03:bc:ed:c6:6a:5a:97:e0:66:70:
ce:6f:50:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:28 2025 by rpki-client