Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
File: zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json)
Hash identifier: Wy1L0beVU25ZA4D4bl/2eRWHcuYWrYJQU7doKcLvq38=
Subject key identifier: 30:0E:1E:D6:83:A0:10:FD:99:82:2B:DE:1C:40:5D:2B:C6:DE:37:15
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial: 0197B88F7F1A3D730CCB135B137AD48DB3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
Manifest number: 0A7B
Signing time: Sat 28 Jun 2025 22:01:41 +0000
Manifest this update: Sat 28 Jun 2025 22:01:41 +0000
Manifest next update: Sun 29 Jun 2025 22:01:41 +0000
Files and hashes: 1: 6FMleRn7QE-uKMdEakcsOaCZ1ss.roa (hash: mcv6vhN3tb3ONM9bZ3O2URAWmhAYPv+UUje7yYCRo5U=)
2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: P49mdx4/AXTQjp3A4Fq5fVBJmZWtaHewQO7aTB6YVJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:7f:1a:3d:73:0c:cb:13:5b:13:7a:d4:8d:b3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Validity
Not Before: Jun 28 22:01:41 2025 GMT
Not After : Jun 29 22:01:41 2025 GMT
Subject: CN=300e1ed683a010fd99822bde1c405d2bc6de3715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:db:da:d6:c7:e6:d0:b4:b4:a6:9a:80:08:
74:4a:e8:a6:67:00:55:2d:2f:c9:2c:a9:a8:e8:bf:
aa:7b:a0:3f:3b:f1:cb:23:ec:ae:f5:8f:d3:58:3d:
50:f8:a9:28:fb:4d:e4:42:80:d4:69:6d:18:4f:1d:
5c:cb:ab:4c:5a:39:30:9e:a6:0c:35:e1:2d:43:f6:
e4:a9:f3:c2:31:36:0a:70:ee:29:94:1c:d4:a9:77:
97:a7:f9:e7:28:1f:10:d7:0b:24:e7:d6:13:93:2e:
94:5d:b6:2f:54:80:24:e8:27:18:08:99:01:ac:38:
6c:e7:e4:fb:0b:6a:59:4b:de:dc:c1:1f:e9:91:d4:
df:47:20:39:64:22:2f:a9:81:3f:79:5a:e7:40:05:
88:9b:cb:d0:3a:b6:9c:56:25:67:0e:26:58:6e:a2:
52:e1:b0:5d:5a:4b:8e:29:a3:b1:97:5f:36:b5:f3:
d6:85:b8:31:75:1c:81:f9:3c:d6:5f:36:18:29:b9:
ec:99:c4:7d:5e:04:b4:a4:18:ab:90:62:82:58:c0:
14:eb:b4:ca:15:cd:14:47:ed:c6:df:42:5f:61:2b:
47:a1:21:0a:83:ef:e9:93:c0:45:1f:25:c5:92:d8:
81:0f:82:4b:b3:00:c8:f4:53:39:bc:57:16:5b:85:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:1E:D6:83:A0:10:FD:99:82:2B:DE:1C:40:5D:2B:C6:DE:37:15
X509v3 Authority Key Identifier:
keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:39:f1:38:31:e4:5e:a5:91:7b:77:91:dd:fd:9f:6a:09:14:
ac:31:6c:c4:e1:d3:71:0a:a2:fe:c8:cc:fe:9e:fd:fd:61:df:
4a:20:88:94:d8:a2:5b:e8:38:a3:86:8e:6f:5a:8e:f4:6d:01:
bc:ee:f7:02:c6:8c:c1:3e:54:4d:98:62:4c:59:5c:5f:52:d4:
f5:52:da:0a:db:41:f2:e8:10:60:c6:87:7d:2a:41:97:ca:ba:
9b:88:bd:10:f3:27:73:42:5d:70:ae:95:a4:90:30:8c:04:cf:
f6:a5:eb:8b:da:37:28:07:f2:10:5b:ce:a9:cd:c2:52:7f:28:
e8:45:de:df:a2:52:2b:dc:a2:0a:bd:bf:a1:3e:ca:71:9b:88:
01:11:5d:c6:6c:e0:82:8f:10:32:6f:d7:eb:7e:5a:24:59:f1:
14:9f:ef:9c:9b:88:74:26:c8:f5:2d:5b:72:eb:a4:ad:1e:86:
e5:4e:08:0b:0d:ef:69:07:71:31:53:63:dc:2d:de:2f:9a:04:
86:67:95:11:95:fc:be:cf:d0:14:12:39:12:2e:c3:2e:4b:e3:
7f:a3:16:69:38:91:5d:9e:af:ba:d6:42:bb:51:c6:04:66:e3:
7e:00:1f:7a:e7:05:3a:71:06:9c:bb:84:fc:95:e1:48:86:33:
22:9d:cb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:12:06 2025 by rpki-client