Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
File: _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json)
Hash identifier: G8vYYleubvKdsiM3wwYQmh4/hIVXUaj+nH1/8NXFvxs=
Subject key identifier: DF:98:5E:4E:CC:BC:91:C0:43:80:73:6A:CF:1A:92:C4:6F:2F:F0:FF
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 0197B88F0239FD48F858C555DA9C7ECD4867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
Manifest number: 03A7
Signing time: Sat 28 Jun 2025 22:01:09 +0000
Manifest this update: Sat 28 Jun 2025 22:01:09 +0000
Manifest next update: Sun 29 Jun 2025 22:01:09 +0000
Files and hashes: 1: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: Rb7tELblIuoZUkarnMXjlsULuBYGoFuplq55N3OJFL0=)
2: bFqAr18-DoQ6dVM9w_6gb9zQnTA.roa (hash: CuuNkCn7ATc07S7puEJg/6wk+lxa5wMurXD4UWOiLPU=)
3: dKsuZKXaanXrDp2my4AYexk9Tzc.roa (hash: GbpECMMk1COm9Jd/gQRnAzNikJJCMjIxgnDlDhbpPCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:02:39:fd:48:f8:58:c5:55:da:9c:7e:cd:48:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Jun 28 22:01:09 2025 GMT
Not After : Jun 29 22:01:09 2025 GMT
Subject: CN=df985e4eccbc91c04380736acf1a92c46f2ff0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:62:74:c4:39:2e:c2:36:b4:1e:41:c2:25:
38:b2:79:36:81:fc:4e:50:1e:72:e1:c9:e2:06:e5:
39:40:05:e2:82:c4:da:a6:c3:40:ef:6f:dd:ad:d8:
d8:ef:26:ea:0d:4c:1b:5f:02:06:3c:27:e9:7e:71:
e1:5c:a0:d6:9b:87:a1:28:71:1f:c8:9f:74:55:ca:
cb:2e:d3:90:70:5c:d7:55:1f:3d:5a:cb:db:a5:84:
50:25:9d:56:84:e8:66:f9:50:f7:17:3d:e0:e6:41:
3f:ec:ac:7c:5a:92:46:14:4a:9c:83:7f:67:7e:81:
28:b4:17:b3:98:af:79:70:30:2a:d4:92:42:f3:a7:
c4:1d:d2:2c:f7:6a:b8:5e:d8:e2:22:36:f8:b4:d5:
70:72:f8:c0:50:3a:02:95:5b:31:c6:f9:a6:24:1f:
5e:5f:3c:c6:41:57:75:d8:0d:7b:3b:45:d7:ea:3d:
0f:5e:85:bf:5b:6a:98:57:4a:47:8a:84:26:e6:e7:
13:70:21:ea:58:bd:c5:0f:d8:d7:72:be:87:1b:11:
4b:fe:30:35:39:56:01:b7:47:66:f3:31:c4:20:64:
a7:08:0a:fc:6e:bc:a4:78:db:d9:ed:af:07:6f:d0:
d5:e8:c4:a2:80:36:0c:99:90:cc:64:77:34:b3:8d:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:98:5E:4E:CC:BC:91:C0:43:80:73:6A:CF:1A:92:C4:6F:2F:F0:FF
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6f:77:7e:65:89:dd:6e:e6:a5:a7:ab:35:34:b1:d6:ec:0a:
7c:5e:fc:39:2b:a7:d8:c3:97:c5:19:4e:cb:07:75:d2:1e:ca:
43:6c:ce:c3:40:75:62:da:1e:9f:a7:2e:08:8f:8b:a1:55:45:
e0:a5:60:a3:f5:20:52:2c:97:91:75:7f:15:26:32:62:cb:3d:
12:ef:4a:86:97:1a:38:fc:6a:7d:be:fb:c4:73:b7:42:cd:ae:
be:b9:e1:f8:cd:ba:f4:59:55:32:1e:43:8f:05:98:fc:7d:61:
e6:36:85:5c:75:f7:64:32:1e:ef:41:d1:a8:2c:94:1a:e2:3d:
05:5b:8b:19:09:54:bc:70:c7:da:91:e5:59:36:bf:20:9b:c9:
d9:f3:0d:32:4a:e4:22:96:42:02:12:22:6f:c6:73:59:c5:76:
a1:24:57:f9:c3:32:0d:f1:0a:e4:fa:e1:ac:91:f6:70:16:f4:
51:2f:81:97:0a:44:46:cc:36:92:7f:d0:9b:a2:ba:e3:00:45:
06:b5:e4:12:1c:cc:c9:d8:7e:24:67:90:e8:3c:f6:2e:13:16:
f8:7f:b7:3d:e2:8b:33:c3:6c:4d:ac:9b:ce:3c:48:c0:bd:cc:
aa:69:cb:90:91:86:35:b7:3f:a5:2f:7e:94:f4:68:ec:0b:52:
9e:8e:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:20 2025 by rpki-client