Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File: zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier: 9dH/YH+ZKMAg+YJVKkgK/88UffHzU56jV75kuK7YdR8=
Subject key identifier: 90:6D:BD:FB:17:57:92:26:97:E6:2B:93:B7:10:A8:59:6E:5E:15:17
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer: /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial: 0197CE3AD2F095F72749564BE5BA8428599F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number: 15C1
Signing time: Thu 03 Jul 2025 03:00:50 +0000
Manifest this update: Thu 03 Jul 2025 03:00:50 +0000
Manifest next update: Fri 04 Jul 2025 03:00:50 +0000
Files and hashes: 1: aAOgx1Ep0O9ts33PDFAvITsVd3A.roa (hash: ztOFWm+dTJZa1671YtrvwaHCfWHjo8X63L1Exz6NaMI=)
2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: Z9EmDeyn+vB9AAOGctBdqd9RJ5yrm0RaTkYMNhawb7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3a:d2:f0:95:f7:27:49:56:4b:e5:ba:84:28:59:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Validity
Not Before: Jul 3 03:00:50 2025 GMT
Not After : Jul 4 03:00:50 2025 GMT
Subject: CN=906dbdfb1757922697e62b93b710a8596e5e1517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:d7:ab:aa:a1:5e:e4:e7:c2:26:f8:9c:a9:
6f:6d:1e:9e:8f:ff:1a:c6:c3:ab:9e:00:ee:c2:26:
91:6c:a7:e7:67:5c:a5:0b:3a:83:d1:36:e7:77:25:
60:31:a7:57:38:7c:ac:2e:81:3f:3f:60:ab:dd:88:
ba:be:4d:9e:03:1d:a4:29:37:d0:cf:68:17:f1:4c:
bd:cd:2d:f8:2a:bd:2f:7f:d5:14:09:57:96:10:8a:
5d:a1:bb:11:e1:22:39:0c:74:56:8e:c2:4e:42:b3:
40:e2:6f:61:1f:4a:5b:c4:1e:fb:8a:1b:7f:c1:9c:
dc:5c:32:e9:8a:6b:ed:a0:e3:11:ba:20:6c:e1:ad:
63:a3:8e:fe:df:f4:f4:5f:c8:db:1f:3f:87:7f:40:
c6:62:f3:7b:3d:a0:48:25:45:bd:c9:f1:91:8a:82:
29:be:f1:9c:7d:ff:b9:e7:8b:f3:eb:92:d8:48:12:
df:45:85:1a:cf:11:33:3f:23:b9:8b:5a:91:22:d6:
8f:7e:f4:ff:00:c4:70:ac:b2:bb:fa:36:8f:c2:61:
ec:ee:4d:94:5d:01:c2:f0:5c:da:0c:22:de:54:24:
84:5e:75:00:4b:d2:de:1b:66:06:19:4d:bc:37:fc:
42:a7:23:eb:f0:30:02:1b:09:de:ce:f8:54:3c:5b:
c1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6D:BD:FB:17:57:92:26:97:E6:2B:93:B7:10:A8:59:6E:5E:15:17
X509v3 Authority Key Identifier:
keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:86:fa:bb:ee:8e:73:f5:84:80:ef:0c:eb:4c:fd:44:02:e9:
0c:c8:b3:2d:20:f6:90:75:63:fa:9f:cd:75:ac:e6:16:c6:2a:
3c:f9:83:ff:6f:da:5d:b5:7c:a9:a1:54:27:c3:78:f1:37:01:
c6:a9:cc:da:a9:08:42:a7:97:82:6d:6d:18:e8:80:22:71:03:
7b:3f:3e:9b:86:52:6e:0f:e2:6f:35:72:18:39:45:5a:4a:54:
38:13:b3:d4:b3:38:20:78:c5:3c:03:ad:9b:d0:e0:09:ca:b7:
f8:63:82:bd:3d:75:6d:fd:19:55:fe:1c:97:47:76:9b:b1:b8:
d6:8a:15:c4:04:d0:d8:41:b1:1a:8d:c9:ee:06:e9:65:34:64:
15:88:f7:c4:be:0d:36:38:ff:2e:d3:3b:75:e1:2e:d1:24:c3:
d2:36:17:57:ce:0b:17:8e:9f:8c:3a:67:1e:a2:e1:f3:bc:31:
54:87:ec:20:61:62:ad:33:de:42:fb:ac:99:2c:a7:4f:cb:8d:
36:ea:ea:de:7c:04:5e:5f:33:0e:1c:ce:fd:e2:43:a7:d2:0d:
7c:12:ef:29:a0:a3:41:1d:00:01:a6:e5:7f:33:c3:29:e5:13:
3d:5c:a9:72:46:7f:56:2f:e9:a3:f5:85:cd:47:23:91:5b:b0:
3c:36:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:43:16 2025 by rpki-client