Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
File: zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft (raw, json)
Hash identifier: Wdc+GNwxDZkcz4W42kKPAMkjidWKGXMS/CKczxkeSI8=
Subject key identifier: E9:97:14:8E:DF:D2:A9:17:6C:3B:18:15:A8:A5:03:3F:2C:A0:5B:08
Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
Certificate issuer: /CN=cc8df88054060df685bba9739123e8342d479e84
Certificate serial: 0197B8210404453CF61A03EED9664DDA055A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
Manifest number: 154F
Signing time: Sat 28 Jun 2025 20:01:00 +0000
Manifest this update: Sat 28 Jun 2025 20:01:00 +0000
Manifest next update: Sun 29 Jun 2025 20:01:00 +0000
Files and hashes: 1: Kyq8dvDQCWTM4SDI01T-WEma_xs.roa (hash: csmuD1qBTRKUBvLNGvxDwNNOARNFB8rqYka6vl5ZQvQ=)
2: zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl (hash: d7o6OoaUDIZyrStfWgaOdES2MJN/cWgv09cBIZG96ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:04:04:45:3c:f6:1a:03:ee:d9:66:4d:da:05:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc8df88054060df685bba9739123e8342d479e84
Validity
Not Before: Jun 28 20:01:00 2025 GMT
Not After : Jun 29 20:01:00 2025 GMT
Subject: CN=e997148edfd2a9176c3b1815a8a5033f2ca05b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:1b:ef:23:6d:dd:98:12:67:2a:07:5b:3d:
cf:46:c7:46:e4:7c:16:a0:91:ea:bd:38:07:ef:a9:
30:4e:af:03:6e:27:e4:7b:b7:e5:16:56:6e:1f:81:
55:c4:a6:ce:ee:67:be:7b:48:e4:0f:e2:f0:f5:62:
03:b3:36:e4:a5:7c:93:cd:89:a8:47:d7:be:77:8c:
03:aa:7d:eb:a7:88:17:ef:6e:19:e7:ca:4a:02:40:
7b:9b:82:8a:3a:07:88:d3:71:10:f2:47:7b:b9:95:
30:93:bd:73:45:c1:06:c6:32:4d:d5:f7:3b:a7:9b:
1f:4e:8b:e7:0a:88:6d:71:ca:db:12:13:ac:29:db:
46:14:87:90:3e:04:e8:b8:fa:54:46:2b:ed:83:80:
ab:d4:f4:1c:04:09:d2:00:91:46:ec:77:0a:1f:a0:
29:bc:4a:bc:5e:1a:78:d6:64:1f:29:02:41:35:02:
02:59:88:27:fc:26:2d:8d:73:e6:cd:6b:ff:af:be:
8a:92:9e:c3:59:94:60:4c:7a:af:42:d6:3b:9a:da:
76:ea:63:c4:c2:63:1a:7b:1e:03:2f:59:7e:11:e7:
9d:1e:63:8b:b4:db:49:3b:47:db:64:68:de:6d:b7:
83:64:65:c4:b8:74:ee:94:f3:55:d5:12:7a:b2:ff:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:97:14:8E:DF:D2:A9:17:6C:3B:18:15:A8:A5:03:3F:2C:A0:5B:08
X509v3 Authority Key Identifier:
keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:1a:9d:55:28:af:66:81:df:de:a4:5a:fc:de:3e:99:fb:88:
f4:1f:c4:20:01:fc:5d:09:15:a1:70:38:b0:53:a8:d3:c1:8d:
d6:c1:4e:d3:da:3e:3c:1e:d0:e8:b8:19:c3:ee:09:97:52:b2:
17:70:e6:70:c2:56:38:31:1a:8f:9a:14:c9:f1:86:9c:5e:49:
0e:d3:8d:48:d9:80:9d:36:c4:e6:af:c8:14:5e:f9:14:7c:0d:
23:c7:a5:90:e6:a8:53:46:12:1a:93:b0:9c:84:52:64:2d:e8:
a7:86:c8:7c:d5:0f:d5:16:81:d1:2b:fd:dd:92:b6:42:26:9a:
61:4a:86:78:22:fa:3e:07:c6:c9:41:bd:ec:7e:30:d5:ac:5e:
31:41:60:83:cf:58:03:9e:e1:b1:2b:47:9d:38:80:67:f0:b7:
08:d6:9c:a1:bb:8d:52:d3:5c:5c:02:22:a4:44:b1:38:89:f9:
e6:a5:35:9a:63:3a:c6:b0:da:4e:23:d6:75:bd:c9:fe:41:de:
42:b0:63:3a:7c:33:5c:2b:a8:58:c0:fa:30:63:28:18:d2:cc:
d6:23:5a:2a:6f:68:eb:d3:42:3e:0d:71:4d:c6:e5:b4:58:42:
db:17:3d:74:62:7c:6e:46:2a:ae:cc:d4:11:46:2e:3e:d3:2b:
d5:04:f9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:13:38 2025 by rpki-client