Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
File: zVW0Jf7PefCeB0stbzphbHtoVwA.mft (raw, json)
Hash identifier: 2/1vDwv36ng0APCiRE62f+CJE7ZG269UslwfTYCp2NA=
Subject key identifier: E7:CB:3B:30:E4:68:28:1A:6D:BF:56:84:CC:4B:C1:73:0D:AE:D3:7C
Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
Certificate issuer: /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Certificate serial: 0197B77C665CA5650D1D6F1A517CD7C305C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
Manifest number: 12F3
Signing time: Sat 28 Jun 2025 17:01:12 +0000
Manifest this update: Sat 28 Jun 2025 17:01:12 +0000
Manifest next update: Sun 29 Jun 2025 17:01:12 +0000
Files and hashes: 1: EpL6n7YsTJUyCIMDB2XXj1UETF0.roa (hash: 0aITT3j5lY16SRph4DUvA4Lnw1Z/zDWpJihg1Nz305o=)
2: zVW0Jf7PefCeB0stbzphbHtoVwA.crl (hash: UzMhmLDm4mgg7Weo8YMxBELOZ0lD+p/1gtwjVxoD/9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:66:5c:a5:65:0d:1d:6f:1a:51:7c:d7:c3:05:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Validity
Not Before: Jun 28 17:01:12 2025 GMT
Not After : Jun 29 17:01:12 2025 GMT
Subject: CN=e7cb3b30e468281a6dbf5684cc4bc1730daed37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0a:7f:ed:89:a7:05:d4:66:b2:7f:80:e2:f0:
b6:f5:4e:8b:92:7e:2a:3c:40:50:06:23:de:5a:9e:
63:65:72:9b:c1:b6:76:05:ed:19:07:ff:3b:7d:db:
3c:7d:74:06:ee:57:78:d4:46:a9:36:00:e7:98:41:
7a:b5:18:a9:6c:e4:f2:b3:a7:ac:46:81:fe:25:4f:
60:d5:81:30:80:f2:1b:8b:81:d8:84:5e:7f:b8:68:
9f:f2:93:ee:57:e5:9c:41:35:ed:9b:d4:48:f9:93:
09:7b:00:e9:57:1a:c4:41:90:cd:1e:12:38:1f:c8:
a3:87:69:00:81:67:98:28:e6:4a:06:0a:9a:00:55:
ee:65:f7:e8:4a:e3:18:07:d7:e6:57:11:58:a9:de:
ce:66:0b:e7:0c:9f:76:70:40:e7:25:38:34:bf:0f:
50:4f:b7:cf:3b:eb:d6:81:2a:ab:10:5c:6f:00:f2:
12:1b:3a:5d:27:70:74:30:09:7b:4d:fc:dd:b2:6b:
88:12:75:91:0f:e3:e2:cf:6c:1e:39:2b:3c:0d:be:
cc:fd:fd:89:d7:dc:1d:47:fb:89:91:ff:7f:e5:46:
01:ca:64:80:a6:0a:39:20:d3:a9:1f:09:38:5b:82:
72:2d:d2:39:c8:46:01:b1:7a:a0:2d:93:cd:8c:11:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CB:3B:30:E4:68:28:1A:6D:BF:56:84:CC:4B:C1:73:0D:AE:D3:7C
X509v3 Authority Key Identifier:
keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b6:eb:3d:9d:60:b6:b0:0d:1f:b0:4b:5c:11:73:ba:77:17:
62:02:e8:2b:db:09:ed:00:ea:fd:34:f0:6d:56:db:c5:d0:85:
80:3c:31:63:d6:1f:15:52:70:cc:77:a2:01:be:7d:ac:87:d4:
69:1c:b7:d7:78:e1:c2:f2:93:50:31:87:b2:c9:11:db:13:b7:
57:8d:2f:5a:8e:dd:85:3b:a6:a4:c9:4d:85:5c:43:dc:f1:5f:
ec:eb:ae:18:2f:5a:6b:53:95:f2:11:55:97:5e:13:56:47:7b:
4a:44:fe:81:bf:2d:78:73:90:e9:73:60:b4:09:0f:f7:bd:3a:
a4:51:96:9a:92:40:49:69:db:04:8e:33:14:69:e9:14:ac:18:
9f:9c:db:37:a5:f0:8d:bf:9a:4b:ae:8c:e1:1b:a3:56:e3:6b:
13:3e:35:25:68:61:c7:be:21:2c:d1:72:ec:12:25:41:e9:38:
5d:40:06:4c:fe:b7:b1:29:83:02:34:67:1d:9b:0b:4e:55:06:
9c:17:57:0e:5f:12:07:a3:c3:44:d5:06:14:db:38:28:e9:45:
38:26:7c:c9:eb:fd:93:bf:57:29:2e:aa:06:ad:e1:4d:44:25:
c6:76:be:f0:7b:05:1b:55:c2:c9:5c:26:bb:22:d6:8d:a0:6d:
c5:08:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:30 2025 by rpki-client