Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
File: zQkyvbYQhcdt1kXB5263ERdUe5M.mft (raw, json)
Hash identifier: QLy2sbwPdCrSxCV944UYw5p1hEJbbWF2AogvyqpRWx4=
Subject key identifier: C8:B0:0D:31:B3:B8:BA:D6:67:E2:2C:B2:6B:6C:D4:C1:32:5F:19:7E
Authority key identifier: CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
Certificate issuer: /CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Certificate serial: 0197B7B384B851BB0405E3CFC7C30DF5AD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
Manifest number: 0E15
Signing time: Sat 28 Jun 2025 18:01:24 +0000
Manifest this update: Sat 28 Jun 2025 18:01:24 +0000
Manifest next update: Sun 29 Jun 2025 18:01:24 +0000
Files and hashes: 1: 1QvSwwMrqLMtK3WgrE7-BjuJNZU.roa (hash: xHdOOR5x+I+BVkrKwEv1LdA4W3/XGAhIP6d+Tp6sbDA=)
2: zQkyvbYQhcdt1kXB5263ERdUe5M.crl (hash: d5q8Tf36vVximzWx89s6hMezFPY/+M5ZQpoTIaBIMwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:84:b8:51:bb:04:05:e3:cf:c7:c3:0d:f5:ad:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Validity
Not Before: Jun 28 18:01:24 2025 GMT
Not After : Jun 29 18:01:24 2025 GMT
Subject: CN=c8b00d31b3b8bad667e22cb26b6cd4c1325f197e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:2b:13:e2:3e:63:6f:d8:0e:d1:d4:3d:8f:
26:da:bc:2b:18:15:38:9a:46:b5:e4:9b:49:4b:5c:
5b:08:29:a8:e1:a0:17:66:05:73:c3:56:64:af:be:
57:21:b4:37:45:30:cc:95:51:d1:fd:61:49:9b:81:
22:a2:06:4a:b6:ec:0d:18:c0:e8:fb:bb:51:75:90:
a1:1e:a2:33:72:42:77:6b:ef:fc:92:4f:4f:53:14:
65:d2:f7:94:ea:d8:84:09:ff:8a:b3:91:3b:e2:22:
54:50:5c:a3:2d:21:91:17:0c:73:75:85:8d:db:ee:
6f:47:60:51:40:cd:53:e5:20:38:fc:71:aa:df:cf:
57:2f:8e:85:d0:d1:46:1c:54:8f:3a:c1:82:91:c9:
41:a7:d9:1d:23:d4:31:be:3c:95:cf:f4:47:08:65:
6c:a9:99:9e:09:82:5d:af:58:e0:8e:ae:37:29:bc:
c2:fe:92:68:9e:fe:e8:63:fd:6a:74:04:21:4d:b7:
1c:55:45:74:9c:0b:05:f7:e6:a4:78:a0:24:73:7e:
65:a5:cc:cc:a2:96:0f:7d:d0:57:36:61:e2:af:6f:
c9:f9:2b:25:7e:a9:17:f4:3d:f4:10:28:7e:09:29:
e4:60:2c:c3:fb:9f:dd:36:4b:66:d5:ae:a4:f8:c8:
20:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B0:0D:31:B3:B8:BA:D6:67:E2:2C:B2:6B:6C:D4:C1:32:5F:19:7E
X509v3 Authority Key Identifier:
keyid:CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:df:00:77:12:c7:fe:d2:f4:a4:f5:5f:84:36:20:7a:f2:5a:
86:df:7c:03:d9:b9:7a:56:94:d7:68:34:d6:f4:a0:02:1f:2f:
c4:65:42:3a:d7:44:95:a2:9d:56:8c:4f:7a:bd:db:10:83:4e:
9b:2b:2f:b5:90:fc:63:6c:54:c6:04:10:4a:74:38:28:3f:00:
d7:bf:63:51:ae:58:5a:e2:bc:29:6b:a7:c3:95:f4:1f:75:9d:
48:f3:6d:56:b7:02:7b:58:84:87:6d:0a:5c:3e:15:f9:61:a9:
5e:cb:18:ad:09:94:3a:64:db:52:72:5d:a6:ca:2c:d4:61:02:
90:19:0e:5d:38:c4:82:74:0f:5f:61:08:c1:aa:48:17:f2:bd:
a9:bb:39:f7:2a:da:43:f5:7a:df:4c:ac:f2:8e:8b:fe:8e:ff:
5c:b5:39:dd:a1:f1:8b:47:b2:6b:c8:df:79:00:ce:cd:55:dd:
5a:7f:44:57:33:7e:67:60:a2:50:b8:f7:78:20:e6:51:07:54:
08:1c:12:fe:51:5d:b1:f2:1d:65:67:5a:2c:45:0e:4d:ba:d1:
7b:4b:b8:15:20:63:74:90:54:58:2e:6e:33:0a:4e:96:59:80:
98:22:8a:49:4b:1c:26:b1:7e:d9:81:1a:1e:b4:24:24:01:9b:
a0:49:73:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:20 2025 by rpki-client