Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json)
Hash identifier: hhsxviz7UFmxRGGFzcZEVp5aCIW0Sbz88KYKsaBpe4c=
Subject key identifier: AB:11:D5:F2:DA:59:45:6F:C1:50:BA:FA:9A:61:2F:E3:E9:7D:16:72
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 0197B6A1C94365EE957B2BFFFF6C78B7CEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
Manifest number: 0ABC
Signing time: Sat 28 Jun 2025 13:02:25 +0000
Manifest this update: Sat 28 Jun 2025 13:02:25 +0000
Manifest next update: Sun 29 Jun 2025 13:02:25 +0000
Files and hashes: 1: j_xflR4S2WvglBWH8M3t9MideIU.roa (hash: Cyel9g1MztQmxzP3oBvWVirfHDPFN3Z5801vcO4qaLk=)
2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: TayAY3tqy4DsYaGNbJggxXwhu8VqSZQUi9Yep/DRBQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c9:43:65:ee:95:7b:2b:ff:ff:6c:78:b7:ce:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: Jun 28 13:02:25 2025 GMT
Not After : Jun 29 13:02:25 2025 GMT
Subject: CN=ab11d5f2da59456fc150bafa9a612fe3e97d1672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:03:1f:f1:65:dc:f9:d9:4c:35:41:e9:eb:bc:
a3:12:4d:2d:0c:62:d3:97:48:c8:b2:d9:ac:8d:d0:
97:32:a9:dd:52:3b:0a:b6:1a:e4:35:a1:ea:72:2e:
e7:6a:93:7e:7c:9a:06:38:24:b4:cb:8b:7b:8c:1e:
cc:83:97:c2:13:79:c0:a9:46:4d:2a:a1:5b:ff:3b:
8a:99:aa:6c:04:40:8b:89:a3:7e:1e:c2:2e:f0:b2:
ac:55:b5:60:12:84:60:8e:f7:15:86:c0:80:23:9d:
30:d2:89:61:13:13:f5:54:7f:e7:44:9e:f4:b0:79:
0c:55:0a:bf:88:2d:b4:3d:b4:0b:75:5d:d6:e4:d2:
59:bd:0e:19:e3:d6:67:f5:45:40:20:cf:23:18:46:
4b:ae:c2:b8:e5:a3:25:87:57:88:c3:7e:a9:41:7c:
b3:db:f2:66:b2:33:3e:5d:88:7b:20:86:03:70:1c:
39:d2:91:80:6f:f1:8b:d1:81:76:11:6d:97:98:5a:
7a:18:5a:cc:80:28:d1:e3:5e:be:73:47:3c:c2:9c:
c8:e4:f5:bf:4c:18:9e:c2:ea:99:32:01:91:5c:e8:
97:a9:56:48:02:ea:04:03:24:d0:6e:c9:f1:f7:2f:
5c:71:2f:9c:60:78:d3:53:80:56:ca:be:7d:da:4f:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:11:D5:F2:DA:59:45:6F:C1:50:BA:FA:9A:61:2F:E3:E9:7D:16:72
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e9:95:2b:8e:4e:5f:f5:d7:27:a2:b3:58:3b:84:73:9f:51:
2e:92:9e:42:ec:05:99:1a:3d:bd:31:22:0e:29:34:d1:8d:75:
7e:d2:cc:ae:36:e4:54:76:f9:40:5e:06:d9:e4:13:e0:08:39:
72:9d:b4:ca:0e:a3:4e:42:4e:29:c8:83:39:44:67:e3:13:52:
64:1b:4e:be:a9:1c:4d:2d:41:20:05:81:36:c5:2d:6d:43:7c:
24:93:a2:75:cf:ca:b2:ff:6f:b8:14:87:ec:60:31:87:cb:55:
46:9e:58:6f:b2:3d:8f:b0:c8:60:d1:af:04:bc:23:3b:64:58:
fa:58:82:12:d6:35:01:25:d7:25:13:63:f1:7e:30:a7:75:ef:
b0:3e:d3:5b:a0:0c:26:76:9d:cf:d6:b1:33:48:da:32:28:28:
69:b5:7a:0f:b2:0d:b0:58:cd:13:87:ec:db:3d:d0:0f:94:fc:
e6:60:53:b1:1a:26:9f:a8:7c:46:c6:cd:53:8c:ee:eb:4d:f7:
9f:01:8c:ba:2f:b5:49:44:a8:93:e7:53:15:13:d1:1d:80:05:
12:c4:d3:f6:c8:89:5a:b2:4c:0d:de:9b:27:10:0d:7c:bd:c7:
be:29:73:88:f0:a9:52:9e:0f:5e:25:13:12:65:f0:b8:32:94:
6a:f0:e5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:36 2025 by rpki-client