Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
File: zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft (raw, json)
Hash identifier: ew+bJQNVdWizItAeoc7yAJbziaiD6NfKcyct0+oakls=
Subject key identifier: A1:61:1E:06:62:25:BB:91:76:DF:EC:25:02:2F:E0:0F:E8:A6:6B:4C
Authority key identifier: CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
Certificate issuer: /CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Certificate serial: 0197B96A73415F32D19626F45D3E2537FF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 02:00:50 +0000
Manifest this update: Sun 29 Jun 2025 02:00:50 +0000
Manifest next update: Mon 30 Jun 2025 02:00:50 +0000
Files and hashes: 1: EsoIIrFbYFhVDfj6th4jhjn8bMs.roa (hash: QXxOo7J9CTQ0vAhyPXgGF7t6YymxNb/k2gt5l3VWLEM=)
2: zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl (hash: rdiT/PrXFznD3hklizT6yCKtI3REbkmZsjAatEr9ppk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:73:41:5f:32:d1:96:26:f4:5d:3e:25:37:ff:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Validity
Not Before: Jun 29 02:00:50 2025 GMT
Not After : Jun 30 02:00:50 2025 GMT
Subject: CN=a1611e066225bb9176dfec25022fe00fe8a66b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:f0:bb:8a:d6:d7:4d:2c:52:e6:62:d1:8f:
5e:a2:e0:13:51:d4:03:d1:60:8c:68:cb:c7:52:21:
7b:f0:56:8f:63:ad:2a:c1:a7:1f:79:53:37:88:58:
f3:19:b1:b0:16:c5:00:48:f7:73:87:4e:55:e7:b0:
93:6f:be:a1:f6:20:6a:b0:07:4e:cd:2d:87:63:33:
b6:d7:60:45:f0:f3:e7:99:3e:12:ba:a7:05:0f:87:
f3:d3:0e:69:df:14:34:ec:e0:80:83:69:c0:d6:2a:
f8:21:be:8f:ac:b1:61:73:e6:91:2a:7f:53:12:eb:
e6:a5:f1:12:5e:96:e7:f1:1c:79:e7:17:b5:48:6f:
00:0b:7a:be:bf:af:91:a2:c1:d7:db:80:2f:7d:44:
d1:08:62:84:74:ad:53:69:51:de:94:b2:9c:12:b5:
2f:de:27:e5:db:49:e9:f5:8e:67:d9:67:15:1d:bf:
1d:a0:e4:43:4a:90:df:95:2e:0c:47:d6:f1:7c:1c:
36:62:df:b1:a8:0e:9b:36:5a:3a:6e:a0:de:de:0e:
b6:c5:d1:da:ba:83:02:b5:7e:39:56:1e:dd:26:1f:
20:1a:be:4b:b4:41:fb:91:7b:4d:a1:65:4b:49:77:
e3:84:7b:f6:06:9c:96:04:78:fe:0e:b8:e7:ef:36:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:61:1E:06:62:25:BB:91:76:DF:EC:25:02:2F:E0:0F:E8:A6:6B:4C
X509v3 Authority Key Identifier:
keyid:CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:73:44:86:d6:9f:4f:05:04:69:d3:0b:42:37:8d:2e:46:42:
5d:bd:b0:ca:f3:c9:4a:fb:fe:33:5e:9d:22:ac:ae:3e:b5:78:
4b:f9:71:20:87:75:c5:13:ed:32:a9:df:81:ab:af:ef:57:8a:
d9:8d:30:e9:f7:58:67:18:ae:9e:6b:7c:78:b7:64:52:8a:9b:
36:5e:cb:71:7a:f5:12:3e:27:40:b3:1d:b5:f8:b8:96:63:34:
16:5d:ed:ee:a7:64:1a:97:b8:e1:e7:16:16:b4:61:23:fe:19:
97:5d:f4:2a:a3:b7:34:52:5a:0d:84:af:a4:11:6e:ef:a1:36:
da:6f:56:73:71:5c:2d:28:0e:a3:44:ae:fb:cc:c8:0a:78:1d:
ab:dc:e6:c6:bf:dd:79:20:63:15:73:38:c3:a6:81:f7:72:cf:
f3:e6:ac:dd:57:11:b5:2f:af:76:d2:d2:e9:71:c7:39:37:0a:
28:1c:96:69:51:e8:2f:94:b8:58:53:bf:3d:6f:06:58:e2:64:
53:fa:da:04:d0:61:d1:84:a7:78:41:a8:ed:0b:d7:e5:a0:dc:
f0:58:08:45:d3:3f:26:29:2c:fd:55:7d:47:db:3d:ee:18:d8:
7c:31:6d:11:33:72:d6:0c:37:a1:4e:83:7a:bf:76:d9:03:3b:
14:60:bb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:14:50 2025 by rpki-client