Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
File: zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft (raw, json)
Hash identifier: Mrj1Q6kL6nQLAnwa9gOqL+qcXTZWGhYB+J0w6r9T090=
Subject key identifier: 03:CF:5B:4F:41:0A:15:5E:9D:39:57:D3:92:FC:19:72:FC:FC:8D:0C
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Certificate issuer: /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial: 0197B6A09D1765130604CBBF094716F4EDF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
Manifest number: 1550
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: YqsIJO2_ffnr84dFD6FPVdm33CU.roa (hash: pxoJD8X1pGpkVmBMQ12ROsjSsHVTYIEf7xsdsWhn70g=)
2: fuWr4ajPQIorYySrCuX8pRFFTFM.roa (hash: m3vIKMXFzJeuW2Nn3Yn1mc3oXD70c/mqAAyNwLfO+oc=)
3: zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl (hash: wc8svUThLsBl/S9niuCge4uAa6UHotSu+h3erkJ6NYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9d:17:65:13:06:04:cb:bf:09:47:16:f4:ed:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=03cf5b4f410a155e9d3957d392fc1972fcfc8d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:0b:5a:f4:6e:3d:7a:68:cb:10:29:77:35:
f3:de:3b:ac:09:15:ed:d1:a2:07:78:f7:08:7d:08:
cd:a0:9a:a0:a9:f8:9d:c7:dd:5d:b6:96:0f:0d:78:
41:07:fd:d6:7f:63:96:22:3d:80:9e:b3:28:7f:43:
16:51:ff:b1:06:8b:f2:a6:22:b9:c0:16:45:7d:77:
26:bb:23:16:d4:30:00:66:1f:d1:da:36:91:38:8f:
c2:70:76:57:10:7d:06:8a:22:f5:cf:3c:42:81:6d:
b1:69:e8:cb:bd:e9:4b:b1:84:ca:d4:d6:13:f7:b3:
48:80:3e:6c:d0:66:f0:4a:08:ba:95:bd:93:64:32:
64:17:46:46:4a:d4:07:ba:6e:94:b0:b5:c8:e2:b7:
88:84:60:62:6f:0c:33:7f:76:6a:37:cf:d5:2f:b7:
1f:b5:55:bc:78:d9:57:b3:de:54:1a:d0:ec:fb:ac:
f6:10:a1:e8:90:5e:8b:31:bd:c0:ec:74:2c:b6:b9:
d9:65:30:8b:51:ab:a9:2c:9d:74:c0:8a:16:2f:89:
c9:de:c5:7c:ba:90:d7:ab:d1:44:75:75:48:7c:42:
5d:8b:0f:a6:50:5e:6e:f5:11:f0:0f:d7:26:d0:0b:
d3:dd:aa:27:d3:29:58:ad:e7:7a:6b:e4:a7:8e:4a:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CF:5B:4F:41:0A:15:5E:9D:39:57:D3:92:FC:19:72:FC:FC:8D:0C
X509v3 Authority Key Identifier:
keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d9:3f:54:68:5c:e9:a6:cb:1a:61:ed:1f:02:5f:7f:13:55:
eb:54:61:eb:b9:d4:e7:8b:92:d9:74:87:ae:2c:c7:0c:a2:d0:
7a:eb:04:d6:07:ad:31:22:3c:f7:4c:11:62:aa:62:14:6b:80:
ba:76:a3:76:a4:c4:73:cc:66:ff:dc:27:f3:17:27:dc:98:f8:
a4:cc:ab:d5:9a:f3:66:b4:82:1a:df:60:21:27:56:b1:44:67:
9d:17:f3:2f:0c:cf:02:73:52:68:3e:75:f9:81:3c:89:73:e7:
73:d1:0b:cc:bf:25:48:6c:c8:67:0f:7d:66:f5:e8:66:2e:8e:
cb:61:c9:db:ed:f2:a6:90:2a:5a:b8:94:6a:16:bc:59:92:0d:
9f:2f:cf:67:76:77:40:f3:2e:74:90:58:02:aa:b5:1d:d7:c0:
bf:e2:cd:44:96:71:c2:b8:3c:05:72:d8:9e:a5:16:5c:03:5f:
6c:b2:e0:b2:c9:c2:7a:7b:49:18:b5:55:23:78:6e:f9:00:7f:
6e:ed:a5:47:71:43:6e:b1:07:2c:fc:24:d2:28:de:29:0c:c7:
6b:6a:1f:ee:08:b2:ab:a5:c1:2e:0a:aa:1e:b5:42:d8:7c:2d:
29:82:ea:00:c5:5c:29:89:81:6a:df:f8:06:c6:02:77:ef:d8:
1f:cc:8d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:08 2025 by rpki-client