Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json)
Hash identifier: gklDDropmB84uuwC6eeWGIODDOTKguTNg8UrN1PdiXc=
Subject key identifier: 52:C9:4A:15:B0:CF:73:1A:B0:19:6F:BC:BB:87:C4:37:48:6E:CE:BD
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 0197B6A2229D4BB96A6605CF6CF03F081329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
Manifest number: 0CD3
Signing time: Sat 28 Jun 2025 13:02:48 +0000
Manifest this update: Sat 28 Jun 2025 13:02:48 +0000
Manifest next update: Sun 29 Jun 2025 13:02:48 +0000
Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: A2SiHmhEmLEtmXNzFtXD9Ksu/6VH+qMLvtm8kIJ1o4A=)
2: qWXcfiQuPBHMjlQKkWiAfKgYZzg.roa (hash: Wc2JW8a4VkUPRVVW0ORvuNA6sC5FJWmi5KtU2JoA5R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:22:9d:4b:b9:6a:66:05:cf:6c:f0:3f:08:13:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: Jun 28 13:02:48 2025 GMT
Not After : Jun 29 13:02:48 2025 GMT
Subject: CN=52c94a15b0cf731ab0196fbcbb87c437486ecebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:05:37:9d:ab:56:97:d7:c1:f0:32:88:b7:
d9:4c:c4:b6:9f:2d:d0:93:96:22:a9:b0:cd:f0:35:
0b:84:9b:97:e9:20:16:22:70:1a:17:49:48:df:63:
e7:38:e3:d3:c0:ec:09:cb:32:1e:26:a4:5c:12:86:
60:9d:eb:6a:4f:79:fd:3e:78:42:82:95:8a:16:72:
c1:f3:b0:73:89:e7:7c:2c:45:c3:4a:84:16:80:51:
59:05:c5:2e:7e:d8:52:09:33:20:ae:0b:09:f6:e1:
62:e5:e4:3b:2a:e1:22:cd:15:43:87:34:53:27:7a:
77:3f:42:56:87:4f:60:f1:b7:a3:8c:b4:60:e5:6c:
a3:96:fe:13:7a:30:16:aa:0d:0e:ef:3a:5c:51:90:
ac:0f:0a:44:b2:e8:02:69:1d:5f:9a:1e:9c:d5:07:
16:64:02:03:06:0d:35:f1:2f:80:76:31:fe:55:68:
5f:8a:64:f0:6a:df:b1:25:0c:a0:31:91:30:b8:33:
56:a4:2e:ab:bb:b5:ae:32:5f:98:01:da:bb:7f:24:
a2:9e:54:f2:4f:43:d8:e3:31:99:27:41:cc:07:46:
67:93:61:d2:aa:ef:eb:ca:ce:97:e3:a5:ef:25:d0:
23:06:3c:d9:aa:ef:71:0e:2f:b4:4e:5d:67:59:e9:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C9:4A:15:B0:CF:73:1A:B0:19:6F:BC:BB:87:C4:37:48:6E:CE:BD
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2d:ee:a8:17:7c:37:be:3b:b1:e3:d2:b8:e4:8f:26:78:0f:
29:b6:9a:73:5f:04:fa:6a:ca:80:a2:04:2d:63:36:64:b7:65:
f4:64:6a:4f:77:bc:3c:8d:a8:27:de:87:0f:ee:88:84:8e:b9:
8c:c9:e4:09:88:77:88:b3:f4:c1:dd:82:21:5a:5a:c8:ef:18:
12:59:ba:89:1d:b6:71:de:a0:5c:d2:c3:47:ce:56:6c:9b:14:
41:57:b9:57:5d:c9:21:7d:c7:fd:31:05:66:b0:bf:cf:e6:cf:
48:60:ad:6f:30:ea:93:6f:6f:6b:7d:e4:81:35:b8:6d:88:31:
89:ec:2d:14:3c:d4:3a:1c:f0:86:51:5e:88:7f:0d:e0:c9:62:
43:4d:b3:ec:61:78:6a:7a:ce:aa:ca:c4:98:e8:32:c1:2f:47:
b3:a9:37:91:b6:3d:6e:c9:b8:47:6c:5f:18:93:ce:f2:d2:33:
cf:f1:0c:40:1b:82:fa:f6:00:fb:14:fb:a7:30:79:7e:e4:56:
ef:96:aa:5c:28:96:c6:65:87:77:07:4c:02:c2:72:ba:50:4e:
ba:5b:1b:6a:d9:f5:ec:0f:97:2c:f0:09:c5:50:3d:e6:70:8f:
1a:6d:a7:a8:0a:37:ac:40:25:f6:60:d3:2f:3a:d7:c1:a5:70:
a8:18:a2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:51 2025 by rpki-client