Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier: pj6BSdwXOnmZjrs3YIyajLyPf7f+YpPXc3/psnpKVxU=
Subject key identifier: FD:92:81:B3:2A:E8:07:74:7D:B3:18:51:FA:7E:6D:BC:B0:0D:04:28
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 0197C04858C7B5D9EC01D24BF1E33FF5423E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number: 15B9
Signing time: Mon 30 Jun 2025 10:00:56 +0000
Manifest this update: Mon 30 Jun 2025 10:00:56 +0000
Manifest next update: Tue 01 Jul 2025 10:00:56 +0000
Files and hashes: 1: X-KNJVz9F02-eLDfaKPH63PtzRc.roa (hash: qtVoMR5Y45CsVcXQuHhRRS1BbnVU7jS1ywbPtWRVweo=)
2: Zi7Ur4wbJWR3EdLIxTIMt470yv8.roa (hash: 2ojUhQY/moH0LhM/gEFCEK3T0bFJRBAMK4gF5wvlAf4=)
3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: 886wubOPor0ReGG1uh8KmSfzDHK762+7JLPNGaQCsvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:58:c7:b5:d9:ec:01:d2:4b:f1:e3:3f:f5:42:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Jun 30 10:00:56 2025 GMT
Not After : Jul 1 10:00:56 2025 GMT
Subject: CN=fd9281b32ae807747db31851fa7e6dbcb00d0428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:de:01:4c:38:88:eb:c3:b3:90:d0:92:70:
77:21:5b:00:53:72:68:d3:5c:8d:0a:6e:fb:90:6c:
d6:11:3b:a8:d2:32:70:fb:3a:93:8e:39:aa:0a:9f:
9c:d9:57:f5:64:25:b4:21:d7:ac:02:ff:4a:77:f2:
ab:7b:d7:b1:40:aa:09:a7:32:b5:5a:02:ec:35:57:
cc:cc:e9:6d:a1:87:39:6a:09:88:aa:fc:44:b6:f2:
8d:f7:1c:67:bf:99:af:d1:20:61:ae:c2:41:f4:73:
8d:6f:2d:ad:fa:92:7a:43:c3:ca:b5:e1:d1:2e:f3:
d5:d6:a1:ec:d8:4b:57:be:52:d8:ac:b3:d5:c4:8e:
99:d8:f0:b1:5e:34:a2:5f:c7:4d:f6:e4:1b:f0:8a:
bd:a9:85:70:5c:09:9e:fa:61:d5:88:01:61:06:dc:
b7:51:1e:49:70:83:03:d0:82:e4:f2:af:33:b9:37:
9b:52:21:ed:4f:c5:b3:59:3d:ed:86:ec:e6:63:68:
58:e6:18:43:1d:28:3f:5d:be:53:f4:0c:18:a4:cf:
44:64:10:ac:93:fa:fa:48:d2:40:85:b7:ed:c2:ac:
b3:35:ec:1e:4b:e2:47:51:c6:74:e0:7a:ef:75:5d:
a1:c4:0f:6c:5b:24:ab:6b:4b:5c:73:14:34:5d:04:
de:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:92:81:B3:2A:E8:07:74:7D:B3:18:51:FA:7E:6D:BC:B0:0D:04:28
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8f:8d:2d:4d:48:88:9c:42:be:80:a4:cf:55:9e:2c:88:20:
ce:66:02:2d:62:3e:98:44:47:8a:86:57:40:3c:3c:c1:f3:0e:
2a:da:8d:75:ef:5d:a7:0f:89:e4:66:c1:e1:e2:97:fb:23:48:
e8:2f:14:17:c8:e6:69:f1:54:68:35:b1:70:2d:04:1a:b4:06:
a6:89:51:51:fc:4c:b9:08:b9:e7:45:fe:a1:65:9c:f1:d3:16:
79:94:70:d1:a8:08:90:2b:f9:d7:83:aa:a7:40:24:b5:5b:03:
99:a4:02:4d:af:5b:9d:a0:5a:cf:e8:7d:80:82:74:0f:77:9f:
fb:04:f9:01:84:09:07:92:cd:30:c1:68:f1:c9:d4:09:fb:ec:
d4:e0:12:2b:cd:9c:12:ed:66:92:d1:32:17:20:ca:dc:28:b6:
63:55:7a:c0:89:d0:16:51:3a:c8:9b:6d:d3:14:23:a3:b4:0d:
ab:5e:a7:30:06:6a:e1:84:f9:c1:6d:1d:74:60:87:55:2d:45:
b2:c8:41:9b:5a:34:85:1f:e1:7c:11:4c:c7:cf:5e:a5:8b:4f:
76:6c:0f:2f:5c:f7:96:30:29:93:70:df:17:d5:93:24:bd:86:
73:a9:65:79:b7:b0:27:9c:bf:bf:5c:fb:43:0f:a9:0f:45:40:
a8:35:2e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:33:43 2025 by rpki-client