Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File: Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier: fhc/uoRnfaVAozrH6cwt7blf1NXlDagZNnu+Y+pjZog=
Subject key identifier: 22:62:14:57:7B:B9:D0:3D:D2:A9:83:61:F0:77:68:FB:31:C4:F6:00
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer: /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial: 0197B632BEDB3FD8849CE577708F94374EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number: 92
Signing time: Sat 28 Jun 2025 11:01:08 +0000
Manifest this update: Sat 28 Jun 2025 11:01:08 +0000
Manifest next update: Sun 29 Jun 2025 11:01:08 +0000
Files and hashes: 1: 9MjXTd2Lr1yJdEmK8CTeSoInorE.roa (hash: YWK7+nRLe8UfaY8PNHmd6MYAPs7Oj1F/tL2OOejEg1M=)
2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: qr5X1NGqTWM9h+Cf6gWEvYC+/pvrfzj2F2HsnylOeJ0=)
3: hGPKpUabfTwURA6WsciuOkTPGQI.roa (hash: KEkDVhj8xqmITURn5vzg3xzmIbncL3eYEldek/45XYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:be:db:3f:d8:84:9c:e5:77:70:8f:94:37:4e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Validity
Not Before: Jun 28 11:01:08 2025 GMT
Not After : Jun 29 11:01:08 2025 GMT
Subject: CN=226214577bb9d03dd2a98361f07768fb31c4f600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:08:7d:a1:e6:7c:21:ca:a8:12:f9:db:b7:
6c:81:11:e9:e2:80:16:7c:3d:df:b3:ea:73:a3:d7:
2a:2c:7f:a1:99:97:80:8b:08:ab:87:7f:e8:46:03:
4a:d6:bb:8c:9e:51:70:da:d4:41:e6:08:31:ea:2a:
4d:0b:71:4c:15:87:b3:af:91:59:9c:fe:86:b3:9a:
f2:f1:ed:5d:39:26:26:49:a8:02:86:1e:f6:95:14:
5d:11:35:49:75:fa:64:9a:b0:a5:73:10:0d:d9:7d:
71:95:54:6c:e1:3b:c2:3f:85:43:9c:fa:f0:70:6a:
6f:13:67:dd:ea:0f:ef:d5:69:d1:a8:83:5f:c2:f6:
21:f4:c3:d3:58:ea:55:7d:fb:41:90:a7:18:c5:a4:
62:d0:46:e9:fa:4d:a9:b9:ea:8a:5c:50:f2:af:6b:
df:f8:8a:77:a7:3f:0d:cd:ce:0a:90:72:2f:1c:68:
89:dc:94:97:84:c3:df:9c:86:95:e8:28:f5:03:8a:
32:d6:50:f3:73:6c:7b:47:be:88:05:05:a4:e9:bf:
02:8a:44:44:4a:e8:a9:01:f7:5c:dc:88:2d:ff:19:
10:d8:a5:cb:fb:24:d8:73:d2:8f:6b:dd:2e:9c:6f:
06:84:45:e5:b6:97:3d:75:d7:63:5e:9d:ff:d3:a2:
ff:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:62:14:57:7B:B9:D0:3D:D2:A9:83:61:F0:77:68:FB:31:C4:F6:00
X509v3 Authority Key Identifier:
keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:2f:19:81:bb:5e:f0:f8:d9:16:ca:f8:ba:07:6f:8d:1f:b5:
6a:8a:a7:93:89:82:6e:26:f1:28:9d:72:79:9e:41:ff:81:b6:
ab:ef:ca:00:9d:21:b8:0b:62:3b:da:96:9b:de:61:fe:e1:91:
4a:dc:99:da:0b:fd:94:d9:aa:19:0a:cd:50:cf:47:8f:36:da:
5f:59:1a:c4:53:a5:b9:eb:1b:c7:2a:ce:7c:f7:95:0c:e0:ce:
a4:16:94:4d:aa:7c:e1:76:05:d9:88:19:d0:85:a9:89:2c:1a:
4d:6a:35:c7:98:3b:60:22:ed:57:16:dd:4e:f5:43:2c:e5:88:
73:4e:5b:95:fb:af:05:5a:48:3a:e5:0b:a8:4f:53:b5:2a:46:
d7:56:d2:0c:2a:7d:cb:58:41:4e:c9:1b:97:64:db:6a:46:2a:
1a:9b:f2:26:54:fb:2f:31:8c:27:e3:79:c0:b9:a4:16:fb:bd:
9d:76:47:9d:ec:16:dc:bc:19:8c:19:00:fd:c2:8b:39:7c:7a:
34:e4:66:7b:44:d1:b7:9a:33:e2:45:76:fe:4d:6c:80:11:09:
dc:01:31:8a:5b:68:ed:cd:d9:35:ad:67:fa:d2:45:90:71:f9:
62:dd:82:2f:95:25:99:46:78:3e:42:e1:29:ea:2f:86:33:d7:
a8:85:38:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:39 2025 by rpki-client