Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json)
Hash identifier: Z2QuBKxHK9qguJPAG/BhYvmjwCc6ApLaz3Ih3XImh6c=
Subject key identifier: 96:95:EC:DA:46:0D:B0:35:4F:35:53:7B:C6:11:44:4E:5A:9C:64:66
Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Certificate serial: 0197B6A1885903115DAF7D5A5E07D5028C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
Manifest number: 0373
Signing time: Sat 28 Jun 2025 13:02:08 +0000
Manifest this update: Sat 28 Jun 2025 13:02:08 +0000
Manifest next update: Sun 29 Jun 2025 13:02:08 +0000
Files and hashes: 1: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: wncfJRgeBu6AzSJdGWkmDFAgW5fi6FTenxK0DiCZPDw=)
2: _Bq_ahlry5PbsLgSqWTDBgCzrGg.roa (hash: ALTa8b/7lEoVgTQ9zQyYwW//fRwrl5PxAgGHVIW0QVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:88:59:03:11:5d:af:7d:5a:5e:07:d5:02:8c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Validity
Not Before: Jun 28 13:02:08 2025 GMT
Not After : Jun 29 13:02:08 2025 GMT
Subject: CN=9695ecda460db0354f35537bc611444e5a9c6466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:39:54:b3:d2:2f:c2:f9:d8:6f:f8:b4:50:
d2:3f:1b:b4:cc:29:ce:7d:70:98:09:16:43:fe:7a:
1d:99:23:21:7b:20:8c:88:a5:a2:36:fa:6b:ba:30:
16:50:16:15:25:4d:ef:2b:ce:3d:81:b6:13:10:f0:
0f:0c:49:91:5b:88:3e:64:33:5d:87:7d:48:d7:10:
1e:ae:e7:dd:dd:31:ab:58:03:0b:2e:4f:01:08:46:
5a:cb:b6:aa:c7:d0:77:7f:e6:02:0b:e2:81:e7:ff:
7c:54:b5:97:5a:d0:10:5c:34:7e:12:0a:38:8b:dd:
4e:63:ae:91:9a:8f:fb:2a:bb:f2:40:b6:b1:d2:72:
81:a8:bb:fb:9c:33:9d:13:3a:74:fd:56:dc:7f:e3:
e3:00:5b:06:37:d2:34:86:82:60:dd:22:52:b1:9b:
54:fb:0d:aa:11:70:91:05:78:13:e0:e6:a7:7e:1b:
ac:76:ee:fc:23:c1:90:85:77:3f:b4:3e:d8:cf:d2:
a6:fc:60:6d:a5:f8:c6:21:11:2e:4f:d8:22:11:b3:
11:c4:36:96:0e:e8:df:51:10:ba:f4:19:66:cd:12:
a6:3f:10:9d:03:7e:54:bb:6a:2b:cb:9a:75:63:39:
31:fa:c5:c5:50:08:8b:3a:ea:04:a6:c2:a2:78:b3:
ab:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:95:EC:DA:46:0D:B0:35:4F:35:53:7B:C6:11:44:4E:5A:9C:64:66
X509v3 Authority Key Identifier:
keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b0:4d:df:4d:05:82:ed:b5:a2:3b:a9:70:34:73:80:48:5a:
c4:9d:92:cd:76:d0:b9:4c:79:ce:e1:7e:96:78:de:30:f8:89:
35:ab:af:bc:47:a4:52:ee:b6:33:71:bc:f1:85:d6:94:88:d8:
85:a7:4e:67:9c:d1:65:0d:4f:2c:18:08:d5:fb:68:c5:4c:5e:
7f:7b:4b:93:b6:47:0c:de:a5:f0:5d:08:76:38:67:06:d2:23:
29:06:10:f6:87:81:32:96:79:0a:cc:aa:54:57:e3:f5:4d:d2:
3b:29:97:ee:e6:31:de:c0:15:28:48:20:70:ff:a4:c8:4f:49:
2c:97:25:e3:87:c9:97:f3:a6:d0:4b:70:e9:6b:89:2e:5c:cd:
83:0a:11:77:18:94:7c:f1:28:6f:7d:b0:b9:2d:c8:99:d6:ad:
be:06:5e:c9:de:90:b4:9a:37:9d:13:3d:65:40:17:f2:de:c2:
b8:ad:72:15:94:39:98:6d:c6:b2:b1:35:25:dc:7d:c5:ff:b9:
2c:69:15:27:21:23:51:fa:f9:21:58:ef:b6:b9:a9:a4:f0:b7:
37:b3:9e:e1:8a:42:90:db:70:f4:12:ef:d4:19:dd:2d:c1:c5:
99:c4:9e:42:cb:5a:67:3c:69:20:55:67:bb:5e:19:bf:c1:21:
7f:e4:ae:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:22:02 2025 by rpki-client