Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
File: rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json)
Hash identifier: 9vjfv7JqKIew4T2GCeELDH5qaIPw8LLQQoz8xn9uPPM=
Subject key identifier: D1:6A:66:F1:BA:2F:93:AD:AE:E9:AE:F7:B8:5A:4A:A6:05:A7:64:C3
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial: 0197B9A1C6A9834B37CA4765AAC1ED0D61C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 03:01:16 +0000
Manifest this update: Sun 29 Jun 2025 03:01:16 +0000
Manifest next update: Mon 30 Jun 2025 03:01:16 +0000
Files and hashes: 1: jlnSpYKnKgIEV_ZJFnqA1zdm8Xc.roa (hash: W+tCfuFHaZiswjzfI3LjlAyiu6GbDCuHiVsPBGynsaw=)
2: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: WTJ1NK534xxbwvEV+UQJ0zaMQ+Q5EDVbQd+FIoNntqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:c6:a9:83:4b:37:ca:47:65:aa:c1:ed:0d:61:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Validity
Not Before: Jun 29 03:01:16 2025 GMT
Not After : Jun 30 03:01:16 2025 GMT
Subject: CN=d16a66f1ba2f93adaee9aef7b85a4aa605a764c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:1e:4d:87:08:f5:b7:69:70:71:24:53:dc:
0c:15:f1:1a:82:a9:8e:61:0f:69:93:5e:5a:86:3e:
7e:91:92:33:27:ef:6b:1b:e2:5f:5a:25:35:d6:e9:
66:d1:1c:2f:50:f3:9e:a6:1d:4b:15:48:3b:3f:e7:
af:d2:8d:52:a0:4c:2d:fa:72:a2:ac:f0:f6:f1:c7:
d0:bc:39:97:fe:62:4b:0e:17:87:89:a3:18:3b:5e:
ad:9b:8f:8f:99:21:2d:3d:74:77:89:4e:3f:f1:d4:
d5:86:ce:2b:dc:f2:a2:bb:e1:09:46:1d:19:1c:87:
f6:89:44:74:76:2a:dd:6a:73:dc:af:5d:66:6f:53:
ab:b2:7f:54:97:26:22:a1:29:82:b2:d1:16:22:35:
14:e0:f8:52:58:a2:d8:3c:9c:83:09:c3:54:14:5a:
c5:5f:e3:dc:1e:f3:d8:95:a5:4d:ba:4c:c5:7d:41:
c9:a3:ae:89:72:53:4e:56:9d:37:e3:64:10:96:fa:
cf:6d:b3:12:05:00:b7:e8:ab:49:b6:1d:d4:82:5d:
cc:d6:ed:49:70:e1:cc:d2:44:69:3f:80:d3:d8:33:
12:56:d8:fb:04:b0:74:c0:92:46:9a:53:cf:bd:bf:
85:a1:58:c8:4e:0c:f9:60:39:e5:1e:f1:de:2b:b4:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6A:66:F1:BA:2F:93:AD:AE:E9:AE:F7:B8:5A:4A:A6:05:A7:64:C3
X509v3 Authority Key Identifier:
keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4a:14:d2:28:f5:3d:55:3b:63:26:a1:be:de:b3:98:b7:c4:
a5:54:46:58:1b:56:1a:1d:26:0e:f7:00:d8:4f:3e:e7:dd:25:
93:e0:40:d5:3c:12:ac:16:32:46:43:23:a9:48:39:84:6a:05:
54:e9:6f:e6:7a:a3:e0:47:94:7c:7a:59:80:73:34:fc:d6:59:
0a:16:2b:11:c3:55:5b:c7:c8:f2:51:d9:de:fa:b6:3f:f1:e9:
88:d6:d5:0d:86:56:ed:16:96:8c:b6:ef:02:05:13:8a:76:6a:
b6:8e:77:00:b2:35:e1:f0:93:a6:01:c9:50:01:a1:34:71:4c:
27:ea:fd:c6:02:49:0e:91:0e:83:9d:bd:da:67:08:5f:27:50:
ff:50:f8:ef:38:72:ea:32:4d:37:7b:11:c3:2b:50:83:ff:d7:
c5:7f:f5:4a:e5:ac:d8:f6:a3:db:eb:41:ee:fb:47:8c:32:e8:
ee:b7:76:5a:c8:c5:98:91:90:30:68:b1:86:00:0c:df:65:2b:
78:d2:5f:e4:b2:95:82:c1:66:d0:fb:e0:6b:eb:cd:60:08:3c:
0a:63:92:ed:82:ca:bc:46:55:cd:e4:81:ae:8f:3d:1b:ef:81:
63:b6:03:db:9b:db:18:d4:5e:dd:2a:55:65:a8:4b:98:c8:37:
34:89:c3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:01:06 2025 by rpki-client