Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: 078yK6zpbKq7HjJkM8Bkf0cl1HXm+2y+JvOVm5Lhn28=
Subject key identifier: 7C:33:3D:85:28:B4:C6:32:F6:B0:52:E9:25:FE:D1:B7:E5:89:51:7C
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 0197B70EA1D435E2E3C78FBC0E495F4CDBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 08BD
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: h7W3UgF7kRJzNYahHDUe3KNXPWWUJX+lKTu4UUn0j9M=)
2: sPYhG40WeNs4D0fdLBoDQKTV_Eo.roa (hash: bDpPm+4aHa819Yue2u9g5oa22BJIhkWyJ4aj3sH99kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a1:d4:35:e2:e3:c7:8f:bc:0e:49:5f:4c:db:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=7c333d8528b4c632f6b052e925fed1b7e589517c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4a:62:8a:c5:cd:83:d9:c3:d0:8e:ca:19:51:
c6:f0:39:b1:3a:3a:95:e5:f6:fb:d2:9c:fb:ca:37:
6f:2c:19:6b:af:cc:d7:27:82:9e:08:67:69:69:fd:
5f:fd:80:f2:10:4b:f6:1b:b5:95:0c:a3:56:82:0d:
af:1f:56:40:b7:8c:88:07:97:16:0e:5f:38:11:28:
36:e5:ed:44:81:60:50:9d:79:6f:e7:59:22:43:6a:
e3:fe:72:fa:84:81:55:91:ca:2e:4d:1b:9d:c2:b2:
c5:c1:8f:07:fb:03:2b:35:42:d6:ea:9c:22:50:32:
3d:8c:54:4f:e1:76:d7:22:dd:6a:76:6a:9b:66:35:
2d:20:cd:0b:a1:65:e6:5b:9f:48:94:4d:57:b1:27:
21:53:cd:2c:b8:7d:c8:1a:24:1c:e7:bd:21:68:54:
73:c4:d6:34:9d:1e:3c:59:2b:5e:5a:ec:f9:d9:81:
08:88:24:37:07:d6:7c:70:1c:1a:63:bc:5e:a4:20:
69:a8:52:49:84:ce:59:a0:54:37:ff:ac:ad:30:13:
f4:c5:1d:ed:01:01:c7:97:f1:5c:73:a0:9f:b6:f4:
5b:5a:20:f4:a5:55:f9:05:69:cd:7c:4c:c2:5b:64:
91:c7:9d:c2:08:3c:a3:61:66:c5:7e:b9:5f:c9:3e:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:33:3D:85:28:B4:C6:32:F6:B0:52:E9:25:FE:D1:B7:E5:89:51:7C
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:91:ec:3f:1f:68:9e:7c:80:30:cd:02:b5:46:98:c6:56:48:
ca:2c:2a:9e:eb:48:7d:c0:d6:2f:82:a8:08:86:5d:5c:46:92:
99:6f:5e:2b:e6:2d:7e:c2:af:84:f9:95:4b:8c:e1:22:6f:cb:
7a:bd:a6:e7:0a:a5:ac:4b:85:cb:1f:b9:95:02:a7:d8:7e:6e:
2b:fd:fd:f3:a1:b0:76:b8:e0:53:22:d8:d5:0c:73:01:5c:35:
de:9d:27:d5:09:7c:db:d9:08:3e:0e:e9:31:14:e4:df:2f:9e:
2d:b8:dd:45:09:94:40:ad:1d:57:19:60:76:0e:3d:c4:55:38:
87:06:8a:f6:dd:33:d2:9f:98:88:d8:f3:a7:ec:a5:68:89:99:
1d:3f:9f:a0:a3:e2:00:f8:14:19:77:42:01:07:7e:2c:3b:98:
c3:b8:bc:22:4b:86:52:79:3a:60:1b:ac:df:49:a1:10:8c:72:
73:aa:e8:ff:fc:f0:99:01:f9:16:b1:23:c1:f4:39:02:6b:7d:
cc:30:ee:90:9e:47:13:e3:7c:e9:10:27:eb:06:8c:65:da:d7:
c0:c4:9e:b0:38:7f:40:bf:bf:6c:5b:2a:dc:e1:6c:17:91:78:
d9:65:64:20:02:b6:83:c5:1b:7b:fd:a8:c9:dc:64:c2:54:b3:
8b:6b:87:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:12 2025 by rpki-client