Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File: znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier: 3J3Mfo9g6SpydBUnFymTu5SRbNuimXbgm7dgzxxo2/8=
Subject key identifier: 8D:7B:15:7C:56:E8:40:77:74:E1:70:E3:9A:47:AD:16:13:A6:7E:6E
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 0197CACC8ED38FC9A4E6F928C05262B80985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number: 15C3
Signing time: Wed 02 Jul 2025 11:01:32 +0000
Manifest this update: Wed 02 Jul 2025 11:01:32 +0000
Manifest next update: Thu 03 Jul 2025 11:01:32 +0000
Files and hashes: 1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: zEh+GZATYmVB0CuxzHW7zjttcf4E+3rMAPBIXkiOK8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:8e:d3:8f:c9:a4:e6:f9:28:c0:52:62:b8:09:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Jul 2 11:01:32 2025 GMT
Not After : Jul 3 11:01:32 2025 GMT
Subject: CN=8d7b157c56e8407774e170e39a47ad1613a67e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:30:7f:7d:2e:35:57:e9:ee:3c:02:bb:2a:
47:5b:aa:70:e2:82:fc:44:aa:94:c7:1f:c3:55:c7:
6e:57:42:a0:17:42:a3:b9:de:1b:a0:a6:d9:cd:0e:
ca:93:f1:2a:58:b8:ab:3f:d8:5e:be:8b:ac:66:61:
e7:0f:37:a0:94:71:07:ee:35:57:b0:73:c8:9e:2c:
09:4d:bb:52:78:98:2c:7f:4b:de:32:36:40:91:bc:
35:6d:ae:63:cd:e9:7b:e0:1a:57:18:62:d5:c7:52:
39:e3:4e:5b:3a:de:01:36:7d:11:39:22:c9:98:f9:
84:e9:5b:f8:dd:d4:15:d2:08:32:61:a3:81:70:1a:
7f:7e:45:ed:57:bd:7b:0b:fa:7e:46:65:02:d8:3f:
9c:5a:88:5e:01:03:90:84:08:69:67:28:7d:e6:c4:
09:d9:5e:25:a4:34:0b:99:fe:be:09:35:e7:43:9f:
c0:b3:31:e1:22:16:78:db:bf:74:2a:33:74:e1:62:
b9:de:3d:f2:2a:35:34:48:a1:05:70:02:e4:c4:6a:
91:16:27:5a:67:a8:f7:0a:b2:90:93:00:46:e4:da:
11:bf:5b:88:c7:dc:1d:7d:d0:92:6b:c8:8e:59:88:
21:5d:7b:4d:dd:55:4d:d7:c6:a0:f6:f9:f3:82:c5:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7B:15:7C:56:E8:40:77:74:E1:70:E3:9A:47:AD:16:13:A6:7E:6E
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:32:f2:93:a2:a7:11:d5:0b:9a:fa:4f:d4:3f:a4:5b:01:a0:
33:e4:77:d3:1e:56:19:e1:09:46:11:e1:58:ab:fb:35:8f:84:
9a:a4:c4:a6:e4:65:89:6d:bb:f8:32:8c:f1:d6:33:45:58:5c:
48:d6:c1:ef:6c:55:b8:ea:46:a3:63:af:a0:73:76:01:01:28:
70:c9:f7:18:69:01:55:4c:f8:7c:c9:5b:0b:62:b7:d0:18:7f:
d0:5a:bc:21:b6:9a:c0:d7:55:7e:9b:41:15:44:01:3c:7f:59:
72:f4:51:ac:68:81:09:63:f8:e7:28:44:c0:d8:af:b1:3a:a0:
47:06:f7:7f:0c:e9:7b:96:df:dd:15:bc:4b:31:87:e5:9e:3e:
49:ba:8b:30:64:90:9a:00:8c:a5:d1:70:b5:cd:80:9e:78:f9:
d0:5a:e0:06:27:c4:c9:ba:7a:82:64:7d:bb:57:b8:44:3d:b2:
fd:23:60:90:de:24:92:06:23:dd:ce:4a:25:a6:d2:c0:05:34:
bf:01:9b:21:16:f9:82:ea:ed:4a:ca:f1:60:b7:4d:21:33:7a:
8a:5c:a6:d9:2e:4c:1e:36:e0:fe:79:f9:58:ec:2d:8a:14:5e:
fc:f6:55:f9:e2:47:d3:db:20:b3:92:d9:85:5d:99:1f:f4:63:
69:7b:bf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:36:25 2025 by rpki-client