Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier: Eo8lZHLUFAhQdiE8mjIJfpC4Z4kUN8qjwJ05IA/ULvw=
Subject key identifier: 99:20:3E:B7:17:69:7F:6A:D1:ED:6F:C0:20:2E:16:DB:BA:D6:3F:1C
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial: 0197B820F8A5A59675939CCF33213FFE5DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number: 0DB0
Signing time: Sat 28 Jun 2025 20:00:57 +0000
Manifest this update: Sat 28 Jun 2025 20:00:57 +0000
Manifest next update: Sun 29 Jun 2025 20:00:57 +0000
Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: HgspIma9dF07QdeYY92Kwz5pw+Wel3oXZTUJIgRz+8g=)
2: vIfeAKl09iQuJw6UGqaMNu-i1xM.roa (hash: rnTrCrEZ28gshco/rvGtOCS7V1pX6Xki2r8crF4TWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f8:a5:a5:96:75:93:9c:cf:33:21:3f:fe:5d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Validity
Not Before: Jun 28 20:00:57 2025 GMT
Not After : Jun 29 20:00:57 2025 GMT
Subject: CN=99203eb717697f6ad1ed6fc0202e16dbbad63f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:14:d0:83:74:d8:89:44:9f:d5:ef:d8:21:
dc:02:1f:a5:07:b2:b7:1f:9b:a1:c4:e2:91:d1:0f:
b9:12:25:78:1b:e2:49:5f:9f:3b:08:9d:14:2b:b4:
28:89:12:ed:52:d4:f6:62:59:c9:c9:e5:21:0c:3a:
7b:d8:15:54:6f:2a:be:d3:98:55:bb:d7:41:e7:d5:
ee:54:53:16:a6:c0:b0:89:57:cd:6b:7c:aa:09:73:
fa:f9:25:4c:67:ef:ee:36:a4:1b:47:30:63:cc:ab:
c4:4f:75:01:93:d7:0d:84:92:f5:f3:50:78:c8:49:
04:fe:4b:8c:e1:0f:9b:e2:71:3b:16:6e:0d:95:a1:
3b:b6:f1:f5:d0:e8:70:40:21:50:30:fe:88:c7:f6:
65:01:b8:24:08:cb:a1:db:a8:ea:18:08:77:5f:78:
c9:bf:bf:e1:81:2d:3b:4b:11:27:05:fa:56:c1:79:
51:9f:4e:2d:b7:9c:79:c6:62:51:69:53:f1:22:f2:
2c:13:88:7c:4f:1e:ee:e0:12:59:81:a0:e2:01:fd:
6e:24:28:b8:2d:be:9a:ae:b0:ed:1e:5e:54:6b:bb:
16:84:9a:25:3b:00:a9:f7:71:36:e0:a1:75:3d:52:
7c:42:e6:11:46:79:80:45:5d:d5:d3:76:52:34:ac:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:20:3E:B7:17:69:7F:6A:D1:ED:6F:C0:20:2E:16:DB:BA:D6:3F:1C
X509v3 Authority Key Identifier:
keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6a:9c:6d:95:63:54:82:20:44:2c:9b:e2:46:32:9d:87:76:
b3:af:0b:94:7a:5c:15:a3:a8:8f:1c:42:d6:bf:fc:77:d2:c9:
e2:5b:1a:52:07:52:d7:78:10:0d:5e:c1:89:3d:a7:c6:4f:86:
aa:2c:a4:55:20:7a:54:ee:23:32:63:c6:63:be:ca:d7:3c:39:
af:3f:e3:08:b1:99:98:93:73:25:dc:b9:78:2e:f4:dd:65:5f:
8a:a9:81:93:5f:a8:8f:12:c7:4c:64:65:30:93:b0:b4:ad:22:
c8:0a:46:b1:47:a5:88:9a:cc:d8:cf:6e:ec:99:db:5a:4a:bb:
bc:4a:54:bc:3c:d5:f0:df:c1:10:87:f6:db:ee:11:5f:94:b8:
ff:02:0a:5f:88:19:fb:16:10:20:9a:3c:7c:c3:8d:1a:fb:47:
f7:e2:6a:f4:6b:88:e0:43:13:75:28:16:3d:65:fa:14:e5:fc:
79:bd:d8:d8:ca:fa:14:0a:5e:a1:95:36:40:fd:bd:26:e0:13:
17:94:46:ec:c4:bf:6d:ba:dd:15:97:8a:01:9e:4b:ad:9c:30:
39:f0:8a:e9:33:bb:eb:60:fc:49:32:74:dd:ff:f6:02:06:ea:
9a:56:1a:bf:5e:f8:2a:e0:de:02:53:c5:25:8a:6a:3b:41:59:
4a:fe:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:36:01 2025 by rpki-client