Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: 1dSteVcLvIBPevrIczmwrExGite/F8EaqNx8uDWsiQ8=
Subject key identifier: 23:88:6B:10:60:11:8E:CD:C3:BA:0D:AD:A2:93:6D:E2:A7:AD:D0:AB
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 0197B7B3326A944B0A2450D7252D008B5DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 03D0
Signing time: Sat 28 Jun 2025 18:01:03 +0000
Manifest this update: Sat 28 Jun 2025 18:01:03 +0000
Manifest next update: Sun 29 Jun 2025 18:01:03 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: /M00YKC0fQ3qs9YJRFcpP1F0uO2JheTFHMRJ6RETW/M=)
2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=)
3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:32:6a:94:4b:0a:24:50:d7:25:2d:00:8b:5d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Jun 28 18:01:03 2025 GMT
Not After : Jun 29 18:01:03 2025 GMT
Subject: CN=23886b1060118ecdc3ba0dada2936de2a7add0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:bf:37:98:93:5c:a2:9c:6d:01:52:28:01:
3f:c6:8b:e2:c5:50:c0:08:7f:aa:2f:3c:ad:be:90:
df:bc:39:41:4a:fc:2f:63:9f:a5:79:82:25:7d:5e:
d7:a7:87:63:42:9b:8a:ca:a7:cd:04:b9:0a:2c:87:
50:0c:bf:f2:26:c0:c2:74:90:33:9b:b0:c9:72:42:
da:53:ae:82:e6:26:c3:df:b0:ee:2d:10:1a:e6:8c:
8e:f1:af:aa:1e:17:9e:09:2f:94:ef:4a:6c:8b:1e:
21:9d:a0:4f:d3:1a:32:e4:b2:f4:24:ae:0f:79:0a:
a5:50:84:f0:66:b3:47:84:f2:26:4e:fc:0b:ad:c5:
f5:1c:b9:4a:b4:0a:70:04:35:73:05:1b:49:69:d3:
75:db:61:4f:72:04:fa:a0:32:0a:49:1a:bd:6d:c7:
43:43:c7:8b:99:3f:8d:f7:19:c9:cb:72:2f:64:0f:
65:97:ef:f6:6c:21:f4:57:d9:3c:19:bb:d1:e6:70:
26:ee:36:1d:a8:34:da:73:90:4b:1b:a3:bf:52:81:
2c:c3:ea:1e:68:59:5d:5d:32:8a:e7:ee:89:bc:57:
4c:bb:02:86:8f:ad:30:73:13:3a:18:a0:1c:ba:04:
e2:fd:7c:30:1d:49:65:00:3f:64:c4:35:fb:c6:63:
a8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:88:6B:10:60:11:8E:CD:C3:BA:0D:AD:A2:93:6D:E2:A7:AD:D0:AB
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b1:87:f3:a4:20:e5:32:34:8f:24:6a:e9:2b:24:5b:07:9e:
af:b4:48:5d:ad:ea:9b:eb:1c:ba:45:41:78:83:94:11:f3:93:
00:12:6b:75:3c:7f:2e:71:be:48:17:82:96:69:a8:82:51:39:
60:bc:f0:ed:d0:1e:7b:dd:15:54:80:85:19:db:57:90:c7:19:
84:b1:0e:f2:b8:1e:1f:bb:88:c5:03:f3:62:91:d5:12:24:2c:
a5:53:8b:86:6a:35:21:57:1a:70:7f:fa:65:e7:e6:de:87:9e:
17:4f:04:93:99:0b:9c:3d:db:bd:14:62:ab:b4:3a:50:ee:4d:
b6:04:ad:91:11:1f:7c:b1:02:a7:6f:f1:26:dd:87:a7:94:dc:
d1:c3:2a:dd:29:01:03:78:c4:2a:4e:0f:30:06:f5:a8:3c:c1:
69:bd:38:1a:51:f2:01:57:e6:99:f3:3f:a4:1a:89:7b:45:d4:
0e:f0:fe:b9:0a:33:70:06:c2:61:42:ac:f2:48:d3:f0:48:a6:
af:40:3e:e2:ef:02:b4:2d:8e:a9:c2:da:ed:ce:57:da:d8:d6:
33:10:d6:03:25:10:fd:8b:85:1a:c5:90:fc:67:1b:22:76:a0:
3d:a8:f3:6c:7a:14:e2:05:05:7b:b3:ce:ef:3b:e8:ae:14:2b:
cc:a6:7b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:37 2025 by rpki-client