Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: 86kcPXvjbcaWbXjPApesp3LIZsO0Een4hHSUa4bg+WA=
Subject key identifier: CA:AA:1C:EE:EF:F1:4C:99:12:56:9C:A5:9B:F3:EA:D6:74:66:01:10
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 0197B6A1399EFCDA1E7DB4239810262F91DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 15FC
Signing time: Sat 28 Jun 2025 13:01:48 +0000
Manifest this update: Sat 28 Jun 2025 13:01:48 +0000
Manifest next update: Sun 29 Jun 2025 13:01:48 +0000
Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=)
2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=)
3: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: 5scEi3vCh4QHEws39xbopLrbhplDeiIM4apgW+5LlFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:39:9e:fc:da:1e:7d:b4:23:98:10:26:2f:91:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Jun 28 13:01:48 2025 GMT
Not After : Jun 29 13:01:48 2025 GMT
Subject: CN=caaa1ceeeff14c9912569ca59bf3ead674660110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:b4:60:42:b5:e8:61:40:99:cc:db:e1:7b:
8e:3c:75:25:91:35:e5:90:c8:11:86:b7:ae:6f:3e:
3b:be:47:85:63:4c:5a:2a:c4:58:b0:51:ee:84:a1:
1e:52:23:68:d2:49:71:76:6b:ef:d5:df:d3:ed:d9:
bf:ca:a8:0a:30:aa:7a:e7:be:89:86:a3:0e:7b:b9:
fb:a1:8e:0c:38:0e:55:97:9f:a6:3d:03:44:11:75:
f8:e2:5f:2a:62:5f:46:37:ac:a2:5b:fc:30:10:2f:
a0:f1:12:cf:ff:7e:14:29:43:80:b4:e5:46:a0:a9:
22:8e:f0:55:39:b4:8c:7c:43:b4:68:84:7e:14:b5:
9f:58:97:45:ea:17:97:cb:3e:32:03:4d:b3:21:61:
b5:9b:84:ce:ca:64:47:6c:4d:57:08:14:b6:fa:f8:
9b:6d:ba:59:1f:90:bf:6a:8f:50:59:ae:57:5d:4d:
2a:67:6d:b0:f7:af:42:8b:0f:e2:b1:f1:cd:dd:ba:
b5:b4:28:55:2a:3d:fa:ce:8b:e8:31:bf:4e:f5:ad:
df:60:21:9b:91:ca:e6:6d:6d:e1:87:84:63:c7:e6:
73:6e:af:01:57:2d:b0:11:d9:b4:06:96:9a:f0:90:
c5:4c:86:4b:30:ae:36:d1:bf:f3:ec:95:eb:86:47:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AA:1C:EE:EF:F1:4C:99:12:56:9C:A5:9B:F3:EA:D6:74:66:01:10
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f5:60:43:d7:7c:37:d2:0c:62:c9:d3:f2:bc:fe:ef:70:ef:
80:cd:92:f7:5e:48:be:5f:8e:4a:10:bb:a0:b0:e4:02:da:97:
76:dc:ba:0a:bd:b3:17:f9:97:1e:0a:73:5a:77:f4:e9:50:4c:
92:74:3f:43:d6:4e:1a:8e:38:de:39:11:70:3f:e0:fa:85:b7:
fb:b5:c3:87:69:d7:aa:db:7a:a3:ff:00:d4:aa:84:59:82:19:
dd:8a:72:e9:f8:72:71:0f:89:b7:79:17:50:02:7e:45:fd:bf:
c9:bd:09:74:42:4d:d1:dd:73:c0:d5:a6:5f:83:55:f0:19:2a:
61:00:30:a5:5b:c5:bb:d8:95:3e:83:ee:50:e5:6d:e4:5e:2f:
29:53:e4:98:d7:a6:47:be:b5:df:bc:7d:f9:c1:1e:69:1a:60:
d0:37:42:b7:51:53:83:6a:6b:0c:bd:03:7d:1f:2c:84:03:b6:
4c:0d:da:a2:39:62:20:5d:e4:a0:02:61:2b:2f:df:86:95:41:
f2:ec:5a:4b:ff:a7:2e:03:f5:d7:57:eb:79:5c:01:3c:13:25:
54:de:b1:d4:d9:25:25:e9:ff:65:27:e0:ae:4b:82:05:7f:2e:
68:76:92:94:b7:1b:71:6f:59:ed:16:44:57:21:e6:81:e0:e4:
76:99:ae:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:49 2025 by rpki-client