Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier: mqI1k/sAP7JzDkx7omxABISiaoRzFD5jt8vgM3BeAg8=
Subject key identifier: 50:12:09:F9:B5:A6:F2:CA:98:96:2D:D8:4F:FD:86:D7:3A:6E:35:B8
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 0197C8DE394BB05916BA85637D6824B4CB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number: 13E0
Signing time: Wed 02 Jul 2025 02:01:36 +0000
Manifest this update: Wed 02 Jul 2025 02:01:36 +0000
Manifest next update: Thu 03 Jul 2025 02:01:36 +0000
Files and hashes: 1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=)
2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=)
3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=)
4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: 3sqUDrmzKE/dcBDP/xgw78uDNRLAFE9vrjWy9If7bWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:de:39:4b:b0:59:16:ba:85:63:7d:68:24:b4:cb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Jul 2 02:01:36 2025 GMT
Not After : Jul 3 02:01:36 2025 GMT
Subject: CN=501209f9b5a6f2ca98962dd84ffd86d73a6e35b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1e:77:1e:63:26:8e:85:2a:d5:3f:39:32:7b:
c5:9a:4f:cd:b3:0e:4b:89:51:ce:52:7b:9d:77:08:
3a:23:46:9a:b4:ac:01:05:1c:4e:94:84:3e:4b:fa:
ee:ea:ed:af:ea:98:f7:f8:6c:51:98:f4:3c:f0:7b:
b5:4c:48:39:7a:0b:ff:52:d0:4d:b8:60:68:27:ea:
59:e9:0e:d9:b2:6e:57:57:20:3c:78:97:38:75:7b:
ec:25:be:b0:af:78:b6:a3:45:67:38:4a:3c:ac:f7:
41:67:cc:38:b9:0e:32:0a:ea:a7:34:03:a4:1c:31:
3c:a9:32:02:b6:b0:8d:88:4f:07:20:4c:ae:69:3b:
7a:0d:04:dd:f8:47:49:52:8b:7d:4e:11:7c:4d:77:
39:de:02:3a:34:85:d5:4f:de:0f:73:19:1b:29:6d:
27:a9:e1:00:7d:b1:17:20:49:2a:9c:20:f4:10:e2:
d9:6b:16:08:95:d9:de:02:1f:a5:b0:e1:ad:89:af:
a2:43:22:b6:f6:4d:d9:d6:c2:11:79:77:a1:81:2d:
d0:86:c6:89:d3:b8:4d:12:3d:94:16:c4:4a:36:8b:
a3:7f:d8:39:6b:68:28:b4:d9:ad:c4:07:c6:6d:df:
23:c0:6b:28:13:cc:03:c0:e4:86:20:88:98:8b:a8:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:12:09:F9:B5:A6:F2:CA:98:96:2D:D8:4F:FD:86:D7:3A:6E:35:B8
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e6:51:74:fc:67:6f:f0:93:d9:44:58:b3:08:dc:c0:68:9f:
ef:22:0b:0e:16:2f:5c:5c:3d:fe:f1:d0:60:dc:f1:cc:c1:97:
bb:93:81:d1:ee:8d:df:ea:3e:d9:2e:5f:7a:f9:99:47:b9:da:
ec:aa:8b:81:93:f8:6d:41:36:4b:c1:eb:a8:98:7c:5b:4d:79:
86:73:d7:fb:24:87:d7:e4:b6:04:27:a3:7b:9a:5c:ee:23:e3:
d4:d5:ee:50:f1:27:bf:ed:88:f3:c7:3c:4b:d2:96:0e:04:8b:
d8:13:66:6d:ab:ba:11:77:20:9b:d3:c4:3d:30:1b:ee:a1:15:
61:e3:ca:53:8f:14:4b:e0:6a:45:89:33:b6:30:18:50:7b:a4:
25:da:4a:e0:b3:26:bf:74:6b:c6:a2:ae:10:16:e5:bf:19:c4:
22:f4:de:fc:15:cf:a7:6d:88:e4:75:67:68:05:40:b8:0f:ec:
64:79:7a:3c:79:86:3a:dd:77:7c:bd:3d:a4:75:0e:c7:44:31:
4c:d9:83:d9:a4:b7:aa:06:8d:4a:e3:e2:4c:37:15:4b:14:23:
29:f7:d0:7d:a9:6f:40:d7:a9:8a:04:f6:7e:c4:29:ed:e8:38:
7d:e0:26:ae:a7:ae:65:c9:32:79:d8:b3:b2:b3:a7:b2:64:36:
7d:70:36:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:40:37 2025 by rpki-client