Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: LQSQqcgo0CX8KtcjI1brYcOfdcvBREE8mJgsXDn3YAw=
Subject key identifier: 8D:8D:BD:7F:10:E2:CC:1A:2A:F0:0E:0B:A1:CE:16:8A:CB:B1:31:1D
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 0197B7EAC9029F5B3DE43FECB1F2D13AA7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:46 +0000
Manifest this update: Sat 28 Jun 2025 19:01:46 +0000
Manifest next update: Sun 29 Jun 2025 19:01:46 +0000
Files and hashes: 1: 08D6A8hDDz8EmWz4TWfTzIZtuw4.roa (hash: c9bmK28UA0mGlnzCRW7yMDsTOGRfKW7u6iqtfGSyl+c=)
2: beEuyHtj6-YxYYEBP6CwFITtXCo.roa (hash: 15tHsK0ns4vomu3PpRO0w+CWAE5FrW5s/l3utsU9ZCI=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: hH34FZRsfh326oK5v9WfHAiVaUs7nKfh8vhWUe3lKbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c9:02:9f:5b:3d:e4:3f:ec:b1:f2:d1:3a:a7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Jun 28 19:01:46 2025 GMT
Not After : Jun 29 19:01:46 2025 GMT
Subject: CN=8d8dbd7f10e2cc1a2af00e0ba1ce168acbb1311d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fb:df:e4:95:4e:46:f0:98:c9:b5:6b:7d:db:
9c:a1:5c:71:0b:3a:ea:21:a8:3d:a8:0d:4e:96:0b:
c5:94:2f:b7:c8:cc:30:b0:2b:31:a3:1c:a9:f1:01:
f3:e1:78:6b:bb:48:09:36:ef:f3:0c:f7:fd:78:de:
87:ae:23:bf:9e:18:21:81:ac:e3:d5:62:4f:7c:7c:
f2:01:b3:ad:cf:8d:a4:ee:42:27:72:05:12:e6:ab:
0b:36:cb:00:01:dc:37:55:5d:40:f7:ac:57:ac:eb:
a1:40:e0:2d:9a:55:01:85:46:3d:24:30:97:03:99:
15:a4:f1:ef:bd:91:c5:9b:1d:d7:56:67:ef:dc:f7:
70:44:59:84:4d:1e:a0:86:5d:ba:52:1b:ca:e6:aa:
9f:1b:6f:88:6d:2b:69:8d:54:4b:85:d8:37:be:81:
be:dd:4a:76:6b:53:1e:c3:91:f5:9f:9c:51:d5:95:
9d:ec:9b:be:11:f7:3a:44:ad:d5:b4:56:28:96:86:
60:da:25:42:37:82:46:a9:83:ad:6d:42:c3:4e:60:
73:2d:0a:b1:9e:58:53:1b:6e:08:0d:5c:bd:63:d8:
ec:48:92:de:ae:9b:2a:e8:b4:04:ed:c6:26:4c:ea:
2f:5d:92:ae:52:a1:5c:4a:db:c6:3b:c3:cd:f5:7e:
63:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8D:BD:7F:10:E2:CC:1A:2A:F0:0E:0B:A1:CE:16:8A:CB:B1:31:1D
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:be:ad:7f:a1:87:fe:8e:a6:93:6e:fd:35:7f:09:f2:e0:9e:
37:ab:35:15:1f:70:ed:f8:7e:d2:92:c1:5d:6e:6a:b8:f8:48:
0b:97:19:2d:01:d4:64:c2:89:f7:b7:f6:71:3b:48:64:41:97:
99:7c:f0:cc:65:8c:98:c2:07:16:f7:d2:bd:f7:eb:e0:31:27:
a3:ad:b4:3c:5d:d7:db:c5:e7:16:b0:79:78:33:df:69:3d:bb:
38:4a:c6:79:e8:85:fc:84:95:c1:db:63:f8:d4:45:1a:e2:06:
89:9a:e7:80:1a:1a:a0:ee:95:1e:d3:0d:f2:5b:7a:67:a2:0f:
6d:cf:93:3d:9b:ad:fa:48:ff:db:af:f9:47:8b:8a:d7:ca:44:
50:1d:9f:f7:b0:fa:98:09:8b:33:b3:f3:a8:c3:58:82:41:3f:
7d:ca:ef:dd:6b:8d:b1:ea:5c:5b:d3:f4:7c:49:9e:17:17:70:
7c:af:d8:27:a9:6e:ed:68:06:8c:3e:2e:bc:32:f5:54:40:d4:
06:14:6c:aa:84:67:68:fa:e5:e5:2d:d0:3c:c4:80:47:40:ad:
ed:7c:6d:05:fd:88:07:d1:ff:b3:0d:5e:77:b0:07:12:e6:c5:
b7:c9:2a:67:16:25:2b:d2:42:02:22:1d:11:62:ee:ba:7a:f8:
e0:0a:b2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:27 2025 by rpki-client