Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: Ab618ilXbOmfWuAZjURYeVI0IUVkHMmFmRQX8ZXUvFg=
Subject key identifier: 7D:D4:51:10:0B:80:D4:8B:14:81:EA:05:C5:11:B4:C2:0C:8A:8E:30
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 0197B8FCC00E66D5C4B67C3D0CDF8CE6411D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 00:01:01 +0000
Manifest this update: Sun 29 Jun 2025 00:01:01 +0000
Manifest next update: Mon 30 Jun 2025 00:01:01 +0000
Files and hashes: 1: JauXkuBrJ-Jj9T7iuekamPiA2KM.roa (hash: +JxWUzvZHawG/TTDHvvjcR4tNCgM0dBRjS+5hf64dGM=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: Vyot+stuvQgde848N2Z+k88NXTCw0rasyZ375Fru2MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:c0:0e:66:d5:c4:b6:7c:3d:0c:df:8c:e6:41:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Jun 29 00:01:01 2025 GMT
Not After : Jun 30 00:01:01 2025 GMT
Subject: CN=7dd451100b80d48b1481ea05c511b4c20c8a8e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4a:d9:e8:9f:8a:d7:6d:f9:4e:b8:dc:a7:56:
47:5c:37:e7:ef:79:a1:1b:1b:95:77:8d:06:ae:09:
e0:7d:aa:09:29:1a:24:f0:4f:ba:cf:33:b6:17:20:
bc:f2:ed:96:e5:59:c0:8c:f7:07:6c:85:8e:eb:72:
99:0e:5b:78:17:d6:30:8b:2b:23:15:83:56:6f:bd:
73:73:50:40:0c:28:e6:96:9f:28:f6:4a:e0:0f:9d:
90:2a:70:dd:ff:2d:73:38:9b:f6:e1:9d:ec:b0:18:
bd:37:da:65:b4:9b:f0:ac:e3:ea:a7:91:bf:ec:73:
f3:8f:81:86:76:17:a8:38:88:25:cf:32:68:56:06:
81:94:41:ba:9e:b2:30:11:d9:98:62:c8:fa:c1:f4:
30:01:b5:80:5a:01:d7:40:68:40:35:00:9d:86:15:
75:aa:1f:06:80:d8:3b:bf:fb:94:02:6a:80:2d:53:
91:92:60:4f:b6:d4:43:f1:a7:cb:d9:bd:d3:a1:b0:
42:76:25:a9:0c:60:31:dd:dc:c6:f1:eb:e3:eb:51:
80:ca:26:0f:2f:7a:70:bb:05:72:76:af:27:d0:03:
75:a9:75:43:71:aa:6f:ad:ba:88:6e:e5:05:6d:56:
dc:86:6f:0b:18:57:0c:36:f7:97:42:86:d2:bf:42:
9a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D4:51:10:0B:80:D4:8B:14:81:EA:05:C5:11:B4:C2:0C:8A:8E:30
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:38:fa:3c:bb:af:d6:e0:5e:b3:d9:c6:79:ac:2e:ef:cb:b5:
64:eb:c1:68:88:39:ac:6c:df:37:31:47:89:aa:a9:d3:b9:82:
48:32:65:f8:ba:31:72:97:0f:17:43:b3:52:cb:f8:de:4d:2f:
17:4b:1d:ae:8c:c8:3c:5b:51:3a:74:ef:4f:be:66:e7:1f:43:
eb:e8:d8:e2:ff:5a:a4:09:de:ce:d1:c0:a8:ef:2e:6c:7d:50:
87:db:01:ae:9a:3a:ea:5d:e8:25:f6:b8:55:f7:d4:5a:6d:a7:
42:21:8b:8b:1d:bc:08:8f:3b:ad:f2:f6:74:61:66:ee:e6:33:
ff:3c:57:e5:86:4b:2d:f8:d1:58:a0:18:09:68:6f:c1:64:b8:
1e:7c:de:d6:64:5d:cc:e6:9e:1d:04:28:eb:75:53:5c:37:7e:
32:1c:89:54:8b:2a:6d:5d:94:e1:ee:af:c9:a8:df:d8:4f:eb:
8d:74:d9:fb:4f:41:a9:b0:b2:cc:15:1f:99:f6:8e:d7:f3:7d:
9c:92:42:c9:75:6e:c8:58:84:1f:4a:ed:16:95:68:0f:ac:3c:
36:53:3c:21:2f:64:42:21:46:4f:92:a2:5c:91:be:7a:8f:93:
7b:28:8c:2f:9f:1b:f0:ce:35:52:29:d2:5e:d5:0a:73:1a:8b:
09:e2:53:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:25:48 2025 by rpki-client