
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
File: z13l9P7Bb1FvC8TWMcJidmP5BfM.mft (raw, json)
Hash identifier: 01b3+IY10JyfjUOztxP/0JblnpjhBCnib3pR3FzKt58=
Subject key identifier: 51:F6:5B:B5:08:77:C5:CB:0A:AA:C8:90:2F:B7:08:97:A8:FF:FF:9A
Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
Certificate issuer: /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Certificate serial: 0197CB7125848B6B1B981D8DEF7A08BB501C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 14:01:19 +0000
Manifest this update: Wed 02 Jul 2025 14:01:19 +0000
Manifest next update: Thu 03 Jul 2025 14:01:19 +0000
Files and hashes: 1: LzSQuYv1x63WY7QfqJCJtkZHVLg.roa (hash: wpzsWwm4YF25nKdgTs214tQfh9B7Ss09QnFGWVON9kQ=)
2: z13l9P7Bb1FvC8TWMcJidmP5BfM.crl (hash: LJB7KvKcam85lIzVsj2kbMPOPrKCEXHXQ+8p/NcOIO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:71:25:84:8b:6b:1b:98:1d:8d:ef:7a:08:bb:50:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Validity
Not Before: Jul 2 14:01:19 2025 GMT
Not After : Jul 3 14:01:19 2025 GMT
Subject: CN=51f65bb50877c5cb0aaac8902fb70897a8ffff9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:f5:b3:46:88:89:3f:4c:72:33:43:4f:2f:
5e:c7:1d:5e:8e:3f:ee:48:53:c8:d3:43:92:f6:b1:
80:09:94:27:a2:38:7d:a2:19:a0:55:af:33:fa:65:
e8:46:40:a2:00:f9:7e:cd:ae:52:b5:d0:d8:03:07:
20:67:fa:be:61:b8:47:ce:cb:21:69:3f:41:c1:14:
89:a9:e2:2a:9c:01:9f:9d:ec:fc:30:ee:6b:ce:5e:
91:73:2a:ad:72:1f:34:fa:ef:04:da:c2:4f:76:70:
6b:bd:2d:39:61:bf:96:20:f7:b3:96:3d:d5:bc:18:
80:9c:8d:17:9d:e1:dd:0d:74:b2:af:d7:93:8b:8c:
96:94:ac:c4:e2:c7:91:c1:25:c2:6a:8b:5a:cb:d8:
09:66:c3:c1:da:14:a5:67:b7:5c:02:36:7b:0c:9a:
00:a1:5c:6c:6e:9d:a5:71:5a:f9:91:38:71:02:55:
9b:e9:bf:38:5e:02:55:65:91:8f:29:4f:f6:db:47:
5c:7e:a4:49:88:29:b0:a9:fb:99:c2:dd:c9:dc:84:
95:bc:9d:2a:e7:00:02:1a:d7:a9:9d:e3:1a:32:e0:
8c:37:ef:1c:ff:58:f3:5f:5c:dd:6f:8d:4c:ac:d9:
f9:6b:76:c6:13:07:d1:c2:96:99:23:e3:fa:e0:c2:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F6:5B:B5:08:77:C5:CB:0A:AA:C8:90:2F:B7:08:97:A8:FF:FF:9A
X509v3 Authority Key Identifier:
keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4d:26:5a:76:db:f9:25:66:fd:3a:c0:58:b1:c0:a3:23:54:
4c:e4:f4:f7:3b:29:3d:2f:ee:b4:8e:7b:d0:aa:33:e2:6c:02:
68:83:db:f8:28:d1:5a:74:b1:5b:4f:4a:88:52:86:b0:68:d5:
e9:f7:c3:bf:9b:b8:58:51:bc:46:9d:d7:eb:2a:09:2d:ef:7e:
0f:b8:ca:de:b2:2f:d2:7d:14:68:6c:bf:95:64:b7:87:cf:93:
e5:d8:63:ce:8b:d1:a2:1f:c5:0e:98:5e:cf:c2:01:f8:d8:d0:
9d:e6:46:57:ad:a1:15:f1:fe:0e:a2:71:53:42:27:01:44:3e:
ea:b2:dd:57:2a:fe:b2:55:77:9c:4e:35:8c:26:3a:03:ee:df:
66:53:c5:25:a3:d4:e1:4c:53:99:c0:a4:ab:b9:50:8c:19:ef:
8e:61:f8:e6:77:f4:e2:4b:1e:c8:14:a1:ba:ef:37:5a:7f:c1:
5e:6a:65:d9:b2:10:26:df:a8:5f:ca:63:37:45:88:d3:43:98:
09:ab:3f:75:5b:7f:8b:d3:88:fb:47:5d:27:28:20:fc:ff:ac:
fd:0a:db:1c:d2:ab:ff:d5:4a:69:16:ba:4b:45:f9:48:73:6d:
0b:f8:91:c4:53:df:0a:5c:a0:84:3f:79:e6:31:70:7f:8d:b4:
42:66:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:03:53 2025 by rpki-client