Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier: nvi1XTz7TMG96HVV9g3rNmvOHzfVS0+60YGp9qT2r88=
Subject key identifier: 40:7A:26:6B:85:5B:E9:61:89:5D:19:06:32:FF:9B:26:80:C5:34:E5
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 0197C5383C994910EC2962A84CA5C2F4ED59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 09:01:26 +0000
Manifest this update: Tue 01 Jul 2025 09:01:26 +0000
Manifest next update: Wed 02 Jul 2025 09:01:26 +0000
Files and hashes: 1: 3XfxhYPaNkk8RYgtHf2GQ9-31bw.roa (hash: IyuGzJvfjXAVgnfQEKPJlaaX+BmI0xIhxqPUz3ur7Ug=)
2: K-1wTW4J6sLpv-6DuCiwUF12vdI.roa (hash: n2u+VQEAXcWUcGFe9BbTAMBCmji0TY4jRMY2BGuQA34=)
3: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: YZfMcOFHAyzXesEL+aqUxgg30jz0LoDCfBrrRzlhfWw=)
4: tC9oEvPrRK3aKuK17Fq_gw6oxGU.roa (hash: V3atHxuVAp6RmJ/WmMRTwEnC2jY5957dy0nURReA0co=)
5: zeoM8BTDMIvmahMcB90qnpwzClY.roa (hash: kC/8T/vBTQ+SF6IsbbebB8UCkgdezLGje3ANXS8WqT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:38:3c:99:49:10:ec:29:62:a8:4c:a5:c2:f4:ed:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Jul 1 09:01:26 2025 GMT
Not After : Jul 2 09:01:26 2025 GMT
Subject: CN=407a266b855be961895d190632ff9b2680c534e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:d8:fa:88:93:c8:0f:26:1d:7e:33:70:52:
23:9c:86:69:a7:c4:1d:73:d3:e5:c9:94:3a:72:06:
0e:fb:13:bf:fe:11:9a:6f:09:2f:0c:47:f5:f6:0b:
3f:9f:27:50:1a:77:ee:f8:eb:b8:2d:6a:d5:07:b3:
52:ce:0e:49:34:f2:bf:b2:c7:ae:7e:06:2d:91:6c:
5f:3d:21:59:3a:61:3b:b7:40:16:35:9c:02:ab:fc:
6c:8f:f2:4b:02:ed:65:84:e7:a2:49:7c:28:b6:09:
c1:88:67:a4:e3:0a:0c:fa:29:c5:53:fd:cb:50:43:
6d:e8:8e:d8:dd:6a:6d:2e:85:5a:10:ca:c0:cd:ea:
de:0c:f6:2f:52:0b:65:20:20:f0:e3:1d:46:e7:fb:
08:d3:2c:c8:2f:d5:c9:b7:50:78:c2:10:b5:95:4e:
3d:56:e8:5f:83:b8:37:e2:5e:a2:49:ea:e8:9e:e2:
be:de:ba:5d:e2:84:0d:90:e6:3c:c6:22:09:e3:60:
a1:8a:59:27:b4:d1:65:3a:9a:40:3e:25:25:90:27:
63:57:03:48:a9:a8:b5:35:64:81:21:ac:1f:c8:c3:
2c:13:5e:68:6f:2c:8d:c0:9a:3c:fe:83:0b:ee:1f:
17:d2:99:f1:c1:61:a2:6e:c4:28:22:57:d7:5c:80:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7A:26:6B:85:5B:E9:61:89:5D:19:06:32:FF:9B:26:80:C5:34:E5
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ff:a5:b2:68:b2:45:3c:14:ca:5c:da:7f:39:2a:8c:d6:ef:
fc:b4:c0:35:d7:2b:05:06:91:b9:5f:b4:31:e3:1a:63:fa:93:
ea:c2:c3:bf:c6:f4:76:08:5b:7e:cf:21:12:af:82:3c:5a:ef:
b0:54:88:f0:9b:85:9d:52:c4:f4:f9:97:dd:c5:2e:f5:e1:25:
a6:02:dc:4b:b2:4d:8d:8a:fe:8d:f3:37:9a:b7:83:0a:e8:e6:
b2:53:fa:2e:86:39:8c:4a:51:95:63:a9:e8:16:77:21:0e:83:
c9:30:b8:bc:3b:d1:fd:c4:20:33:9f:c2:91:6b:9c:7d:43:a8:
2b:c2:26:11:4a:17:e5:64:15:0d:7b:70:d8:2f:d8:26:1a:07:
45:be:01:fd:69:c0:26:27:9e:6a:c6:9e:db:3a:76:58:22:6b:
c4:59:6f:06:27:e3:b0:b4:6f:c2:5b:5a:04:a8:5f:df:06:a5:
3c:a4:fd:3e:99:4b:78:f3:10:59:e7:b5:b6:23:86:02:c6:37:
c9:f7:04:fb:a0:2b:4b:5a:c3:4f:0d:07:f5:e6:4f:c7:6f:64:
6b:3b:f2:62:b9:a4:72:34:90:cc:a3:23:6e:f4:cd:98:b3:5b:
71:81:fb:6f:14:fe:b7:a0:02:6e:f2:41:3d:f4:96:59:f3:76:
04:6b:28:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:06:07 2025 by rpki-client