Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: eChUTR9dkKB/ZxUPkt1psgNo5lXZeDc+TODkcAABrCo=
Subject key identifier: E1:D7:D0:E8:3C:27:E4:98:BE:D7:AB:34:A5:D2:FD:37:C2:A3:C2:FA
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 01984B5540B3039D08A8EE26067BFD031891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0CC4
Signing time: Sun 27 Jul 2025 10:02:14 +0000
Manifest this update: Sun 27 Jul 2025 10:02:14 +0000
Manifest next update: Mon 28 Jul 2025 10:02:14 +0000
Files and hashes: 1: 3p5nhLsOjt1h69C859DNKbB2MQU.roa (hash: fomkhfBpGlBS0AfRGY4b/l04Zngyijm1T6FQ0+oESso=)
2: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: bS2nBdqUhvsIiMZ2Wyc8+W1KtESE/uqAatOqX+WiRZg=)
3: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:40:b3:03:9d:08:a8:ee:26:06:7b:fd:03:18:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Jul 27 10:02:14 2025 GMT
Not After : Jul 28 10:02:14 2025 GMT
Subject: CN=e1d7d0e83c27e498bed7ab34a5d2fd37c2a3c2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:70:9b:34:1b:51:17:06:8a:44:b1:9c:9e:
4a:89:f7:f0:f2:91:3a:d7:e7:34:38:c7:ad:55:9c:
8d:e7:33:a8:c6:ad:1b:39:9e:2a:39:f4:08:6e:be:
87:bb:5c:e5:b7:c7:1f:eb:f4:1e:5c:36:1a:d9:21:
b1:d1:f9:32:03:b2:b1:d3:41:37:36:25:fe:13:de:
d7:a1:1c:0f:ae:f7:72:49:7e:ad:f2:ea:c5:b2:c3:
22:a4:4d:ab:ff:fc:3b:88:ba:aa:fa:42:7d:2d:9f:
c1:1d:9f:a7:26:26:b1:54:6b:43:96:a2:3a:18:4d:
03:b7:d2:0c:92:65:11:3b:68:c2:52:f4:59:de:eb:
49:e5:c4:4e:a1:5f:65:9a:00:13:a2:c8:85:34:a7:
27:8b:ab:5e:d6:c8:1d:04:f6:e7:51:b8:f0:6a:a7:
15:53:01:71:0d:fe:34:81:0d:dd:ed:80:96:ca:fb:
09:63:8f:49:f4:a4:b9:ab:2e:b1:e1:f1:12:26:a7:
29:51:96:76:95:ce:17:22:03:df:e6:b4:ea:77:c7:
bd:3e:28:da:c7:35:bc:a0:5a:f9:d4:3d:f2:47:21:
1e:25:ac:d6:2a:70:8a:48:87:c1:78:1b:1b:e5:8f:
4e:26:b5:13:e7:c9:80:96:46:63:6c:2a:ec:9d:b7:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:D0:E8:3C:27:E4:98:BE:D7:AB:34:A5:D2:FD:37:C2:A3:C2:FA
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b1:40:7c:13:e0:09:2f:0f:b8:5a:8b:c1:5b:c4:18:ea:43:
32:8c:63:f3:a7:31:1b:eb:68:28:e2:db:fc:48:d3:28:7f:40:
c3:73:d2:f1:47:f7:fb:64:64:f4:a9:b4:f3:15:a2:f7:b2:2a:
f3:c0:31:04:e8:18:12:e8:78:36:3e:e1:d0:ef:ab:e5:d5:f1:
b9:22:66:06:85:81:e8:68:a0:e4:b8:b7:ba:41:e6:0f:95:68:
0f:14:3e:ad:b0:31:1b:1a:a8:26:5e:2a:a0:eb:63:45:2d:e3:
f1:4c:be:9b:9d:47:fd:8d:94:ff:d1:bc:54:b0:cf:c6:56:3a:
de:76:b4:a3:a1:56:87:7a:34:46:df:07:26:4f:c2:8b:e4:a4:
2c:0b:70:e7:d0:a1:2c:a2:c7:81:5c:6b:c9:6b:e8:2e:81:d4:
7f:da:93:4b:14:98:56:8d:5a:ec:3c:e7:90:39:0d:ea:28:ea:
07:79:af:a1:05:d4:65:56:07:cc:3d:7f:f8:0b:d6:cb:3f:cc:
01:e6:27:9f:dd:6b:7e:e2:a0:1c:d7:dd:07:01:8b:ae:49:ac:
d5:b3:59:eb:9c:92:b2:74:c4:5c:c4:4a:07:53:02:95:d8:8a:
8b:25:d7:1f:65:5c:db:75:55:4f:e9:fd:66:be:f9:92:87:54:
9c:ac:73:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:54:22 2025 by rpki-client