Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
File: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft (raw, json)
Hash identifier: sie4RVbN1/IATdOu0oUxj8oqXkMZvy8GbgoC194pja8=
Subject key identifier: 7B:20:F8:7C:0D:47:B9:8E:FB:5F:FE:E2:4A:FB:08:29:B1:99:CB:48
Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Certificate serial: 01974B562F78D6B0C113BF3A2D1ECB7A0584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 17:00:28 +0000
Manifest this update: Sat 07 Jun 2025 17:00:28 +0000
Manifest next update: Sun 08 Jun 2025 17:00:28 +0000
Files and hashes: 1: DoDdOAUlW0tUPkZU1ktuElEn3oE.roa (hash: KlbVm+I0oV0L2Y/KM4GiRobC6enmDYLnzhNJQOXiNU0=)
2: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl (hash: 2vQo9hVP2OLPdUCntECJex8+Lp+RIFHdsNPdMU8bXps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:2f:78:d6:b0:c1:13:bf:3a:2d:1e:cb:7a:05:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Validity
Not Before: Jun 7 17:00:28 2025 GMT
Not After : Jun 8 17:00:28 2025 GMT
Subject: CN=7b20f87c0d47b98efb5ffee24afb0829b199cb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:bf:2a:92:4c:d8:13:e2:56:d6:92:19:47:
71:95:68:6f:19:0f:d8:5d:3e:41:32:2b:e2:80:b6:
14:ba:a4:4b:2c:fd:96:05:ba:49:d5:c5:57:96:d5:
b2:4c:51:74:95:dd:cc:b6:6b:2c:f5:4f:fc:85:83:
05:15:38:d9:94:55:dc:2c:d5:c9:38:95:6b:78:d9:
36:9f:dc:2c:e2:57:c0:6e:8a:fe:e3:c6:73:6a:3d:
2c:39:2c:52:bf:7c:58:0a:87:9d:fc:50:10:07:c3:
50:67:df:3b:de:a1:cf:66:72:2c:15:03:57:ea:eb:
8f:11:97:cc:e1:c2:1b:04:93:52:2a:54:8d:41:4c:
e8:73:ab:f7:cd:09:ba:41:f1:ae:41:57:bc:ee:cd:
06:c7:f7:f7:65:b4:db:52:48:91:04:d4:7b:83:cd:
05:da:c5:bc:5f:6c:87:4e:f7:8d:e0:6a:6c:38:dd:
ca:24:bd:7a:29:ae:90:ed:4a:d4:0b:b6:d7:3c:04:
61:af:39:2d:84:eb:d3:8c:0a:a5:a3:d6:41:b2:79:
f6:c0:bf:6f:11:1a:ef:33:fb:2e:b7:8e:cf:3d:65:
f4:3d:e1:d6:a7:5e:da:f0:29:60:4e:8c:94:04:9d:
73:5e:04:c7:04:6d:b6:9d:d5:0c:2c:21:3c:a8:25:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:20:F8:7C:0D:47:B9:8E:FB:5F:FE:E2:4A:FB:08:29:B1:99:CB:48
X509v3 Authority Key Identifier:
keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:01:d8:97:74:a7:8f:a5:6d:a5:5a:03:0b:16:9c:36:ed:48:
3a:c7:a9:88:7c:f7:fa:7c:9d:3d:49:4e:48:d8:a2:1d:ef:67:
8c:01:ad:db:ea:65:10:0f:de:20:bd:54:74:d3:6f:5a:a0:ed:
6f:bf:6c:6f:72:6d:1a:1e:f9:03:81:b2:8c:ac:ae:f1:d7:3f:
68:c7:39:30:32:ab:57:29:14:83:2a:c1:08:a9:d0:fc:dc:fa:
e5:42:4b:6e:ac:98:cb:61:af:ee:ca:01:28:77:56:c8:e5:5f:
9b:d3:ff:ac:3f:5b:99:7f:39:98:2e:18:9e:30:a1:50:67:87:
cb:ae:cd:a0:e7:9f:8e:35:17:6b:04:49:d7:69:ea:97:27:8f:
a7:c8:f0:93:26:12:58:55:05:8a:4a:fd:86:ec:98:e4:3a:cf:
f9:bb:ab:ae:d4:16:3c:91:74:90:3e:af:e8:3f:7d:96:25:ef:
26:f2:68:d0:37:0f:e2:ab:2f:6f:c6:e4:a3:92:a0:cc:00:ab:
09:49:7f:41:2e:b6:c4:f6:69:65:6b:2e:e1:dc:c6:b6:30:8d:
50:f6:62:eb:12:4b:da:1b:f2:94:50:e4:b8:1a:5a:27:21:69:
03:a1:52:ad:4a:83:70:7d:95:ce:bf:aa:8e:40:b8:12:95:82:
77:e2:4c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:08 2025 by rpki-client