Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json)
Hash identifier: qtTD+FGiTRK36eLLCOyXgn9+3kTZV9/KicmS8nOMhqc=
Subject key identifier: C2:89:72:04:86:A0:7A:8A:AC:E0:B6:95:6C:74:30:68:E7:FD:80:9B
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial: 019748C2DE824B7E2CCFC46B7D68A714A9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
Manifest number: 06A9
Signing time: Sat 07 Jun 2025 05:00:19 +0000
Manifest this update: Sat 07 Jun 2025 05:00:19 +0000
Manifest next update: Sun 08 Jun 2025 05:00:19 +0000
Files and hashes: 1: Sm3lswcII0bf-ALKj_DDpzZvLMc.roa (hash: /Kb0jwUQMRGuhoCXPSsBRGNhGMzqhfM4ypAYr8K7OsM=)
2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: F4UnFrTPi71XT0DB1ngqfjRsuSO0mErwhsl0d1B9ldY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:de:82:4b:7e:2c:cf:c4:6b:7d:68:a7:14:a9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Validity
Not Before: Jun 7 05:00:19 2025 GMT
Not After : Jun 8 05:00:19 2025 GMT
Subject: CN=c289720486a07a8aace0b6956c743068e7fd809b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:ea:80:ce:3c:92:fb:48:cc:0b:76:43:ec:
9b:cc:95:41:eb:7c:07:fa:d0:38:b0:86:45:59:2f:
a7:81:b0:f8:3b:ca:71:69:f3:29:eb:bb:9b:38:48:
26:76:de:3c:a1:fc:91:5a:7a:8b:7b:58:82:9e:c5:
b9:2d:ea:bd:57:64:bf:e0:12:92:60:e9:e4:4b:4d:
ae:ef:0c:f2:07:18:c8:72:b0:2d:cc:fb:8c:89:0b:
03:1b:39:9f:d7:3c:4a:04:41:1b:3c:83:9a:2a:04:
37:f0:87:a5:37:79:43:11:72:47:ba:be:6f:97:42:
9e:eb:56:5c:91:0d:77:ea:62:d4:3d:d8:60:42:ce:
c3:b0:d9:92:aa:39:04:5c:d5:47:1d:16:64:ed:8d:
26:65:95:5d:d4:c9:31:09:53:ef:41:04:6f:e8:09:
fb:f1:f2:7d:54:a6:ca:f7:4c:df:03:07:0c:4a:56:
d8:d7:e9:05:ba:7b:e7:dc:a5:57:7f:84:8a:38:63:
47:64:08:b2:55:3f:e1:57:48:31:d5:3b:4c:f3:d1:
c6:13:fc:8a:81:d7:e9:65:39:c6:c2:61:b8:b7:29:
26:a7:0d:dd:dd:8d:67:a0:72:f9:25:36:d5:37:7f:
3e:5c:6e:22:f7:a2:0b:d7:f0:bb:b6:2b:db:b9:d5:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:89:72:04:86:A0:7A:8A:AC:E0:B6:95:6C:74:30:68:E7:FD:80:9B
X509v3 Authority Key Identifier:
keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f8:74:25:1a:69:64:6b:a9:3e:06:e7:43:21:47:4a:4a:fd:
13:65:36:cb:83:81:48:9d:4f:e0:f8:b0:ce:f1:8a:73:fd:66:
e6:f6:fd:d6:fd:06:c8:f8:89:1b:39:e3:23:2a:da:f5:43:17:
f7:47:a7:12:25:6a:15:fe:69:2b:04:2b:59:b4:18:8b:5f:d5:
f2:e2:09:e7:be:1f:0d:d0:db:08:d4:9d:0e:56:c2:46:1a:c4:
40:8c:8d:0f:00:bf:5c:c9:aa:31:ec:ba:2c:8a:53:6c:50:7a:
d0:29:0e:ce:05:04:05:4b:2d:6f:1c:e7:77:56:cc:7f:5d:93:
cc:60:1e:9d:b2:76:c1:8e:ae:43:b6:17:58:60:4a:51:57:69:
90:c2:f2:32:8c:f1:6d:6d:bf:bf:50:d3:45:f5:a8:3c:7f:67:
08:ad:d2:8c:ef:99:1b:18:75:6d:e8:2e:4c:65:3e:47:b0:73:
63:b8:65:25:a1:57:d6:52:8d:25:58:ea:50:15:15:ad:80:16:
31:01:73:7d:17:2e:21:59:2a:ff:ef:31:ce:8f:3a:c4:c5:8e:
b6:fa:90:0e:0c:6f:1f:ee:e7:32:71:0b:01:a7:36:ed:4b:ed:
ba:a8:b2:83:1b:3f:ad:f6:b8:9c:cb:a4:36:23:cc:49:c4:03:
a9:39:e8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:02:59 2025 by rpki-client