Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier: 3NrLa0KY3HRW6zcIezhJpTOb+32hLzEWu0z2B2JjaK0=
Subject key identifier: 4B:32:54:CD:35:55:23:DD:9C:BC:44:3F:CE:52:8E:B9:B5:59:D3:05
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial: 019747799A9BAE066083687437590BD3F790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number: 12B6
Signing time: Fri 06 Jun 2025 23:00:41 +0000
Manifest this update: Fri 06 Jun 2025 23:00:41 +0000
Manifest next update: Sat 07 Jun 2025 23:00:41 +0000
Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: MVIHgw4GeLM1JpASYnP65/Y7CAUmhtzc4J2AjW5Cr6s=)
2: oilk7jUBzGUsKxQiO3ENxMgz50c.roa (hash: uezrIJE13+ePzqQZQpEOEl7mUMI9j3C9B4RgtY410tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:9a:9b:ae:06:60:83:68:74:37:59:0b:d3:f7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Validity
Not Before: Jun 6 23:00:41 2025 GMT
Not After : Jun 7 23:00:41 2025 GMT
Subject: CN=4b3254cd355523dd9cbc443fce528eb9b559d305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:55:ee:6c:1b:f9:46:2b:87:1c:d5:5f:8b:
e7:08:ea:0a:3a:43:60:47:ba:f0:f4:dc:3a:bd:23:
25:2c:82:28:a1:62:2a:fc:2c:1b:26:4c:83:eb:68:
8c:51:a7:b5:41:53:82:72:c3:9b:b7:fb:e6:e6:f4:
0c:03:14:8d:d2:d6:4b:0c:52:d4:f2:76:d9:0c:81:
95:fa:5c:aa:4e:22:b1:5e:f8:d1:5b:5f:e9:4c:2c:
db:6b:57:3d:b8:3d:de:c8:6d:cc:65:1f:4a:ff:2c:
0c:b9:08:ec:7b:86:d1:3b:8d:d4:d1:c3:64:b3:bd:
1f:8f:d8:54:f6:f6:c2:34:e5:eb:a1:6a:26:88:68:
9d:1b:28:27:43:6e:44:77:08:08:9a:43:1f:50:f3:
37:08:93:d8:0e:3a:9a:c4:c7:da:77:91:8b:d1:e2:
49:01:b2:74:c0:d8:9c:76:5a:fe:58:b2:58:8c:5b:
28:ec:40:c4:e2:a8:6c:22:07:ef:76:64:c3:7d:ef:
40:a8:99:ab:16:49:60:99:b4:eb:e2:44:97:82:63:
01:56:93:e1:0c:1c:e0:c0:eb:29:42:f3:7b:0c:3a:
57:d9:bb:74:4f:54:a3:48:c7:59:3b:1a:58:7e:d6:
ba:96:e9:d0:46:72:13:2f:de:55:c9:1f:bd:b0:7e:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:32:54:CD:35:55:23:DD:9C:BC:44:3F:CE:52:8E:B9:B5:59:D3:05
X509v3 Authority Key Identifier:
keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b2:94:44:f8:63:5a:b9:80:88:22:ca:a5:30:a6:97:31:06:
cf:67:83:e8:03:e8:e0:c2:8e:97:60:ae:13:d9:e6:ba:2e:fe:
26:fc:02:3b:47:fd:01:4e:e3:b6:7c:05:92:87:ee:e1:88:42:
23:08:ff:08:42:ea:b6:da:bd:53:de:8d:68:cf:e2:32:4e:fa:
d4:20:e5:48:75:0a:9b:8f:1f:9c:3a:fa:67:f5:12:6f:dd:ac:
44:ef:f8:03:95:e6:25:34:f0:7b:e3:ba:9a:3c:39:9d:67:12:
5f:73:fe:07:fb:41:80:0e:80:7f:30:b2:98:63:47:22:8c:92:
52:50:a5:fc:70:ae:d7:46:d5:1e:9c:87:65:8e:07:cb:69:5c:
b4:45:2b:eb:03:21:6d:5b:41:f7:b3:9b:7b:36:28:c1:70:8e:
d8:32:0c:c8:fa:ad:a4:63:78:09:50:7c:2f:63:73:bf:55:42:
42:09:16:70:2a:de:19:87:c7:bc:42:8e:e1:c4:01:19:f3:8e:
e7:08:2d:ee:fb:e5:0f:88:de:d7:8c:ed:da:fd:0d:ed:ec:86:
f1:e5:dc:ec:41:b4:21:91:30:30:c1:90:5a:56:d8:93:b3:41:
ce:b6:04:2e:e0:e9:e9:c4:5e:18:5e:9e:4a:55:1a:09:37:16:
52:84:e6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:10 2025 by rpki-client