Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: heaA0e1Pel5XPayvbpWb/PRVwdhdCVlzNurhvg/wL4Q=
Subject key identifier: 9D:AD:33:A1:8D:BC:98:78:5B:50:8B:3C:9B:51:F3:06:A1:DD:3A:3A
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019748FA4427E6F88356BDC7111DF0695CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 029D
Signing time: Sat 07 Jun 2025 06:00:50 +0000
Manifest this update: Sat 07 Jun 2025 06:00:50 +0000
Manifest next update: Sun 08 Jun 2025 06:00:50 +0000
Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=)
2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: fQF8a6SBb3mgamOKByv2ZLhy999KSpCHSvzGyOwlffg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:44:27:e6:f8:83:56:bd:c7:11:1d:f0:69:5c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Jun 7 06:00:50 2025 GMT
Not After : Jun 8 06:00:50 2025 GMT
Subject: CN=9dad33a18dbc98785b508b3c9b51f306a1dd3a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:52:8b:66:3e:d6:6c:07:9e:62:e5:19:f8:2e:
e6:45:4c:da:06:69:a6:3d:ed:a4:e2:0c:3e:c8:68:
8c:24:04:3d:49:bd:30:00:9b:dd:1c:92:b4:c9:df:
12:c2:93:6c:f2:bb:7f:04:9c:b4:fe:e0:db:61:5c:
0c:6c:ed:da:19:e8:61:31:04:0c:5d:9d:2b:11:05:
c7:73:81:53:bc:6e:10:df:cb:a0:d1:bd:b4:70:22:
5b:64:3c:1c:c5:bb:34:07:b2:5e:43:88:e1:0d:e8:
41:a5:a1:83:e1:f7:44:1b:fe:88:02:8f:17:9f:e2:
e7:b1:56:19:11:d4:50:03:b7:bb:12:02:64:4b:2f:
51:c5:67:56:21:79:5c:75:84:15:ed:d8:fd:f1:f0:
07:bd:25:90:6f:98:d0:10:a3:1b:67:7f:34:bc:f4:
8d:f8:0c:f2:c9:70:c0:b7:aa:18:cd:39:da:c4:01:
ed:65:24:22:57:7e:00:d3:12:88:25:2a:6f:77:60:
be:fc:16:1d:e6:fd:55:9c:a8:5c:06:38:28:26:35:
74:47:91:5a:2b:fc:83:91:c5:de:08:9b:a7:c6:73:
ee:62:e1:05:ab:f7:9e:27:bb:85:fb:15:d0:e2:01:
fc:e7:7c:b1:7d:96:f1:91:9f:2d:f5:db:65:9b:e3:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AD:33:A1:8D:BC:98:78:5B:50:8B:3C:9B:51:F3:06:A1:DD:3A:3A
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e9:15:6b:6f:f0:9f:ee:9b:bd:00:e2:c7:24:d2:1b:80:dc:
a2:de:c2:98:e5:dc:1a:cd:01:c6:4f:32:b4:45:ca:85:d4:15:
6a:2e:e5:ed:31:6d:76:3c:53:eb:9c:92:5e:b4:14:27:54:ca:
ee:5c:bc:cc:a2:66:33:4f:6d:bf:99:4e:e1:f1:75:65:45:46:
5e:eb:6d:1a:1c:db:6c:44:5e:f6:e7:d1:2f:4c:79:32:5c:6a:
32:6a:8f:e4:94:bd:fa:49:b5:dc:d9:f1:f7:f6:69:28:10:f5:
0e:d1:58:f6:b0:ce:36:93:e5:77:2d:43:df:96:06:9f:45:42:
04:8d:14:f8:44:2a:c4:35:8c:af:fd:b5:89:f4:ad:36:b7:85:
e4:92:11:47:5e:98:01:5d:d1:23:ab:db:de:5e:bd:2c:38:7e:
f5:29:ab:88:ce:7c:d2:4b:fb:bb:db:0a:08:f8:6c:af:f4:b1:
80:0f:fc:1f:49:b5:1c:20:2b:53:ea:0a:fb:1a:67:4a:a8:bf:
f0:c9:70:e0:05:b5:f8:2c:e7:c3:cf:c5:b1:98:db:a9:d3:3b:
0f:1d:4d:cf:ff:8e:df:00:4b:80:df:70:db:b2:df:d6:df:d3:
9b:66:cd:f6:ea:a1:51:d3:6b:c3:76:aa:d4:da:40:ac:04:74:
2a:97:9d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:24:57 2025 by rpki-client