
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier: /LpdQYM3S85laFwKdV9L3wkvUu14aXEJqRkoEUpnu6w=
Subject key identifier: DC:A6:68:C0:AC:08:9C:D7:F2:D3:60:D2:B7:FF:B7:2C:BF:4F:55:2B
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 01976AAAB635F071D8D7BDFBC9AA133A7B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number: 12B3
Signing time: Fri 13 Jun 2025 19:01:01 +0000
Manifest this update: Fri 13 Jun 2025 19:01:01 +0000
Manifest next update: Sat 14 Jun 2025 19:01:01 +0000
Files and hashes: 1: 5Jz_YVrHUaJFP3SWK2dAceUCNAY.roa (hash: FxW6Fxg1CqiXEfh82Ml+2If3mdaDZD5mWZiJYMERn9A=)
2: 9IMJEhU9cwZnj5RrF1Myybjj004.roa (hash: xqWR3tjhkJLohibyPz5kCzd/ogLtHaiChUPlLNFeUcM=)
3: SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (hash: thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=)
4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: nPe2xImuWVEm9G1bj6rh/ga+lQOLA7vy10RLGcj8gsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:aa:b6:35:f0:71:d8:d7:bd:fb:c9:aa:13:3a:7b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Jun 13 19:01:01 2025 GMT
Not After : Jun 14 19:01:01 2025 GMT
Subject: CN=dca668c0ac089cd7f2d360d2b7ffb72cbf4f552b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:73:e8:6a:0e:70:3f:40:6d:35:b6:33:7e:
f9:f2:bc:38:6d:04:05:a9:0c:70:8c:92:0f:06:c6:
ae:ce:10:08:88:eb:b7:ce:c1:01:3c:7d:95:d1:4b:
89:6a:f5:a5:fa:ab:c5:3a:57:4f:54:57:1a:3d:b3:
27:cc:93:33:83:a3:fc:66:28:f7:dc:a5:9f:b0:ce:
0d:28:b0:03:8d:0b:cc:16:74:4a:92:e9:2e:9b:b1:
cb:fb:ce:77:5b:62:85:cc:d6:55:89:0d:3e:02:43:
98:4b:d5:b5:6b:5f:43:01:72:04:c1:a2:78:bf:c9:
87:fb:9a:c4:75:70:a2:29:23:f0:f4:78:7f:cc:a7:
ce:0d:7f:a8:86:21:82:9c:e5:8d:54:9e:ab:a2:8f:
41:aa:ca:80:d2:0d:10:23:fb:58:ee:de:10:7b:86:
2a:ab:ff:be:9a:5d:69:32:c9:71:fc:14:ac:d7:df:
f4:86:5f:da:b2:17:61:03:ec:26:dc:38:e4:b9:47:
d2:d2:6b:4c:a6:df:c9:bd:5a:53:76:0e:89:6b:cd:
eb:e1:63:79:42:66:97:ed:3e:29:a9:b5:bb:d7:06:
7e:85:c8:39:f6:9a:40:20:08:9f:25:65:3e:55:44:
3b:a9:c8:c2:1e:fe:80:c4:2f:25:87:52:f4:e3:f9:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A6:68:C0:AC:08:9C:D7:F2:D3:60:D2:B7:FF:B7:2C:BF:4F:55:2B
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a8:28:fa:3b:45:be:54:14:b5:73:95:30:7c:9b:49:48:ac:
42:f2:91:71:92:7c:0d:c6:a1:4c:ba:1c:33:f2:0a:70:0f:e0:
b6:52:4d:aa:1d:cd:2a:2c:1d:d2:ef:0e:f1:69:27:4c:5b:e7:
5c:10:39:9b:97:3d:90:b6:02:3e:35:c5:a1:3c:ac:17:5b:bc:
dc:63:f8:92:bc:c1:6e:f3:84:44:de:c7:ab:ae:9e:58:ad:55:
6f:ed:63:e3:74:97:23:bd:2a:85:88:ec:83:a0:a3:b9:53:01:
6f:6b:ae:a9:52:dc:3a:53:1f:03:35:84:d4:31:45:82:e0:5d:
cb:d8:42:0b:4d:e9:c7:cd:ab:a5:ce:96:9f:fc:1a:7c:69:65:
97:80:01:38:10:cc:3d:d4:ea:0d:c8:f4:f4:dd:fc:11:d1:03:
64:e5:e8:59:2a:6a:55:32:f5:d0:9f:9b:b9:dd:d0:44:fe:ee:
83:1e:61:81:56:0b:d8:ff:ec:3d:94:4f:9d:bc:a9:2c:c5:75:
12:bf:02:0d:f8:65:7e:f1:4d:23:b9:c1:d2:3e:7f:f9:18:05:
01:34:ea:07:60:66:0c:a1:f3:14:a7:28:d8:ed:ef:7d:78:f9:
75:4e:cc:46:fd:8c:5b:45:7b:45:b0:aa:1d:2b:20:ac:09:3c:
f9:73:5d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:53:09 2025 by rpki-client