Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier: V4GTOfgudv44Tr78l7l6pnY/Tq4DTgUfggpT1IISez8=
Subject key identifier: 3E:B1:B4:62:29:9B:D4:23:81:3D:04:0D:73:AD:2D:39:DF:3A:5D:83
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 0197575A9F9CBB589C2BE6404911186427EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number: 12A9
Signing time: Tue 10 Jun 2025 01:00:46 +0000
Manifest this update: Tue 10 Jun 2025 01:00:46 +0000
Manifest next update: Wed 11 Jun 2025 01:00:46 +0000
Files and hashes: 1: 5Jz_YVrHUaJFP3SWK2dAceUCNAY.roa (hash: FxW6Fxg1CqiXEfh82Ml+2If3mdaDZD5mWZiJYMERn9A=)
2: 9IMJEhU9cwZnj5RrF1Myybjj004.roa (hash: xqWR3tjhkJLohibyPz5kCzd/ogLtHaiChUPlLNFeUcM=)
3: SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (hash: thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=)
4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: hDpXwEOhFyczkH+AMuGPAqkMYLgylVL3bxcfvE3qglY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:5a:9f:9c:bb:58:9c:2b:e6:40:49:11:18:64:27:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Jun 10 01:00:46 2025 GMT
Not After : Jun 11 01:00:46 2025 GMT
Subject: CN=3eb1b462299bd423813d040d73ad2d39df3a5d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:d9:8c:d1:e3:a1:5b:18:7a:8c:47:73:5b:
fb:74:24:10:af:11:9f:7a:47:64:c5:bf:0c:ff:3b:
26:e7:19:93:9c:ff:00:5d:0d:f3:0c:a0:62:5c:c3:
7f:83:a3:5a:52:43:22:ce:50:1f:6c:8b:31:8a:ed:
93:80:50:a1:53:cc:f8:03:1a:45:b1:04:be:f0:e2:
12:51:b0:45:13:a6:4d:82:72:84:a2:a9:b9:ad:e1:
7c:44:ce:00:85:20:c6:b8:b6:b6:52:7f:8a:9f:38:
01:32:a2:bb:45:6a:d6:48:23:61:4c:19:b7:23:ae:
84:5e:28:08:11:bf:46:59:ff:4a:94:a9:c9:ac:48:
9e:a6:70:70:b6:eb:c3:27:a7:49:f0:9b:de:a7:ab:
43:1b:1e:49:2a:f9:a2:11:8b:dd:af:79:0c:76:d5:
aa:86:8b:75:eb:98:09:4f:85:ba:49:31:e2:ea:73:
0a:28:f7:07:b8:d0:41:04:7e:4b:24:eb:84:8b:89:
1e:56:7c:5b:28:1d:f4:f4:0a:e0:7a:c9:00:98:34:
2f:b5:60:ba:14:8a:e4:d4:94:8e:04:cd:62:c4:e3:
f7:c9:93:9e:e4:10:8e:be:90:d7:8d:c1:43:a5:58:
18:76:58:e0:81:5b:fa:e7:63:b5:d3:67:ea:eb:e4:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B1:B4:62:29:9B:D4:23:81:3D:04:0D:73:AD:2D:39:DF:3A:5D:83
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3b:04:b3:5a:d8:4a:98:6f:6a:18:1d:3c:23:66:16:f1:be:
3c:c6:af:1a:af:43:37:15:74:4f:37:b2:12:a7:4e:55:c0:bd:
3a:55:ae:34:ef:d8:81:ab:64:67:64:c5:d3:1c:cd:a3:95:b4:
a1:44:4d:8f:9e:ba:1e:39:d8:f9:8b:92:4d:3a:93:3c:08:64:
6f:95:f3:f2:dc:f9:40:1f:6a:28:a3:39:60:da:e5:47:c3:62:
81:41:f0:ae:05:53:ee:24:91:97:82:9b:02:c7:2a:f8:16:89:
ec:ec:94:cf:00:17:d0:68:a4:78:4f:5a:70:75:91:33:9a:b5:
fd:d4:c4:be:35:2d:e1:0b:84:b4:5d:be:53:99:47:ce:34:79:
1c:f1:02:4c:b6:08:7f:b9:18:91:77:61:68:a9:de:a6:ba:12:
b2:57:c2:00:7d:02:ae:d6:0b:59:64:f2:f5:57:50:d9:90:eb:
79:f1:9b:7f:f0:57:7e:ec:fe:19:2a:52:1f:d0:ac:7d:f0:ac:
f8:3b:d5:a0:c6:a3:fb:21:a2:13:25:22:cb:03:8e:0f:0f:75:
4d:be:af:9b:7a:5c:a8:c4:57:91:ff:98:8d:95:de:d7:fb:36:
d6:23:ee:76:a3:73:b4:88:a8:2b:19:bf:09:aa:0a:97:d9:34:
2c:05:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:50:53 2025 by rpki-client