
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier: 7WFvJth2LAVKB2BVrX6QD7nk6YZ5YYPk7avb2mVYCTc=
Subject key identifier: 20:D7:A5:74:06:31:C2:86:FE:72:CB:32:9D:32:3B:0D:74:C5:93:B9
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 01976C98A2E1F1F72EBD5936E908B681DD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number: 12B4
Signing time: Sat 14 Jun 2025 04:00:31 +0000
Manifest this update: Sat 14 Jun 2025 04:00:31 +0000
Manifest next update: Sun 15 Jun 2025 04:00:31 +0000
Files and hashes: 1: 5Jz_YVrHUaJFP3SWK2dAceUCNAY.roa (hash: FxW6Fxg1CqiXEfh82Ml+2If3mdaDZD5mWZiJYMERn9A=)
2: 9IMJEhU9cwZnj5RrF1Myybjj004.roa (hash: xqWR3tjhkJLohibyPz5kCzd/ogLtHaiChUPlLNFeUcM=)
3: SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (hash: thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=)
4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: 1HXJa0jiprmknsm1Bn47UMgDmtJRbyvZ5Xwyx+zYEPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a2:e1:f1:f7:2e:bd:59:36:e9:08:b6:81:dd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Jun 14 04:00:31 2025 GMT
Not After : Jun 15 04:00:31 2025 GMT
Subject: CN=20d7a5740631c286fe72cb329d323b0d74c593b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:8a:0b:c3:da:6a:0a:62:92:bd:c5:67:77:
63:20:47:34:b3:62:dd:c6:a5:4d:94:f0:98:6d:bf:
8a:4c:74:c4:db:1c:a9:55:6e:af:82:8a:ea:08:73:
07:aa:9e:8b:d7:31:28:cb:05:97:7d:bc:3f:d3:39:
72:53:eb:b7:50:4d:50:4b:bd:02:b1:ec:5c:12:01:
52:93:98:65:07:5d:e9:37:da:05:ef:3e:49:5b:2a:
b4:f0:ad:af:56:b2:5e:f4:ca:e1:e0:56:3b:ff:a3:
e0:16:97:a9:64:af:c7:b8:22:ce:bc:05:61:6f:8d:
b0:d3:ab:8a:82:c5:ed:bf:5c:6b:c2:21:82:e9:85:
52:e7:e2:f9:39:7d:34:65:ef:46:43:3f:fa:f2:0a:
32:23:43:86:1c:97:6a:51:6d:2d:88:da:d4:ee:84:
bc:ec:47:2c:c2:5f:11:63:b2:97:32:41:16:6e:07:
9a:7a:75:5c:91:91:7b:7e:c7:be:d2:3e:54:ac:bc:
0b:c2:ee:51:29:e2:c7:b7:42:f8:0e:43:79:8a:30:
2e:5a:c0:ca:4d:90:37:30:24:64:d7:ce:9d:aa:65:
3d:11:51:f7:79:e2:0b:21:6a:b1:44:fc:36:0a:ee:
d9:12:25:b8:6b:d4:47:6d:16:7d:11:2d:90:c3:15:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D7:A5:74:06:31:C2:86:FE:72:CB:32:9D:32:3B:0D:74:C5:93:B9
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:96:54:24:2a:40:96:af:60:e0:66:da:8c:f9:28:2c:0e:99:
50:7f:3e:74:c9:ef:a2:be:36:fc:f6:5e:2a:d0:fb:25:a3:d9:
e9:e2:b0:16:32:2e:44:f1:0b:e0:7f:9e:63:bc:87:39:ec:e5:
a6:a0:ca:93:35:8a:be:03:34:77:36:07:79:e1:ea:79:3e:bf:
2a:01:50:46:a0:88:ce:98:46:27:79:22:ec:b0:7e:81:6f:db:
fa:a3:2d:56:c6:7d:5a:33:16:6f:31:56:83:40:e5:e5:ce:0a:
21:2f:de:ef:62:ec:24:96:da:ce:8a:a9:c4:11:27:82:45:83:
a4:ef:03:91:b7:e3:e3:2d:60:59:58:58:28:9c:b4:35:5d:c7:
41:e1:f8:8c:44:bf:db:17:71:a1:57:80:ac:36:12:3c:f8:60:
aa:27:24:b2:1c:09:d6:10:42:10:5b:c6:85:1b:69:a2:e6:fd:
74:54:a4:87:73:b6:41:15:26:df:3b:16:d3:48:b0:95:84:66:
19:35:d5:bb:9a:32:dd:70:5f:21:44:a1:2d:c1:26:3b:b0:c9:
95:26:79:b6:54:99:cc:49:59:47:2f:c7:b8:29:b8:5f:de:1c:
a5:e9:c6:b4:41:16:7d:4e:61:32:1e:e8:12:3a:51:b9:02:8c:
e8:c4:d4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:23:56 2025 by rpki-client