Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
File: Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft (raw, json)
Hash identifier: zgkE4dPTlhizqTK9q44ZHcBUTQYV+e9CgTKhMesfnIc=
Subject key identifier: 93:08:4A:36:39:47:22:F0:A3:5E:97:2A:AC:D9:9A:32:43:7E:5F:F2
Authority key identifier: 67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
Certificate issuer: /CN=6777a62846df4edbe5666b89e8420e919ab08627
Certificate serial: 01974AE927F4B3A3741CA86539946666CB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
Manifest number: 14D8
Signing time: Sat 07 Jun 2025 15:01:23 +0000
Manifest this update: Sat 07 Jun 2025 15:01:23 +0000
Manifest next update: Sun 08 Jun 2025 15:01:23 +0000
Files and hashes: 1: Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl (hash: bdQnhOXzIyouAeNSHTh0yJ3OUnKGlVmzbkO74+MLv3s=)
2: ZBPuASXAJcjpb4z2Gk47z8Bokws.roa (hash: xXQRbhIxvcjZLo2Nk1OZPyhXjwNTzt2gl2oGbinvPSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:27:f4:b3:a3:74:1c:a8:65:39:94:66:66:cb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6777a62846df4edbe5666b89e8420e919ab08627
Validity
Not Before: Jun 7 15:01:23 2025 GMT
Not After : Jun 8 15:01:23 2025 GMT
Subject: CN=93084a36394722f0a35e972aacd99a32437e5ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:82:5a:28:91:2e:72:96:d8:45:6b:ed:a0:
ec:d9:64:03:77:5d:ec:35:ac:76:9f:f4:9c:d9:35:
bb:8f:f1:34:1a:c4:17:d8:8f:82:4e:da:03:e9:ba:
3b:cc:71:e1:90:5d:ca:3c:e8:45:dd:64:da:70:f7:
b5:05:74:99:ca:fb:5b:9f:1c:a6:0d:76:a3:4f:5d:
e7:46:49:ab:48:51:44:11:31:e6:ac:46:a8:14:51:
1c:a6:b6:d8:73:23:e3:af:bd:39:49:4c:0e:63:2f:
3c:f2:34:6a:2f:e1:2d:5a:7f:91:bf:3c:9b:6b:31:
0a:62:b0:db:4b:96:ce:66:81:55:54:66:5e:9c:cc:
85:e4:be:90:32:46:c1:08:e4:e0:1e:32:a0:2f:4f:
e9:f6:1d:ac:cf:c5:e2:e7:5e:cf:b2:b1:59:26:f9:
12:e2:13:c6:67:01:3c:ef:80:8c:dd:97:c8:d2:b8:
28:3c:7d:b7:57:40:a2:50:65:9e:c0:c1:e6:34:24:
a8:dd:b5:ea:06:e9:07:2e:3f:41:17:b5:15:f4:4c:
93:2c:84:3c:02:91:f1:cb:29:3d:0f:17:cb:48:c7:
80:77:2b:0f:b8:2f:71:80:36:01:8f:84:5a:5c:2c:
c2:7d:95:41:70:30:12:47:3f:bc:63:64:3c:be:9a:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:08:4A:36:39:47:22:F0:A3:5E:97:2A:AC:D9:9A:32:43:7E:5F:F2
X509v3 Authority Key Identifier:
keyid:67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d7:e8:2f:db:68:ce:a1:b5:e2:b6:0f:99:c6:d9:f5:58:7d:
df:c7:ba:1c:12:08:ae:93:c8:0f:66:4c:f1:86:cf:8d:bb:36:
23:89:e2:95:a5:74:c9:58:a1:5b:b5:14:d2:f5:29:cd:30:c0:
b2:c9:22:d0:ad:ba:40:21:a0:c3:6c:35:f7:a5:1c:64:9c:9d:
68:fe:1d:c5:54:40:b6:a2:0c:6d:c8:cf:5c:f9:d6:e0:31:df:
b9:87:a1:51:55:34:a7:5b:5e:70:0e:5f:86:3a:27:51:22:b3:
c4:b7:35:d2:26:fb:47:ca:b6:14:b1:a3:21:41:39:ba:44:71:
0b:ca:fd:a9:a4:d5:36:b5:78:ef:79:15:a9:4b:dc:dc:a7:62:
fa:a6:3c:50:90:cf:81:c4:c2:06:dc:d8:59:f4:e0:12:91:1f:
19:4d:66:7b:25:77:27:f2:da:83:83:3d:ad:42:c5:ce:ef:9f:
30:42:9f:5b:28:4d:6c:d1:99:99:cd:09:ee:6a:e0:00:3d:a7:
f9:d3:cf:de:c6:7b:91:ab:ba:d1:f6:39:fd:1d:bb:60:43:f5:
5a:c6:8e:ae:2f:d9:18:90:1e:38:e7:17:8a:f2:6d:7e:e0:c7:
d8:91:7b:89:59:9e:40:e5:b1:15:4b:9a:ac:52:d7:7f:61:0a:
c3:2c:75:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:55:52 2025 by rpki-client