Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: UWATrbmjYCdlQkda8AjN3bUntjmEwg7mLQ3u9CU0KMA=
Subject key identifier: 18:8A:1C:29:1A:E9:1B:AC:46:92:6F:B2:14:74:E2:15:36:BA:D7:36
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 01974A43C3A605957DFB84291318D0B577BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 0E15
Signing time: Sat 07 Jun 2025 12:00:44 +0000
Manifest this update: Sat 07 Jun 2025 12:00:44 +0000
Manifest next update: Sun 08 Jun 2025 12:00:44 +0000
Files and hashes: 1: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: 2McstrfiXrIytJIEFuH2e/IVt7SxDLs0mZE4qLWTSSU=)
2: _BrWLEBfYPYfGOoM_00MeFoB9s8.roa (hash: ONS0Sr1NVQgM4PQUgLtLkyRNai6z7sLm2R6unFgdvYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:c3:a6:05:95:7d:fb:84:29:13:18:d0:b5:77:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Jun 7 12:00:44 2025 GMT
Not After : Jun 8 12:00:44 2025 GMT
Subject: CN=188a1c291ae91bac46926fb21474e21536bad736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:2b:83:77:89:3e:8e:8c:0c:50:33:80:94:
b6:91:52:0a:5e:09:a6:42:63:11:b6:7f:c1:c2:d4:
54:b3:61:38:f8:dd:23:f9:47:5d:82:c4:01:8c:3e:
1f:67:85:7c:d8:1b:91:81:ec:64:35:58:c2:a1:de:
d7:af:cf:e5:5f:38:c0:39:df:2e:8e:b4:77:6c:c8:
43:e0:54:ae:76:44:69:70:ba:b6:3e:9e:9b:a9:00:
6f:f4:7a:d4:cd:c0:4c:56:e8:b3:a1:a4:cf:d2:18:
79:90:a8:ec:0c:33:9d:39:9e:54:d2:0c:04:35:bf:
d3:66:c3:1b:76:2c:d7:b4:f1:b5:80:03:fd:f9:38:
e0:8c:7d:b4:a6:7f:29:20:ae:81:2b:63:f5:15:aa:
1d:4e:90:92:88:24:35:58:fa:20:74:96:52:f9:aa:
c4:ab:09:c6:30:00:ca:0a:ae:44:0a:35:97:8d:80:
75:e9:3b:93:99:c0:3e:d3:69:e7:7b:5d:9a:a0:e1:
84:16:bc:26:97:d3:21:13:49:94:98:e2:ba:e2:08:
cb:6a:a1:40:69:27:ef:25:5d:87:58:30:8a:c7:b4:
67:e4:0f:40:2c:a3:46:dd:ac:73:a8:c3:3b:79:ed:
39:9d:8d:ae:05:09:42:3f:20:52:2f:c1:2a:be:e8:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8A:1C:29:1A:E9:1B:AC:46:92:6F:B2:14:74:E2:15:36:BA:D7:36
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:15:f5:f3:17:0e:38:99:9e:8c:63:7a:d3:d4:00:05:2d:e0:
63:18:5c:74:3a:9f:25:97:7c:05:ac:08:9f:0e:91:84:81:e1:
a4:f6:e9:6b:88:93:a0:41:7d:fe:ac:9a:bf:a4:79:90:3d:79:
3d:e4:f2:36:a0:66:ba:1c:58:b5:61:a5:e9:16:92:5c:33:a2:
3d:d4:f2:1d:b9:98:08:03:9a:c4:7b:03:3e:47:bf:4d:94:ba:
4b:c3:23:e8:25:73:fa:0e:83:64:da:7f:bf:a5:18:8b:f6:ca:
52:8d:1c:05:08:52:16:53:6e:32:4e:41:49:b6:7c:6d:a9:00:
b2:05:f1:c8:09:02:c8:f6:9c:27:eb:e1:32:10:ed:81:47:87:
88:91:20:d6:db:83:d4:d2:5c:f8:b4:99:aa:72:00:94:c9:23:
1d:93:e8:5f:72:36:1a:81:20:b0:0c:a4:bf:cf:51:aa:fe:23:
e7:e6:8e:a9:a1:58:5a:2b:3e:d3:95:ed:c5:af:a2:76:13:c8:
a2:b4:2e:51:2b:fb:4c:f2:54:a0:de:c6:10:8c:5d:6f:29:e4:
0b:e3:5d:26:0a:5c:ff:0c:f8:ba:47:22:7e:e7:4d:96:86:bb:
48:ff:32:76:7e:ad:43:70:ee:95:90:05:8e:21:f4:85:e3:6b:
58:6e:a6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:45 2025 by rpki-client