Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: dwdn3I5uwEJE0+7k2znOvEsWRK10WBzp52ImBMg8vwc=
Subject key identifier: 69:1E:FE:8E:9E:0D:A4:4A:8D:0A:34:6E:81:34:B5:1B:8B:42:DA:70
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 0197469ECDBCB1559425846E1DFB6BD90481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0C3D
Signing time: Fri 06 Jun 2025 19:01:41 +0000
Manifest this update: Fri 06 Jun 2025 19:01:41 +0000
Manifest next update: Sat 07 Jun 2025 19:01:41 +0000
Files and hashes: 1: 3p5nhLsOjt1h69C859DNKbB2MQU.roa (hash: fomkhfBpGlBS0AfRGY4b/l04Zngyijm1T6FQ0+oESso=)
2: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: NsbC0BLimknvx/Uexnnc5gU40/JUn8oUiu64eLfdHqs=)
3: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:cd:bc:b1:55:94:25:84:6e:1d:fb:6b:d9:04:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Jun 6 19:01:41 2025 GMT
Not After : Jun 7 19:01:41 2025 GMT
Subject: CN=691efe8e9e0da44a8d0a346e8134b51b8b42da70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:21:ed:41:84:28:63:ad:d3:8d:3b:68:47:
eb:85:87:9d:4f:49:d5:77:e7:61:3a:b5:2e:73:a8:
e3:ce:7d:56:c4:c1:c8:ef:01:83:81:bc:5f:ec:ec:
36:28:ac:9d:aa:aa:ce:dd:b1:00:9c:a9:e6:85:43:
91:7f:9d:78:22:47:15:22:75:c2:0d:5d:3d:49:de:
81:b1:3f:38:1b:49:87:3e:56:0e:7e:12:d8:95:42:
83:e4:a4:24:21:f8:e6:70:a8:c0:9b:e8:20:c2:e2:
46:70:d3:25:b7:e6:bd:02:7c:59:4d:22:b2:69:24:
ea:ec:46:ed:bd:f3:25:6e:e0:4d:54:8e:4d:a1:03:
37:52:5f:df:12:0c:61:20:00:d7:79:e8:eb:cb:84:
6b:b6:fd:3f:cd:ae:a6:4c:e4:6f:1f:cc:b4:f0:74:
ec:15:54:9c:02:99:24:f9:f8:b5:40:3a:47:3f:c0:
e0:dd:52:10:54:45:b8:6e:ba:d6:25:23:a9:ad:e6:
3c:19:04:a7:c2:bb:12:aa:e8:c0:c2:ae:c0:f0:43:
c5:ea:70:86:ee:a8:c6:f5:ae:e2:8c:df:9e:20:45:
f4:d6:97:12:56:09:9e:b6:6e:bb:88:d1:e2:e4:b3:
8c:9e:7d:22:92:c2:d9:43:90:fd:a3:53:cc:3b:ba:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1E:FE:8E:9E:0D:A4:4A:8D:0A:34:6E:81:34:B5:1B:8B:42:DA:70
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:92:a9:5f:19:48:9a:7a:eb:43:cb:e9:4c:55:8c:77:7d:b8:
ce:18:be:e3:5b:eb:8e:41:61:e8:b8:08:f9:bc:3f:f3:df:d7:
d0:48:4a:92:63:f4:13:00:81:78:08:3c:9c:23:f8:c7:b9:6b:
26:ee:5f:07:6f:2f:c6:33:7f:d0:37:e8:f0:f8:14:da:ea:f2:
90:06:39:e4:b4:fa:3e:d3:e7:2a:a8:58:ae:bc:70:df:6c:30:
25:67:b1:a3:18:4c:6a:ce:77:8b:20:ba:4e:29:1c:80:09:cf:
b2:2c:83:9f:5e:48:85:38:08:a0:f4:3b:47:50:8b:cb:89:7d:
2d:ae:9b:13:0c:3f:a6:30:f3:df:01:21:3e:f0:65:e7:a4:8f:
ca:80:e8:0d:dc:c8:ec:a9:b1:c9:bc:f3:24:3a:92:46:5f:2f:
39:bb:e1:c4:66:d2:93:2f:82:b3:32:01:a4:5e:02:e4:3f:2d:
16:9c:82:1d:af:1c:31:47:b4:9f:40:f5:95:5b:5f:21:78:dd:
a4:55:66:db:ab:9f:b6:66:44:24:db:35:c3:6c:2d:96:32:3f:
eb:7e:17:56:1f:93:c9:a9:d6:84:ae:b1:84:df:35:81:34:98:
bc:ce:61:5d:d9:0f:06:c4:e2:69:7a:eb:19:8c:e6:b7:b0:93:
c8:d5:1a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:46 2025 by rpki-client