Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: IM53J6hlGxB6iguqa3C1MfVhGroc7TdeuYu5gcBwH0k=
Subject key identifier: F3:1B:F1:CB:A6:6B:21:0E:DE:5A:59:4F:1A:5B:B8:FF:B5:FB:B9:FE
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019750B3728C8A5B8A737EFE38AEE42D5DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 18:00:26 +0000
Manifest this update: Sun 08 Jun 2025 18:00:26 +0000
Manifest next update: Mon 09 Jun 2025 18:00:26 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: 7pmr/pM900BuLl5TbVQe8Vo3HX8oXm++c9jYBsVPwQM=)
2: f2XJfv98xMfqrpaFL1qLYMfVin0.roa (hash: mHLRZPkQ/y6jVuiV902GM613VmK1FGvmtwd5Ojyc76Y=)
3: g8Y2TOOKVhHIEabpCmuLfqLOwz0.roa (hash: c/0TsoE4PcOybpB4LfpOknZ1hO7co+C172nPxlIdcnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:72:8c:8a:5b:8a:73:7e:fe:38:ae:e4:2d:5d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Jun 8 18:00:26 2025 GMT
Not After : Jun 9 18:00:26 2025 GMT
Subject: CN=f31bf1cba66b210ede5a594f1a5bb8ffb5fbb9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:79:5d:d9:3f:93:42:54:d4:06:58:e3:1b:
f4:10:6d:eb:bf:23:51:7c:07:c2:ae:d1:25:cc:00:
b5:fa:32:dd:7a:a8:50:c9:9d:76:73:12:16:80:a0:
c9:50:36:80:0e:21:24:27:92:2f:bd:42:d4:74:75:
0c:69:ac:70:65:4c:f9:ca:c4:d1:24:76:1b:20:f0:
9b:f0:40:f9:43:cc:96:4b:92:a2:a0:4d:66:1d:3e:
b2:3b:28:81:ec:9a:91:a0:7c:d6:af:68:b5:69:80:
52:dd:1f:7b:76:93:2d:1b:5f:26:86:99:0f:97:bc:
fb:01:fe:c4:2a:a8:b2:5c:15:2e:3b:d7:fc:a8:e9:
f3:be:40:66:f7:04:76:e2:4f:b5:d5:10:88:51:ba:
9a:b0:d8:95:63:de:0c:43:cf:73:66:80:64:b7:5a:
0d:a4:b2:c0:b9:22:b1:10:a1:14:f3:23:5e:ca:e9:
41:f3:4c:b3:08:68:2d:ca:67:01:a4:fe:b0:e5:88:
8b:95:dd:68:e7:53:d2:70:ee:28:f7:98:65:d9:e1:
0a:ab:81:ce:c5:39:b0:25:bc:65:aa:10:ee:1c:be:
0c:22:78:2b:63:d7:10:9b:ad:2e:ef:90:ec:1e:96:
d2:4f:31:cb:82:0f:d0:9c:b8:91:0b:94:62:e8:f8:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1B:F1:CB:A6:6B:21:0E:DE:5A:59:4F:1A:5B:B8:FF:B5:FB:B9:FE
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:da:36:05:dd:12:07:b8:b9:ab:a7:41:6c:a5:ce:72:a7:c1:
6f:b4:65:d7:36:56:dc:a8:ea:5b:1d:ff:c2:0a:f1:2c:86:39:
c8:7e:dd:47:a9:50:7a:98:63:1a:02:a0:1c:b9:5e:25:1f:f1:
1d:ea:38:40:5b:44:95:09:1a:4e:cf:5f:0a:4f:68:b0:ba:89:
dc:df:99:41:9d:ae:89:19:2f:40:2b:7a:c0:f3:93:bb:3b:58:
80:44:25:e5:77:04:34:d5:25:f3:a7:84:71:2a:8a:7b:94:0b:
1d:46:9c:15:dd:37:22:13:7f:66:67:fb:1f:ec:d0:24:dd:b8:
3e:1f:21:36:49:a8:e7:3a:82:33:b1:ac:29:f7:b5:e7:9c:6f:
8a:cc:27:47:3d:95:ad:02:92:a8:c3:3c:b5:bd:b0:50:31:54:
c4:58:40:21:8c:dd:6b:f4:43:e1:6d:0b:59:fd:18:84:7b:df:
e5:e9:70:b5:35:10:25:10:f1:08:e2:19:58:cc:41:b4:fe:6c:
a1:d7:6b:db:47:be:8b:1a:b9:7b:f2:86:5e:e2:7d:9f:2c:05:
1b:a0:37:7a:1c:08:5e:aa:a6:d9:5e:ff:dd:86:ff:4f:5f:3d:
4d:3d:b4:dd:97:b2:d5:da:b2:51:d0:e8:b9:ce:03:af:01:c6:
03:c5:41:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:15:33 2025 by rpki-client