Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier: TsKyVJjJCWKzULn3PA1EHnjoru5ZqZPQ3v9hH6tp2/U=
Subject key identifier: 86:47:C6:BE:40:54:D9:C8:4E:81:AC:49:EC:EC:A8:FC:A6:C2:09:AE
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 01974930FBC9D5494BAFE3B23D5470AD261D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number: 0C72
Signing time: Sat 07 Jun 2025 07:00:36 +0000
Manifest this update: Sat 07 Jun 2025 07:00:36 +0000
Manifest next update: Sun 08 Jun 2025 07:00:36 +0000
Files and hashes: 1: AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa (hash: jHy+WZea/KY2LIPLNfFyrSljh52WzofvhmuIGDrREzM=)
2: YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa (hash: FDzee6XqGxeVxnvKkrH/BVWvy6+j3Z62PPnSpcuiI80=)
3: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: HnaP7jKgvp8qh25s6vsT0YFM2IRxBwLNiA1N+fspNJQ=)
4: zx2sQUv3rsJGXAZABCst4_xZkOQ.roa (hash: FBqifBeUX2hPnOiisT6KsJiWdU/gan88BUTxXJkwpMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:30:fb:c9:d5:49:4b:af:e3:b2:3d:54:70:ad:26:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Jun 7 07:00:36 2025 GMT
Not After : Jun 8 07:00:36 2025 GMT
Subject: CN=8647c6be4054d9c84e81ac49ececa8fca6c209ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:a4:b8:62:0f:d4:fd:37:d2:ac:fa:ac:61:
ef:6b:16:e7:0a:3a:5c:2b:94:be:b3:f5:6e:86:9a:
4f:c1:a4:cc:a0:87:82:65:5a:84:50:27:56:ab:76:
49:b9:c0:e4:7c:e9:d8:2d:37:13:b2:f2:51:74:b9:
ad:01:27:6c:9d:3b:10:cc:16:d2:73:71:92:d9:b3:
9e:35:df:84:9f:9a:2c:16:ed:e0:46:70:7e:b5:df:
e3:79:46:65:db:df:2e:74:ba:9f:64:78:a8:23:67:
c2:83:ea:0b:01:75:4d:fe:47:df:58:a2:a0:01:1d:
67:19:14:c3:fc:64:63:fd:3e:70:2a:82:d9:c2:a4:
cd:93:fb:8c:59:d9:9c:6c:ae:7a:1f:59:0e:3b:92:
ed:41:a6:ee:c6:16:f0:45:1d:af:f8:c4:cc:2d:05:
32:60:f9:22:69:3d:16:7d:be:24:e2:5b:0e:70:5f:
b3:5b:c0:a6:42:bb:1c:9f:87:4c:33:1b:9a:3c:1f:
11:e9:24:5d:fb:e7:14:42:67:c7:18:41:d3:ba:39:
66:6a:fb:59:5f:cd:91:fa:94:bb:10:1c:f9:94:6e:
cf:7a:7a:20:37:d2:b0:6b:39:80:10:2f:08:88:d2:
d6:36:4f:37:21:02:88:29:ac:fe:e3:13:19:1c:27:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:47:C6:BE:40:54:D9:C8:4E:81:AC:49:EC:EC:A8:FC:A6:C2:09:AE
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5c:96:ec:de:3f:38:bc:0c:d0:2b:4f:30:f9:70:06:d6:ea:
d3:0a:46:2e:75:aa:17:cd:ba:63:45:59:a5:f8:93:c6:8d:66:
9d:cd:1c:c6:a1:65:d8:64:fb:29:68:1a:d2:fe:10:49:c6:fa:
a6:81:ee:d6:67:41:36:e6:bf:af:94:78:83:3a:e9:a1:a4:d5:
05:94:5d:40:50:ae:e0:93:37:df:52:30:e5:8b:ae:37:43:af:
c1:de:36:3f:55:46:35:44:cd:27:14:dc:15:b9:e4:60:5a:76:
7a:dd:95:1c:90:45:e8:b8:e6:ba:61:9a:ce:17:0c:d2:6c:5b:
d1:9b:ad:70:f5:f2:d0:14:bb:83:ac:51:67:81:55:1c:ed:51:
f4:22:86:8e:1b:01:b2:a8:e3:c1:81:34:20:49:ee:31:2e:15:
59:bd:83:67:9e:4c:8b:ff:7d:5e:c6:10:e0:0c:c9:61:fd:c2:
2c:92:0c:ea:f4:e6:e9:22:a6:67:2b:1d:a0:10:fc:d1:16:bc:
65:4a:c9:0c:15:a1:d3:94:d6:62:82:cf:ad:ad:89:50:da:9f:
2d:1c:ca:d6:ed:9d:19:cf:83:cc:9e:56:14:2c:81:d1:58:19:
31:42:d0:8a:d1:fc:6f:17:b6:0e:a8:a3:37:54:56:af:a0:65:
b4:a3:55:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:14 2025 by rpki-client