Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
File: z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json)
Hash identifier: NOd2ET9D3VfDwl3NryjhtXoL/YSrzuj5p47hDLMTIAU=
Subject key identifier: 0B:41:40:CE:FD:FA:B3:87:83:85:8F:A5:0A:F2:88:FF:04:F5:59:D2
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial: 0197602765E7A41ECA0F9A4DF7845212EAF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
Manifest number: 0D38
Signing time: Wed 11 Jun 2025 18:01:24 +0000
Manifest this update: Wed 11 Jun 2025 18:01:24 +0000
Manifest next update: Thu 12 Jun 2025 18:01:24 +0000
Files and hashes: 1: d_srjB0rV-pBdYCmFI9IWlpmnVU.roa (hash: LS1Loj0+H4fYStPGBES8E134AHzfdF+eT4WU4j8b55c=)
2: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: DUSDciVmvK48+d5ggSZH82u0863mjXBm633Am9nkXdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:27:65:e7:a4:1e:ca:0f:9a:4d:f7:84:52:12:ea:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Validity
Not Before: Jun 11 18:01:24 2025 GMT
Not After : Jun 12 18:01:24 2025 GMT
Subject: CN=0b4140cefdfab38783858fa50af288ff04f559d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c6:fb:c9:54:4e:fc:e6:3a:a1:2a:99:5e:20:
01:e1:bc:b5:98:79:d8:08:df:c2:76:7f:74:ee:7b:
8d:c1:7f:57:3e:ae:9f:80:ec:53:6c:a3:42:d2:c4:
6c:d3:e8:97:62:aa:a3:6b:a0:7f:0c:ab:27:eb:0e:
7b:27:4b:d8:94:da:b2:7a:85:78:07:9a:d4:b9:0b:
ce:2f:c7:a6:5c:4f:ac:56:fc:f4:f3:5c:96:15:73:
f9:71:9d:5d:8b:72:e7:f1:f2:59:d4:38:b1:ac:21:
e9:f1:6d:5c:57:f3:00:19:30:0c:b1:2c:35:b8:17:
f3:f6:31:b2:b8:7a:25:c0:4c:81:b8:c8:a0:7c:14:
39:92:21:0f:39:9a:bb:5a:17:62:ff:29:07:9b:29:
54:36:b3:1a:cc:78:5c:e7:83:cc:fc:60:6d:0b:26:
38:15:66:43:48:8c:14:2a:cb:0a:76:8e:c3:cb:20:
28:f6:0c:8c:b1:41:61:9c:57:dc:80:71:12:87:e4:
47:59:81:ff:34:66:f4:03:b6:fa:9d:2d:59:48:28:
8d:b3:09:31:41:e2:e6:19:5d:12:cd:00:50:c5:b5:
61:9a:3c:2f:29:29:87:6f:da:22:7c:79:b9:71:15:
ae:a2:92:cc:a6:a2:dd:96:ae:34:6e:ce:9e:c0:69:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:41:40:CE:FD:FA:B3:87:83:85:8F:A5:0A:F2:88:FF:04:F5:59:D2
X509v3 Authority Key Identifier:
keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:24:5e:c0:e4:65:41:b1:c7:f8:9a:b3:55:c9:4f:d4:c9:20:
fe:1b:b3:cc:5c:d4:dc:b4:4e:0d:d0:cc:d4:06:e6:34:5e:b6:
b9:ea:0d:8d:42:f0:dd:d7:b3:09:cf:32:94:fd:6a:8c:00:f7:
60:ab:97:76:c0:10:8f:ee:11:8f:dd:47:b5:20:cb:de:79:d9:
c2:6d:b2:29:02:2f:25:48:9b:d4:62:ed:bc:78:45:94:e8:a8:
05:51:0f:b6:9c:03:bf:a2:9f:1d:5a:91:f7:8c:a3:a5:8b:53:
80:b2:04:d3:3c:e3:fc:18:49:5a:81:36:ff:f0:4d:39:da:bb:
2e:e3:89:7d:31:bf:24:b2:a1:97:35:7a:44:28:6c:fa:06:91:
47:fc:88:94:a4:37:89:45:09:12:b5:29:e9:5c:f4:05:48:9f:
4e:9d:cc:2c:0c:d1:a4:a5:f2:0d:f5:ac:05:bb:7d:36:40:9a:
9e:89:7a:32:c1:2b:a0:e5:24:80:d6:0c:14:8c:fe:8c:91:fa:
0e:71:a5:3b:7f:81:40:53:3a:75:bd:dd:32:b6:38:2d:97:4c:
a1:a3:75:bf:2e:31:e2:52:bb:cb:ca:7d:b3:01:5d:e3:63:d6:
cb:ee:b9:3e:dc:54:5b:94:96:69:2c:04:e7:ce:7f:c0:3d:9c:
5d:a5:23:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:45:17 2025 by rpki-client