Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: G76t1S3acmibye1KJ6KeaC+qd2R6Goba22o+CTsEIH0=
Subject key identifier: 02:B4:E1:3D:13:93:4F:1F:0A:A0:B3:FC:AD:DC:C1:2D:32:5C:2F:F3
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 0197440AB81A4E0A1CF3769EB6742F091D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 0A3B
Signing time: Fri 06 Jun 2025 07:00:42 +0000
Manifest this update: Fri 06 Jun 2025 07:00:42 +0000
Manifest next update: Sat 07 Jun 2025 07:00:42 +0000
Files and hashes: 1: JKNWbouQzoruFwki9fjiu02Ceds.roa (hash: HUJbBXvos0tzAFbMulw/ZH+VVZ/kGp1mQGDZrKa1ES8=)
2: JYmQcVf6BfsYcKxJFKZsXd4f2To.roa (hash: tjmsYQgdvBrGDDiyWAJWajhEM88kj9HYgypYyxWTvaY=)
3: Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa (hash: 9wirUz6B2msilvWvCiwp1E+Ixnrs+bWT4H+o8cEiH+s=)
4: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: /zkqg3gGc3H29XHNQLfJbiwRrGoV7oU7W0v71SgYliU=)
5: jKB4bF7QEatig6EKVxlScEN1XC8.roa (hash: YIo6qCbdc07X+f+Ko5OWjfr4p+cI6VEVEj/ToimWQxE=)
6: mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa (hash: GNJXQDfp8FJLl+m4dx8Ma4QwUS4Qqykcf0B6fU00US8=)
7: mw0de6Xv2RzpyGlyY7DWmNuIerM.roa (hash: Ee21P5NIqEuyWMvaOtz32QEEMsKPLFLuA6raTwNAO68=)
8: oNBMbwaOMIQ3gc1brZ79tHvusAk.roa (hash: ysE/JGbhhCWnTVWZQIC1rfv8V4VscJDcwpcwjlUthoY=)
9: w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa (hash: Ut75AQ5RZ+LcXsHl6cibiMpZD/BBFo2+WgUIizJ+v2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:0a:b8:1a:4e:0a:1c:f3:76:9e:b6:74:2f:09:1d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jun 6 07:00:42 2025 GMT
Not After : Jun 7 07:00:42 2025 GMT
Subject: CN=02b4e13d13934f1f0aa0b3fcaddcc12d325c2ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:7f:14:92:02:57:2e:ff:fb:3b:6d:dd:90:
30:f8:86:0b:4c:0b:ea:f6:33:5c:91:95:a7:c7:0e:
b2:38:5e:c3:d3:06:26:57:8a:26:63:7a:95:94:08:
fa:8c:ec:a6:c7:6e:38:83:22:43:df:db:ba:cc:07:
b6:a6:df:60:37:be:06:bc:b0:81:f7:29:3c:8a:09:
83:9f:04:2c:a1:57:ff:68:ef:60:5b:8d:ee:d4:d8:
89:ff:ef:88:81:5d:92:2d:70:65:5e:31:b7:ec:52:
59:c1:d4:20:23:3c:d1:6d:da:4a:3f:7a:ae:c8:82:
c5:60:d4:d6:81:d2:b4:fb:8e:ff:b6:b0:63:d7:0d:
87:93:1d:c7:41:d5:85:45:00:b3:50:40:47:2f:60:
a1:05:6d:34:85:11:88:0a:c5:12:93:5b:33:e2:8f:
ed:81:80:b9:e0:87:d0:69:82:e8:1f:f4:74:b9:8f:
4d:96:ca:a5:c9:d3:ad:5d:16:d1:0a:35:3d:70:8b:
8e:29:56:35:a2:c2:21:ad:58:4f:a3:5a:cd:fa:df:
23:42:17:e8:f1:3e:45:5f:c1:e1:e8:c3:75:fa:9d:
8b:d1:5f:b4:9c:d6:1d:8c:e2:93:72:7b:74:a1:5a:
49:2c:4b:02:8c:f6:dc:63:83:76:e8:52:85:44:ee:
63:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B4:E1:3D:13:93:4F:1F:0A:A0:B3:FC:AD:DC:C1:2D:32:5C:2F:F3
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:fa:0d:68:b1:0a:e7:50:1b:57:c7:1f:c3:e5:13:26:79:33:
d9:2b:8e:1f:52:d7:91:db:ea:1c:bf:65:c9:e0:38:e5:7b:ab:
07:f6:05:71:3f:f8:19:01:29:2f:04:ff:73:50:a4:42:0f:a4:
70:d8:38:5e:0d:b6:2f:c7:87:0d:42:da:77:f0:1c:63:05:7b:
08:95:25:cc:93:f3:33:12:f3:f5:38:63:42:74:5d:61:16:3d:
71:79:df:53:b9:5e:3c:5c:b7:54:dd:a5:57:32:3e:f5:f3:10:
2c:a7:25:8c:2e:3e:64:32:2a:86:6c:96:56:b5:d0:82:77:db:
8e:f0:d2:db:d2:79:0a:4b:20:f6:cb:ef:49:fc:b9:fd:7e:44:
5d:8e:bf:a6:f1:52:06:be:66:43:24:3c:40:86:72:31:4d:ff:
57:05:86:58:b1:94:2e:e2:5b:e9:d0:db:63:63:83:78:50:81:
ca:a8:6b:10:8a:d6:9c:60:16:fb:e1:a7:92:67:ed:2a:7e:b8:
4b:62:d6:d2:a6:13:d2:ea:2e:b4:12:e7:c1:e3:41:27:ab:f3:
70:44:4c:17:df:55:99:21:c7:92:3e:ef:72:48:b2:6f:07:21:
da:dc:98:f3:e7:11:6e:a1:ea:22:69:66:ca:a6:2a:54:89:54:
39:16:d3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:36:32 2025 by rpki-client