Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
File: z58C29lyWVoxyr6rDNldcGqM3TE.mft (raw, json)
Hash identifier: fZrKZ2GawZ7k4U2dj8qcEEY+kwqJvqKtTzEOizlcHCY=
Subject key identifier: 8C:FA:1F:D4:F2:5D:85:60:B5:DC:28:41:D0:3B:D6:8B:73:0F:84:FE
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Certificate issuer: /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial: 019748FA8BE557B130B7EB776D26B36DDA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 06:01:08 +0000
Manifest this update: Sat 07 Jun 2025 06:01:08 +0000
Manifest next update: Sun 08 Jun 2025 06:01:08 +0000
Files and hashes: 1: OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa (hash: zWfEvQNj+A4de5/9KNnrm0AaQsSkvDWrbOwMvnTm49M=)
2: z58C29lyWVoxyr6rDNldcGqM3TE.crl (hash: okx/tma8PTVfjMHZmlgIP9fxdRYmOyOimWMARCrCfnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:8b:e5:57:b1:30:b7:eb:77:6d:26:b3:6d:da:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Validity
Not Before: Jun 7 06:01:08 2025 GMT
Not After : Jun 8 06:01:08 2025 GMT
Subject: CN=8cfa1fd4f25d8560b5dc2841d03bd68b730f84fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:bd:ef:33:21:5f:28:a5:a9:c3:e4:e2:57:
14:4f:77:c0:00:e2:f8:1c:4a:64:52:08:7b:5d:4d:
dc:9c:3d:7b:55:7c:9f:4d:a2:54:55:b7:53:f4:5d:
e9:c2:91:47:a2:95:cf:5c:cb:3d:df:d5:a8:1c:0b:
25:73:35:82:ee:d4:5a:78:6b:1b:f5:f0:9c:25:33:
ec:02:e2:55:95:94:1f:22:29:48:ef:f1:5c:ce:55:
00:5d:22:f4:db:25:73:6d:e2:9d:08:4b:48:25:29:
9a:8b:f1:8f:74:8c:9e:fd:cb:47:88:2b:dd:e4:30:
35:31:4c:c7:90:f4:d3:72:34:f7:30:90:96:e1:0d:
f6:22:e0:b0:7d:0d:a1:da:d9:cf:fc:5c:b7:b3:75:
94:18:22:a8:b5:1f:23:90:62:4f:7b:a0:7c:56:43:
ed:4c:2e:6c:a6:d9:00:cb:65:d5:3c:8a:0e:d3:3c:
50:51:49:15:38:d5:6d:ed:04:4e:9a:4a:2f:0f:ea:
41:69:49:30:21:e7:96:29:5f:46:50:a6:93:63:f0:
48:d4:21:dd:97:90:d1:3d:c0:7e:f6:06:d8:32:f3:
6f:64:1b:cd:86:55:ec:50:33:f9:86:ae:5c:e4:c8:
2b:06:57:68:bc:2c:1b:df:e3:1a:89:c5:c5:fd:ea:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FA:1F:D4:F2:5D:85:60:B5:DC:28:41:D0:3B:D6:8B:73:0F:84:FE
X509v3 Authority Key Identifier:
keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f8:ef:8c:20:7f:95:34:e7:bf:4d:65:5b:90:8f:c9:12:21:
e1:fc:f6:6a:c1:3e:4d:e1:1d:4a:18:26:e4:a0:41:e6:23:93:
ec:51:80:b1:d9:5a:04:2a:c4:65:08:76:63:82:51:c9:e5:49:
57:9b:db:25:ef:fd:81:01:7d:ad:be:a9:9c:52:3a:e5:63:0d:
8a:a7:f5:02:bd:fc:28:80:46:d6:1c:86:dc:f7:11:8a:11:56:
24:f3:eb:b8:6d:18:75:cb:c1:73:5f:4f:ba:ee:cc:a5:4b:0e:
b6:c3:58:5b:86:f0:91:54:2e:04:ad:a7:00:fe:e0:4b:cb:f7:
11:7e:d8:35:17:12:14:81:b3:44:f2:29:2b:59:6d:ed:60:24:
cd:81:0a:02:16:75:af:de:52:d9:ff:53:08:a7:2a:ea:9d:b8:
32:18:91:f6:0f:1c:e3:30:85:15:54:d0:89:a3:61:b7:28:16:
e2:24:e8:7d:ef:a9:7c:df:dc:b8:0d:13:32:19:e7:d8:bf:cb:
a5:50:70:ee:44:3a:8b:a9:3b:06:db:71:42:8b:2e:3e:ed:49:
03:7d:36:59:b9:5d:ea:0d:11:13:9e:1b:a4:85:4c:f4:43:76:
9c:dd:79:01:8d:b1:d1:d0:a7:bf:14:01:90:4b:1e:4f:69:71:
78:35:06:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:49 2025 by rpki-client