Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: MJWTpjq/VzkNg2mejj7im2aEqkenAJpGLO8B6hVRFaI=
Subject key identifier: C8:62:C0:69:7E:7D:B5:58:D7:EC:94:52:A0:8C:7B:8E:3C:8C:09:E5
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 01974EC53402CA2CC16559E55D9DA5E8E98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 09:00:36 +0000
Manifest this update: Sun 08 Jun 2025 09:00:36 +0000
Manifest next update: Mon 09 Jun 2025 09:00:36 +0000
Files and hashes: 1: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (hash: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=)
2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: Rzy1gjVHmZdClQGEo23r+JvsF4LWCKO0As+9md1Oydg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:34:02:ca:2c:c1:65:59:e5:5d:9d:a5:e8:e9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Jun 8 09:00:36 2025 GMT
Not After : Jun 9 09:00:36 2025 GMT
Subject: CN=c862c0697e7db558d7ec9452a08c7b8e3c8c09e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:ed:00:a3:55:26:1e:c9:d5:fa:8e:a2:9d:
57:37:c5:26:76:d5:f5:ae:74:13:b1:a1:76:94:b5:
59:0a:82:18:fe:ea:98:92:77:15:d3:2f:35:4b:c3:
c8:38:4a:02:0a:3e:37:bc:0f:6b:84:03:97:a9:b9:
9c:76:0b:7b:fe:4b:54:12:6c:5f:1e:53:8d:8d:60:
b0:9b:97:eb:30:75:7d:5f:c3:33:c1:d8:4c:03:a1:
1a:97:7a:20:e7:b3:e6:0e:62:02:10:9c:15:64:6c:
db:31:fb:41:e7:13:06:77:1a:00:d9:4e:38:e6:50:
03:ea:73:83:2b:12:21:c2:b1:55:f1:90:93:49:2e:
b9:4b:f1:7b:42:89:e2:a8:36:16:a6:dd:d1:a6:7d:
a8:d0:85:65:ad:50:ed:ba:05:19:45:5c:cb:d6:dc:
a1:46:88:f4:15:fc:43:e0:ba:af:c4:bc:65:38:05:
8a:2a:cb:75:4f:7b:a3:0c:09:b7:7b:22:4f:72:2a:
75:95:30:95:ad:1e:c7:fb:59:b6:13:3f:5f:6a:17:
fe:c0:eb:97:36:06:ed:19:60:8e:e4:49:4e:0b:62:
4d:0e:92:37:3c:d6:11:5f:29:46:61:33:51:88:38:
92:47:74:5c:a7:15:01:02:d9:8e:33:1a:ce:e4:15:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:62:C0:69:7E:7D:B5:58:D7:EC:94:52:A0:8C:7B:8E:3C:8C:09:E5
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:33:ab:75:99:dd:7b:e3:b7:8a:4c:a6:ca:cf:5d:5b:04:b2:
ba:9c:13:bc:82:bb:3b:89:c2:d5:2d:87:18:fe:64:f9:8a:71:
91:8d:dc:66:45:1d:84:63:b0:56:0a:be:45:17:06:28:ee:4a:
9e:08:d5:f2:09:39:a8:3d:eb:11:aa:4f:a3:88:4d:5a:10:a2:
3e:f3:21:8a:d9:97:0f:11:53:d4:e0:38:81:96:f9:6f:df:63:
ba:a7:3a:95:04:59:6e:61:89:0b:ab:19:4e:d1:0d:49:e1:06:
6e:bc:ba:37:f5:37:a9:ca:2a:69:58:70:3a:d7:87:77:0d:4f:
80:ef:3a:e1:32:f2:30:ca:fa:3f:34:30:5e:41:4e:a3:b7:17:
8a:a3:db:39:54:e3:dc:b7:53:63:79:c4:6a:a3:51:7b:5e:ae:
87:3a:ca:c3:ef:c2:29:b9:b2:8f:3c:89:9c:42:23:03:39:24:
f9:2f:32:a1:03:db:53:27:e7:64:bb:09:c3:de:ed:6b:4b:38:
1e:60:62:cc:5c:50:75:ad:28:17:09:cd:23:d2:ae:a2:7e:da:
02:0e:81:e5:85:9c:dc:60:3a:2a:c3:7d:46:b4:a7:b4:06:d6:
53:e2:8b:dd:dd:22:c5:ff:6f:82:d8:c6:b6:59:a7:b1:84:cf:
78:aa:fc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:25:14 2025 by rpki-client