Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
File: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft (raw, json)
Hash identifier: qyb6nd7LvJWWJ0jTGn2WoOc0UbtlUOD7WisvpR/023g=
Subject key identifier: 9E:05:20:2F:38:D6:26:2A:2C:29:F1:F8:AC:1C:DD:2F:83:B5:A5:14
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Certificate issuer: /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial: 019755A2EADAA591CE054655745AA913829D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 17:00:29 +0000
Manifest this update: Mon 09 Jun 2025 17:00:29 +0000
Manifest next update: Tue 10 Jun 2025 17:00:29 +0000
Files and hashes: 1: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl (hash: xv2Hu5u/NPZGhp7XJnTTccop71j+zFdlwIVIU4LJigk=)
2: lAuSQuDFdUBMNl3lAy120twR4Nc.roa (hash: JpmAAAEWNaHqqF/Ty2UXmq2zX1BZOYcR9uwtzXs+1Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:a2:ea:da:a5:91:ce:05:46:55:74:5a:a9:13:82:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Validity
Not Before: Jun 9 17:00:29 2025 GMT
Not After : Jun 10 17:00:29 2025 GMT
Subject: CN=9e05202f38d6262a2c29f1f8ac1cdd2f83b5a514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:b6:4c:66:79:1f:52:e9:b5:cd:9a:0f:2f:
d2:80:11:d4:0d:cb:9f:79:f8:59:c2:a7:40:01:24:
ff:32:d3:29:4f:6b:72:29:d6:1f:8a:3c:3f:1e:88:
2c:f8:98:86:18:59:eb:2d:66:03:a3:eb:59:d9:53:
57:ef:ea:c6:85:fa:eb:7e:2b:0e:6b:05:8a:f3:03:
7e:24:69:c9:c5:88:11:2c:a6:91:b4:b5:66:fa:b7:
6d:6c:41:1c:95:75:02:23:96:4d:6c:a7:de:ed:09:
d9:2a:69:a1:08:3e:4d:2c:28:49:7c:7e:d0:41:f8:
80:5a:a3:39:03:3e:76:52:33:25:f0:68:a3:a9:74:
91:50:25:28:26:15:2e:82:0f:76:16:c5:aa:59:ae:
9f:1a:fb:40:63:11:24:82:c7:76:9b:9f:dc:21:7b:
a2:f9:a4:f5:27:d6:96:2f:91:39:4c:e4:69:82:7f:
fa:0e:73:98:28:91:89:f4:b6:04:f0:15:44:ae:b6:
c4:7b:45:84:81:3f:05:c1:41:4e:5d:03:01:46:5c:
0d:70:59:8d:c2:f7:38:19:a5:70:44:f1:5a:01:f6:
ff:14:c0:77:f2:2e:24:51:09:f1:16:a9:ec:a4:0a:
70:d6:51:7a:cc:9d:dc:d4:c8:fe:28:df:34:02:4e:
7c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:05:20:2F:38:D6:26:2A:2C:29:F1:F8:AC:1C:DD:2F:83:B5:A5:14
X509v3 Authority Key Identifier:
keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:80:ae:03:d6:b7:b3:72:6b:e6:e3:de:19:27:27:30:c0:5f:
ca:16:9c:8c:6e:77:81:12:e1:9d:b1:78:74:b4:63:8f:7a:e5:
f6:e0:f0:3a:62:de:50:71:34:ab:16:e5:ae:1c:c6:07:13:29:
70:68:a3:da:80:b1:ce:5c:d4:5a:b9:14:1e:2b:15:8a:28:f5:
b0:73:47:77:ed:45:d4:98:7b:2a:ef:62:09:ed:75:06:b9:cb:
07:80:51:d3:6b:61:df:8b:8a:da:67:5d:02:3d:34:fd:aa:89:
0d:90:23:fa:d0:a7:6a:48:4b:01:dc:59:2f:00:a8:75:8c:cf:
1f:a8:7c:7d:93:07:1a:3b:bf:5c:a7:33:75:7f:33:45:1b:3e:
05:13:29:24:46:69:c0:84:72:6e:eb:ee:e1:0d:c2:1a:8b:ad:
89:97:8b:e7:30:4c:de:3a:ad:3d:46:82:c4:5c:cf:e2:f0:5c:
b7:2e:03:77:76:0f:66:e3:fb:cf:ed:f6:ef:0d:6f:be:9b:da:
81:f1:cf:d0:fe:a0:04:da:0d:35:a3:a6:70:9f:8b:7b:40:b9:
f2:b6:78:fa:68:3b:99:ae:68:bf:b8:c4:b8:e4:d9:13:c1:b2:
a9:11:b4:06:af:31:03:3a:76:64:c4:09:69:c6:b7:00:fe:2b:
1c:22:2e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:34:05 2025 by rpki-client