Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
File: z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json)
Hash identifier: DCJG0OE0Kg9b29Wbsp2EwirV6gWufRctNU6emb8Ibrg=
Subject key identifier: B3:BC:4E:70:41:66:36:A2:2C:34:F2:93:02:73:2C:5E:5D:96:17:E6
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 01975E01613B73ADA2D1D923380EE92A11A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
Manifest number: 158E
Signing time: Wed 11 Jun 2025 08:00:38 +0000
Manifest this update: Wed 11 Jun 2025 08:00:38 +0000
Manifest next update: Thu 12 Jun 2025 08:00:38 +0000
Files and hashes: 1: 3RInciSdJGuSvDB_51KkkZIJFSM.roa (hash: 3/HjzRtzuMbFeOMatgJOwMZQLWYkmzjLRu3ceCOI8Rg=)
2: Vwxuf9tXogbGBPbtetxGHltRAJA.roa (hash: 56fbOe+uRKJW3PaHfR9HfAkpkYQK6n+PS05QT68yj88=)
3: r_bOLpGR44Uxr2yZR3U8n-cd72g.roa (hash: 77U0OrAigBGcas60BhBB6LRX9fbaZ0dNBtqvHrAGNSA=)
4: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: hePVC24WjmVxRRxTvEc/bwby3WxvFIksvW3ALdAtx2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:01:61:3b:73:ad:a2:d1:d9:23:38:0e:e9:2a:11:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Jun 11 08:00:38 2025 GMT
Not After : Jun 12 08:00:38 2025 GMT
Subject: CN=b3bc4e70416636a22c34f29302732c5e5d9617e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d8:9c:93:49:14:51:87:9f:4d:59:73:61:d3:
74:45:1b:11:95:83:e2:42:12:ad:11:52:de:8b:f0:
97:62:69:2c:69:5c:91:99:fe:f0:c4:90:a3:9d:01:
93:7a:4e:67:6e:4f:84:b3:62:cd:88:bb:ef:8b:80:
20:d9:07:8a:ae:de:8f:87:d4:ff:db:78:ee:56:47:
91:2a:ee:3d:2d:0e:bb:88:43:e6:97:e4:ad:fa:5a:
e8:a1:60:fe:00:6b:1c:49:09:9d:3e:74:90:1b:2e:
02:ba:95:ec:e5:9d:bd:f7:64:06:2d:53:9a:03:1f:
c6:4d:33:0d:6e:a5:4e:41:9a:03:41:f3:b0:07:59:
f8:e3:f1:8f:b5:39:b4:26:c8:af:51:96:cf:5a:c9:
3d:43:71:15:11:91:3b:98:35:67:84:a2:00:e8:62:
c1:d9:c8:96:c1:a1:cd:7e:61:da:df:97:05:aa:fd:
53:cd:ea:4e:a7:02:78:a3:35:ce:b0:25:27:c5:4d:
b1:f1:59:71:77:8b:66:cf:24:5b:dc:8a:40:3e:82:
53:2c:d2:e1:39:7f:d7:75:de:ca:c6:f7:41:55:4d:
f9:6c:40:fe:a3:71:da:01:f5:09:8d:b3:b2:32:01:
6d:7b:c1:fe:47:bf:9d:c5:5a:ca:cb:47:2f:b0:78:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BC:4E:70:41:66:36:A2:2C:34:F2:93:02:73:2C:5E:5D:96:17:E6
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:45:2b:fc:de:b4:71:c9:f8:dd:c9:aa:51:70:cd:b0:21:b3:
87:3c:0e:9b:8c:61:b6:0b:63:ed:d8:9c:d7:2c:67:81:6f:18:
21:b7:39:07:c4:8a:1b:db:08:36:8f:cc:c7:66:49:53:f1:fa:
8a:b3:d3:93:d8:5c:08:59:11:dc:9c:7b:3e:d7:f1:9e:e8:92:
8b:70:0f:02:bd:cf:a8:a7:a7:53:7a:64:cf:00:1b:3b:f8:e7:
6b:79:fb:62:f1:34:2f:23:47:d4:ac:e1:5a:81:fd:9d:c7:19:
68:53:10:04:36:7c:f2:10:a8:27:4b:47:dd:2e:74:8e:a0:60:
f9:de:e3:34:4a:a5:b3:c6:d5:49:8d:5a:2f:fa:78:d3:fc:50:
0a:40:9a:28:bc:cb:f2:5c:64:66:47:9f:d7:6d:07:25:1b:59:
89:b8:e4:e4:29:fe:cd:6f:1e:f8:ad:3f:1e:76:17:b9:e1:df:
6a:75:53:73:e4:67:5a:0d:67:34:d2:15:1d:b4:bd:8f:51:f1:
b1:bc:e9:f3:19:b6:7b:15:51:9c:f3:f6:dc:95:f5:df:79:50:
e5:f4:5b:ae:7d:3a:87:1b:da:65:9f:76:7d:95:9a:ce:f2:37:
f3:c3:aa:77:c2:22:7e:a0:7b:35:83:08:c8:5f:dd:23:81:e4:
c5:c8:79:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:11:21 2025 by rpki-client