Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
File: z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json)
Hash identifier: qKGgCtMJ29RmgznAApau+p8cA6C5oejN6vHVJN+yEUA=
Subject key identifier: EF:42:3F:84:6F:72:43:F4:C0:12:91:56:08:BC:2F:BA:5C:39:AF:64
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 019763CC42D73641970F8DF0B763A00A2702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
Manifest number: 1591
Signing time: Thu 12 Jun 2025 11:00:20 +0000
Manifest this update: Thu 12 Jun 2025 11:00:20 +0000
Manifest next update: Fri 13 Jun 2025 11:00:20 +0000
Files and hashes: 1: 3RInciSdJGuSvDB_51KkkZIJFSM.roa (hash: 3/HjzRtzuMbFeOMatgJOwMZQLWYkmzjLRu3ceCOI8Rg=)
2: Vwxuf9tXogbGBPbtetxGHltRAJA.roa (hash: 56fbOe+uRKJW3PaHfR9HfAkpkYQK6n+PS05QT68yj88=)
3: r_bOLpGR44Uxr2yZR3U8n-cd72g.roa (hash: 77U0OrAigBGcas60BhBB6LRX9fbaZ0dNBtqvHrAGNSA=)
4: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: tzjOaQWktCW1QFT7FJt+jYMteO/Kaja+RmSYL6pe7p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:42:d7:36:41:97:0f:8d:f0:b7:63:a0:0a:27:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Jun 12 11:00:20 2025 GMT
Not After : Jun 13 11:00:20 2025 GMT
Subject: CN=ef423f846f7243f4c012915608bc2fba5c39af64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:30:45:61:73:6d:cf:3f:52:cb:31:30:5d:
1c:68:ba:9c:7e:fe:0d:a0:ab:fd:e4:97:04:06:1f:
f7:3c:34:c4:71:f0:53:5f:d2:55:3b:88:bb:ac:6b:
9e:3d:5d:bd:df:da:4f:bc:04:8b:11:7d:05:06:c1:
86:18:cf:29:c4:e1:2a:12:d5:bb:24:cd:50:a4:0d:
7c:09:fc:98:e2:30:97:21:a7:1a:ac:1a:2c:95:e9:
3d:04:f0:87:35:7e:d2:22:7a:90:8e:28:60:1d:82:
13:40:b9:a3:c1:e8:ad:54:bb:66:ae:e9:92:04:07:
58:ea:b0:55:23:b1:60:fd:cb:d0:a3:83:ba:75:87:
36:ad:30:4a:ce:e8:34:df:bb:fc:ca:fc:68:12:e7:
39:e4:6f:64:09:d9:4a:ce:e0:f9:7f:3f:bb:e3:90:
4c:02:39:eb:34:63:82:ba:8a:3b:3c:ae:67:7a:61:
a1:c2:00:ab:71:02:6f:d1:0d:d8:32:17:db:5b:d9:
a8:f5:6d:43:68:46:3c:f4:a7:90:35:90:46:ae:8c:
64:35:c9:a0:85:0b:1a:9f:66:e2:87:60:f8:da:84:
e7:c6:40:cd:e3:47:5b:89:79:71:02:a5:b8:e9:7e:
61:d8:18:1a:54:67:53:e3:56:58:37:89:2b:a5:21:
ae:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:42:3F:84:6F:72:43:F4:C0:12:91:56:08:BC:2F:BA:5C:39:AF:64
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:26:41:4f:af:54:33:cf:b8:ed:87:42:1e:96:cc:27:8d:99:
d6:cb:0b:76:62:14:fd:81:2d:64:59:b9:a9:17:3c:3c:96:11:
c0:b3:fa:46:c1:ec:d8:02:ad:79:b3:48:67:47:2a:5f:12:cd:
69:85:e7:f9:ec:23:92:31:a6:5e:cf:00:6d:09:cc:fb:a8:a6:
61:af:b1:1e:15:a5:1f:c3:e9:fe:d8:48:d3:ce:a3:65:08:13:
28:a9:ad:54:02:43:63:bf:e0:3f:47:6f:3f:85:e2:a7:15:32:
3b:2d:78:32:c2:c7:f4:58:5d:db:52:0f:b3:ad:16:a1:33:1e:
53:b7:91:7b:32:04:6b:a0:af:a1:9c:d3:4f:6a:18:13:a7:73:
68:70:bb:64:43:1a:47:4e:d0:17:36:21:f0:b8:ed:60:aa:ab:
8c:c7:f0:77:52:a4:7c:1f:a7:77:aa:8b:de:f4:e7:45:e5:9d:
78:05:b5:ae:bd:00:57:4e:92:d9:3c:5f:e3:d5:c3:2f:2e:5c:
02:fd:28:8f:4e:20:e2:a0:ab:a2:2e:7b:a7:9f:07:53:91:9b:
4d:dd:a3:b1:d4:83:a9:49:06:5c:85:f9:8b:df:0a:16:e7:19:
b1:01:16:32:31:7f:4a:7c:41:d5:cb:70:57:f1:a4:ac:df:21:
3f:bf:44:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:36:46 2025 by rpki-client