Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft
File: z_XcdutvgU7WAVaP3SyBEO3vjBc.mft (raw, json)
Hash identifier: oC4in9dfiBGt3CbYfz98wdAtVvu58RqV9bdQfaMfbtU=
Subject key identifier: CC:DD:AF:B1:5E:37:4F:0D:25:BA:AC:AC:9E:AA:CE:F6:8B:9A:E2:CE
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Certificate issuer: /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial: 019747B0C3CBCA93F48E81962F9B0D4FF5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft
Manifest number: 07A3
Signing time: Sat 07 Jun 2025 00:00:56 +0000
Manifest this update: Sat 07 Jun 2025 00:00:56 +0000
Manifest next update: Sun 08 Jun 2025 00:00:56 +0000
Files and hashes: 1: fl9cR0Hr0oLr8djRK-h6E2ObDr4.roa (hash: 93CR6TY7DEqZVxX2jIz+No9D+VOTLrGIoOBFxhhep+M=)
2: wey0C1mE-I7Q_DwhL1U5777Ego4.roa (hash: msSNP+OWSu/l7L1W+jddczo39swU6ms6DyPahC8MyPE=)
3: yTfvgCzBX5KpMte61Zg26iCGXLo.roa (hash: +V/hMZljZPtxUcKR56JEEYbLGPxCc6haoD/lYyBDsO8=)
4: z_XcdutvgU7WAVaP3SyBEO3vjBc.crl (hash: HNqHBeIeNr5OJOFa6iggb8rqBEadn6UJv9EpHNujj9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:c3:cb:ca:93:f4:8e:81:96:2f:9b:0d:4f:f5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Validity
Not Before: Jun 7 00:00:56 2025 GMT
Not After : Jun 8 00:00:56 2025 GMT
Subject: CN=ccddafb15e374f0d25baacac9eaacef68b9ae2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:a0:f3:da:9d:09:24:46:89:29:97:2f:79:
6b:ab:e2:c4:9b:a1:c5:fa:8d:bb:53:b7:a9:70:d8:
d3:55:2f:78:0f:6d:4e:4a:8c:8d:a1:c8:92:a6:0a:
59:93:d7:1e:fe:db:5d:c9:05:03:3b:10:29:24:fc:
bc:74:ca:87:bb:43:fe:c8:a3:4b:c5:b6:1f:8c:f1:
22:8d:b4:59:58:5d:ea:27:d3:2f:33:ec:31:66:7d:
b1:74:03:e1:5b:88:8d:7b:f7:1c:6f:a0:4e:5f:41:
38:50:b1:50:ab:d8:9d:26:b2:a7:67:de:36:9a:92:
a0:63:c8:56:9e:cb:62:74:1e:c2:12:cf:62:e1:a6:
a7:da:4a:66:e0:96:b3:72:e7:f7:7d:df:fc:cd:1c:
84:30:b8:c8:0c:55:d4:dc:f6:3c:fa:37:b0:b1:4d:
bd:79:0a:ad:bc:27:56:b7:4f:9d:ff:9c:ea:57:7c:
bf:08:3a:7a:1b:a4:f5:23:1b:54:28:52:e2:75:0e:
4b:a4:15:92:22:a9:08:cf:75:dc:2f:e2:63:69:fb:
03:5c:75:8b:b7:06:ff:e9:d0:1d:0d:0a:04:b2:9c:
45:e6:23:ce:11:ab:e5:b7:eb:7f:6f:24:c6:b6:06:
a0:e3:98:a6:05:47:2b:bb:93:4f:82:94:43:4a:15:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DD:AF:B1:5E:37:4F:0D:25:BA:AC:AC:9E:AA:CE:F6:8B:9A:E2:CE
X509v3 Authority Key Identifier:
keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3c:08:cc:27:4c:d8:23:4b:c7:9a:d8:6c:17:17:41:c9:f5:
29:fc:95:2c:6e:b1:4e:87:05:75:cc:7a:22:09:9c:72:6e:a0:
e5:c4:57:12:a5:9f:a5:02:93:49:96:88:4e:52:50:3e:e1:46:
07:d0:fc:55:b9:68:ca:11:18:2d:da:ee:a3:0c:ed:e9:2e:bf:
65:d9:a9:c0:56:ab:9a:32:73:a0:3b:cf:f7:6e:8b:aa:f4:f9:
04:33:d1:ea:5c:f2:81:78:1d:d1:dc:6b:33:81:9b:fe:29:6d:
ab:73:f0:0d:55:64:a8:d3:99:12:f7:99:97:fb:b5:4b:8f:a8:
76:cf:43:5d:4f:14:7c:4c:e1:91:89:96:55:01:73:c7:99:e1:
98:08:02:60:0d:2a:fc:3c:29:87:06:e7:df:d6:ca:94:04:d7:
fc:ab:cc:8c:93:a2:f3:aa:4f:73:92:8f:ce:c4:60:3e:26:2c:
1a:8b:af:e0:e9:98:17:e5:4c:39:4f:0f:36:31:4a:3c:d8:6b:
7b:4a:dc:6e:11:5c:46:60:d1:79:9f:1f:1f:f8:eb:29:82:a0:
9c:ac:16:21:55:e8:63:1d:85:b8:d8:52:72:e9:b8:be:d1:30:
6d:ac:5c:92:53:61:01:e5:a7:08:99:fa:02:34:45:af:50:ad:
1c:68:77:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:26:28 2025 by rpki-client