Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: S1YW8e+oBk9dBMC91hoah9X0Y/cKJsFpc03xPqfVxYQ=
Subject key identifier: C0:C0:B3:44:8F:46:27:93:3C:E6:A6:DB:56:DA:8A:75:DA:D0:66:A7
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 01974365902A23CD5E9A73EEB56625743F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 106B
Signing time: Fri 06 Jun 2025 04:00:18 +0000
Manifest this update: Fri 06 Jun 2025 04:00:18 +0000
Manifest next update: Sat 07 Jun 2025 04:00:18 +0000
Files and hashes: 1: MPC24ig7GybvQGJQS-GC0wxWNWk.roa (hash: qOm3yyWDXF7wdNeDgGEdzc6Ua0rCER7AIaOxZKXE29E=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: tSS9UyMkrZIwWr7IYCCxPjjtziFoCJTkOX0LW4bsmA0=)
3: hsXOS728ssx8bAD81ls-MhEMYHY.roa (hash: WicCvVpq6yjNVb8B4LAK2/Mh2on49kT2FPzZdWAqLP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:65:90:2a:23:cd:5e:9a:73:ee:b5:66:25:74:3f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Jun 6 04:00:18 2025 GMT
Not After : Jun 7 04:00:18 2025 GMT
Subject: CN=c0c0b3448f4627933ce6a6db56da8a75dad066a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:d7:97:22:6c:e9:dd:a6:93:c8:9e:93:bc:
10:e4:7c:cf:cd:f7:97:b6:93:07:47:1b:88:06:da:
04:0d:eb:32:d2:df:5a:8a:b3:ea:3d:cf:9d:20:37:
9e:25:37:2a:e0:8c:3d:58:ac:15:ff:8b:60:5d:2b:
22:bb:aa:5c:7e:08:86:78:c0:c1:bb:98:bf:fa:75:
ea:f3:bc:4a:aa:f9:05:1b:31:c4:0f:c6:6b:e9:25:
49:68:65:d6:f3:1f:c0:e4:f6:69:30:34:5e:c1:43:
1d:81:12:88:fa:e3:88:1c:9c:d4:fe:8b:df:41:d8:
42:0c:ca:75:11:f1:44:43:5f:eb:9d:ab:c7:79:2c:
76:c4:d8:0d:ac:4e:6b:93:3f:22:76:61:62:4c:85:
45:0a:c4:39:f1:f4:ee:68:c6:4d:b0:65:09:f3:e5:
02:1b:fb:0a:11:25:04:cc:50:cb:e5:20:dc:bf:d1:
bd:73:4c:1c:71:65:97:4a:07:30:42:b4:97:ce:ee:
f5:4f:c4:6b:65:63:dd:49:75:6e:e2:4f:eb:84:c0:
09:80:9b:2f:e7:ec:82:f7:30:c0:c6:87:ca:34:6e:
46:a5:bf:94:83:f4:12:c6:bf:8d:b9:c4:54:e0:c1:
32:0b:ec:ba:67:ea:11:91:db:4c:c1:a6:7f:a5:9a:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C0:B3:44:8F:46:27:93:3C:E6:A6:DB:56:DA:8A:75:DA:D0:66:A7
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b7:22:e3:ce:83:60:20:bd:ee:e8:1d:72:0a:c1:18:e4:6b:
52:fe:92:00:07:df:47:11:5b:5b:97:b4:0c:ad:27:a0:4a:04:
e7:b8:e2:79:b6:21:5f:0e:2e:65:90:ae:db:93:bc:46:04:ae:
65:ad:1c:d9:55:87:ad:c3:13:25:aa:95:86:07:7b:cc:cb:4e:
34:b5:f4:3b:e5:57:20:c0:89:b9:72:21:37:06:95:4b:87:f3:
23:b5:a9:14:bb:2f:3a:5a:e1:2f:65:ec:a8:80:0a:87:84:85:
77:38:d9:f7:b0:d7:0d:96:ca:12:ca:c7:2d:87:35:21:11:8c:
15:6c:fc:d9:16:4a:a9:8a:99:53:96:fa:d9:f8:1a:7f:ad:fe:
ac:61:ca:1f:49:05:ce:a1:44:78:da:56:23:80:dd:5a:0a:64:
99:21:bf:4f:62:82:3e:de:49:06:de:21:0c:96:d1:95:88:bd:
f4:40:82:90:2d:30:d5:07:ba:78:e1:eb:cc:17:d6:55:64:0e:
19:2c:e1:8a:94:5c:25:02:5d:ba:35:f5:94:f9:17:b4:04:32:
95:d3:48:b8:47:89:da:43:fd:38:b1:47:35:54:aa:11:1b:da:
c3:45:13:2a:8f:19:f7:ba:6e:d3:15:94:43:d1:82:90:3b:8d:
9c:3e:a7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:06:57 2025 by rpki-client