Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json)
Hash identifier: 0CkjSlr343p2MBhpANyAcZr9kH3rm2GHhIx/SdyY+JI=
Subject key identifier: C7:72:7A:C1:3E:78:C6:41:AE:F7:6B:E5:33:69:8A:03:60:14:1C:75
Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Certificate serial: 01974D4517542F6445543BE6582BCD241739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
Manifest number: 028C
Signing time: Sun 08 Jun 2025 02:01:02 +0000
Manifest this update: Sun 08 Jun 2025 02:01:02 +0000
Manifest next update: Mon 09 Jun 2025 02:01:02 +0000
Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: 4Tg3tZfjljH+Of0iGcPwi+KhQfxIKuoXxlVnrfdsTqI=)
2: mVbUdqr9oEcPiZysELwHzge0y8g.roa (hash: Y+aQue+b7f/IHLBZfZa5SygpKDtfepbI9i9idjcQ+mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:17:54:2f:64:45:54:3b:e6:58:2b:cd:24:17:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Validity
Not Before: Jun 8 02:01:02 2025 GMT
Not After : Jun 9 02:01:02 2025 GMT
Subject: CN=c7727ac13e78c641aef76be533698a0360141c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bd:5d:af:cd:f8:c2:7d:c2:55:d8:a4:60:de:
35:12:aa:0e:31:a0:57:d0:c4:ab:5e:ce:34:b8:35:
9b:27:89:87:f2:5a:9e:b2:84:7a:ce:c9:1f:3f:20:
63:cb:6e:d2:77:04:5e:d6:4c:af:27:d4:05:5b:a3:
b2:c3:c7:49:61:02:36:89:19:37:6a:1c:f6:b9:12:
f3:e4:07:e1:8c:8c:82:84:d7:c6:ff:8c:2a:ab:14:
8f:ae:b1:24:9c:fa:23:0d:a4:d1:5c:70:a7:95:9c:
46:9e:54:fb:6a:7d:31:8d:d4:ab:5d:b7:73:0c:ae:
47:75:9c:9f:29:ca:91:bc:a6:1c:0e:61:30:a4:5b:
7e:4c:c2:5a:8b:20:ec:88:fb:81:b2:6c:03:60:4b:
b5:0f:1a:cd:bb:7e:ab:42:cb:6f:d6:e4:90:e0:b6:
db:94:d4:7b:a2:d2:21:45:63:87:08:1a:13:50:e6:
2c:67:d8:ed:81:38:b3:63:6f:39:f3:e1:cf:5b:d0:
cd:37:0b:94:99:12:be:e0:e2:33:10:9f:d6:15:0a:
81:3d:8b:2d:d1:ce:56:4b:f6:e7:1f:7d:4e:88:a8:
9c:95:73:ed:da:56:6b:5d:68:4d:f0:40:01:40:4c:
97:17:7e:b8:9f:3d:f7:9f:43:52:97:be:ec:cc:b3:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:72:7A:C1:3E:78:C6:41:AE:F7:6B:E5:33:69:8A:03:60:14:1C:75
X509v3 Authority Key Identifier:
keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:55:73:23:27:7f:2f:18:21:e0:24:67:b9:7c:9d:db:91:c7:
c9:3b:aa:ee:ac:c2:d9:2d:c1:4b:75:fa:87:05:32:83:d5:91:
ff:12:9b:03:ae:a0:88:c3:95:d8:88:ad:8b:42:89:1d:11:dd:
7a:f4:03:52:48:e9:7f:e3:52:4e:1a:91:dd:26:f6:06:cf:bf:
3b:f5:e7:e2:a0:96:24:c9:86:f0:77:6d:2f:b9:1a:d8:19:19:
78:c5:54:44:12:9d:39:2c:e0:9a:13:eb:85:7d:7e:b5:b3:44:
3b:5a:f4:17:a8:a6:92:30:cb:b0:6c:1d:ab:8e:d8:88:e7:fb:
31:f1:2f:8c:de:19:51:5a:e9:c4:5b:dc:ea:cb:22:72:00:ee:
d1:d5:c3:c3:79:47:af:72:c5:88:55:54:44:a1:ae:61:75:73:
6f:15:8c:d2:28:e2:64:4f:85:08:ea:15:22:25:ab:28:de:b7:
6d:c7:c2:84:c6:b6:58:04:3f:c5:73:e2:c4:43:40:34:88:17:
b2:1e:bc:d7:6e:21:cd:44:1e:6c:10:e5:a3:31:d3:0a:1d:88:
b5:3e:39:91:93:17:4b:0d:f8:27:4f:4f:d4:70:45:71:6a:f4:
6a:cc:cc:29:36:13:de:a6:61:d7:5a:51:3c:43:07:4d:18:87:
25:cc:b6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:46:34 2025 by rpki-client