Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File: Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier: L/L9Sxj6IOuvOUXePK9fo0stgVh2W1O901ldC0drBAo=
Subject key identifier: B6:70:3F:B1:8A:5C:D4:A4:3F:B2:A7:B7:05:B5:B2:B2:07:F3:B3:50
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial: 01974B56D96814288F92E9336E22D413C197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number: 0B92
Signing time: Sat 07 Jun 2025 17:01:12 +0000
Manifest this update: Sat 07 Jun 2025 17:01:12 +0000
Manifest next update: Sun 08 Jun 2025 17:01:12 +0000
Files and hashes: 1: IyubcYm7YNGoTHG6Zyl3Cm2IkRw.roa (hash: 4lmGSbybL+9qT7cvm7erjsIQir7v2NPime1p2riEn1k=)
2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: +37B3N29xJSQQmt+H6qN6zQt+PeJt1Spngv7Agu88H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:d9:68:14:28:8f:92:e9:33:6e:22:d4:13:c1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Validity
Not Before: Jun 7 17:01:12 2025 GMT
Not After : Jun 8 17:01:12 2025 GMT
Subject: CN=b6703fb18a5cd4a43fb2a7b705b5b2b207f3b350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:5e:6f:43:27:c6:15:95:5a:6d:17:ef:38:
72:fe:0a:da:21:d5:cd:17:6c:33:72:c9:75:a0:75:
88:8b:89:c3:0b:62:72:d6:12:8f:bb:0f:c5:99:eb:
0f:f9:43:98:50:90:44:f3:4d:ca:08:22:d7:aa:9a:
59:98:77:3d:d2:ba:bf:24:e3:31:28:1f:ce:1c:5e:
d4:e3:8a:62:1b:73:5c:1c:f1:fe:46:43:4f:ad:1d:
eb:d2:a8:aa:1f:c3:48:09:d3:b8:a1:e4:d8:74:73:
67:d3:59:dd:71:db:c6:cb:fa:5e:33:d9:07:24:4e:
e1:58:a6:77:6b:38:fe:c5:bb:36:af:47:73:31:c1:
a6:43:07:dd:b7:c4:02:cb:70:f4:eb:74:82:a1:07:
70:66:28:41:0a:fa:1e:e7:1d:fb:e8:d4:02:92:bb:
c3:9e:5e:80:33:89:86:47:63:9e:9b:3b:8f:b0:61:
28:7c:f2:ca:88:eb:48:52:a1:e4:56:a9:5c:0b:fe:
ef:75:f1:57:e0:83:ba:37:c2:c9:40:cf:9d:97:68:
41:94:28:d8:9a:cf:4c:4a:af:7e:c5:1c:c1:9e:30:
cf:27:6a:4f:4b:48:ed:16:de:ea:1e:7d:f4:63:3b:
a5:5f:80:78:d1:2a:17:f4:02:09:d7:32:6e:95:13:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:70:3F:B1:8A:5C:D4:A4:3F:B2:A7:B7:05:B5:B2:B2:07:F3:B3:50
X509v3 Authority Key Identifier:
keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0b:e8:8d:3e:e1:51:dc:1e:02:88:92:e2:f4:6c:57:78:0c:
f0:56:ee:da:78:f1:da:d9:73:4c:a2:90:e8:73:25:61:2d:3b:
8d:db:d3:3e:cc:49:08:f4:8f:78:6d:a7:8e:0e:11:3f:19:43:
04:a4:c5:0e:2d:4b:c0:32:ec:2b:32:93:b2:ee:be:17:ef:19:
13:4f:1a:12:fb:61:62:d2:13:ac:5d:9b:5b:59:00:da:56:02:
40:27:ee:20:ee:93:d1:7c:3a:12:76:40:bb:80:3f:36:f7:54:
f1:ab:5f:02:08:9a:15:ad:7a:a3:c5:73:c7:f3:9b:f5:b4:3b:
7f:0a:c4:41:b4:01:91:b4:9a:f4:fb:88:89:db:8a:2f:b9:3e:
66:06:65:0a:37:c2:16:a8:4e:84:bc:62:cf:31:37:c3:42:5c:
66:7e:a5:ad:e5:00:8e:7b:ea:bb:4d:2d:aa:be:97:b1:74:66:
e3:0f:3c:15:8c:7f:46:cd:45:91:0b:f3:36:19:87:ae:4b:77:
ed:06:f8:77:ce:4d:00:29:30:cc:9f:c6:0a:52:2b:99:22:24:
1e:55:61:d8:b5:bf:5a:3e:5a:70:22:49:5f:d5:7c:ef:f3:a0:
9a:d8:10:1d:63:62:90:8a:ce:d2:9f:9a:0a:4d:3f:13:5c:2a:
25:fc:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:06:07 2025 by rpki-client