Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
File: z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json)
Hash identifier: POwfmshspZ7jpRN+ADGoQSepTdmuow6x7vhnrRoxqY4=
Subject key identifier: 77:3D:8F:64:02:AA:64:1B:3F:8D:F1:5B:B2:62:96:07:4B:04:C1:99
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 019745F8D90705232F97B24A07E1B43BA8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 16:00:25 +0000
Manifest this update: Fri 06 Jun 2025 16:00:25 +0000
Manifest next update: Sat 07 Jun 2025 16:00:25 +0000
Files and hashes: 1: 29zMSF3w66sUntVbm7zafoqxL7A.roa (hash: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=)
2: 3QUDeKE7yNgQmHJNVO-g-9mVj4o.roa (hash: pVQz96Zg1UqB0ZGK2z8e6eGc6vTCat1YgW+D9RqJ9KA=)
3: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (hash: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=)
4: vA4rANUmY77ajy3yEyLDZ1K3vnA.roa (hash: v5PKNuGl4AALPFrvuOw4WSf5gwfiM8g/rIh066tDvuI=)
5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: NzmyhXyFzilvOeEgxOY9zJYQ00dC6nssVL3HqwqWic8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:d9:07:05:23:2f:97:b2:4a:07:e1:b4:3b:a8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Jun 6 16:00:25 2025 GMT
Not After : Jun 7 16:00:25 2025 GMT
Subject: CN=773d8f6402aa641b3f8df15bb26296074b04c199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:04:93:9e:80:09:13:91:9b:d6:9a:c2:d9:
b2:3e:84:7d:fa:b8:76:78:ac:7a:2b:86:50:ef:09:
47:cd:5c:68:d6:e3:7f:db:5a:e5:13:8a:12:c4:e6:
33:ce:67:a3:0f:dd:ce:42:fc:8f:21:35:9f:3c:44:
8f:08:2f:34:3e:10:26:65:10:8e:b0:f2:13:45:2d:
0d:ec:05:b2:7d:07:ae:d5:83:c8:ca:29:32:b0:15:
15:3a:68:50:73:d7:91:e7:15:42:56:43:80:9a:fb:
2e:53:a6:09:73:99:11:5a:87:de:6d:84:c8:a4:dc:
77:8a:af:8f:76:50:ad:bf:f6:2a:f7:6f:a7:02:ef:
98:3e:82:94:ca:c9:d8:34:aa:c0:d6:5f:68:4f:d7:
71:55:27:91:6f:00:65:9f:cc:6f:5a:c4:86:1d:f9:
0d:24:6e:f6:1a:33:a1:20:89:0e:e5:cd:9c:68:9c:
df:7d:95:03:96:9e:7b:59:6d:0d:1a:33:07:cc:cf:
e4:04:30:fd:a7:95:b9:0e:08:3e:44:96:7c:40:ab:
c8:79:66:39:8f:9f:cf:b1:99:30:63:1f:6a:f1:57:
06:64:d6:96:e1:4b:23:2b:02:81:1d:00:9f:2d:7b:
2e:a3:97:12:c1:42:d0:bf:98:ca:d8:3b:c5:a5:0e:
83:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3D:8F:64:02:AA:64:1B:3F:8D:F1:5B:B2:62:96:07:4B:04:C1:99
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:78:3d:d3:91:fa:41:7e:6a:b0:29:88:bd:6d:f4:fb:00:40:
74:73:af:2b:62:0e:46:dc:ad:21:95:69:f6:f9:84:01:9c:c8:
ea:1f:7d:81:e0:01:55:71:8e:68:9a:eb:e9:ab:32:f4:1e:92:
4d:ac:d9:2e:69:0c:87:ac:e2:d0:84:a2:aa:61:b0:8c:65:df:
57:d3:c9:e9:bc:0d:ad:4f:20:8b:32:b9:e5:91:e1:1e:56:d6:
e2:0a:16:b7:4f:e5:54:3a:35:1e:4d:49:ba:d9:10:3c:87:ed:
bd:2e:50:d7:d3:c6:18:0e:55:f5:df:80:ce:85:45:cb:83:6c:
41:9c:36:e0:93:47:85:8b:4f:0f:fa:6f:e0:88:24:96:f9:e9:
ca:1c:44:8d:ec:b8:1a:07:14:d7:16:b4:c4:02:bf:2e:1e:d9:
a4:46:98:66:51:e2:68:ef:95:d7:2c:90:3d:be:ca:84:4a:91:
1e:3c:db:13:57:10:e2:c4:04:18:f9:9d:11:1b:e7:b8:5f:44:
0e:e7:1d:c4:23:5b:58:c6:7a:db:1d:eb:1f:d3:0d:5d:6d:ff:
ab:06:62:f6:a4:e9:ef:2d:70:ee:e1:12:ff:1e:08:9e:77:24:
02:32:43:6e:c4:cb:36:64:73:a3:de:3f:30:bb:75:ea:b8:41:
a8:3e:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:34:36 2025 by rpki-client