Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json)
Hash identifier: uInvL+wX8viHV/haQ22pDm4EtT1EvrvEss3cu5Z3iD0=
Subject key identifier: 9C:65:F7:8B:F3:0A:AF:FD:0C:76:95:BC:F7:06:51:87:41:D3:4C:21
Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13
Certificate serial: 01974A0CF082CF1E43201E99985AAD01E54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
Manifest number: 138C
Signing time: Sat 07 Jun 2025 11:00:51 +0000
Manifest this update: Sat 07 Jun 2025 11:00:51 +0000
Manifest next update: Sun 08 Jun 2025 11:00:51 +0000
Files and hashes: 1: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (hash: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=)
2: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: BQceSk7Ydco5ZBiVAz5t4QWH6rH6v+juQeGbMwN4Sho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:f0:82:cf:1e:43:20:1e:99:98:5a:ad:01:e5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13
Validity
Not Before: Jun 7 11:00:51 2025 GMT
Not After : Jun 8 11:00:51 2025 GMT
Subject: CN=9c65f78bf30aaffd0c7695bcf706518741d34c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:e2:ef:f2:78:75:9c:61:3a:c5:16:cf:b4:
c5:17:00:bc:b6:01:e3:f5:db:8b:4d:ca:48:11:6b:
82:5e:28:e9:c4:ca:b3:b5:ee:a2:82:a4:dc:e9:0f:
b8:6b:30:1f:e0:a7:77:2b:c6:0d:c0:44:44:bf:7f:
01:c1:4b:d1:2b:50:ba:5a:64:fc:70:b5:08:37:f3:
23:a5:31:70:eb:4e:08:b3:14:29:b1:1e:41:54:4f:
f8:6a:93:6b:83:6a:40:a2:96:5e:bc:f3:01:c5:65:
1e:81:fe:a4:a8:7f:e0:9a:6f:78:be:88:da:80:c5:
92:d4:a8:00:fc:fd:4a:4e:21:2d:5d:4c:0f:48:cf:
71:59:fd:7a:7c:85:15:95:ab:74:5e:02:fd:75:02:
d2:c4:4a:3c:73:8d:06:56:e7:35:48:0e:6d:38:fe:
00:42:cc:41:7a:b0:0f:f6:e6:3b:43:71:63:38:85:
5a:75:f5:9a:a1:8e:bb:7b:68:1d:60:a0:4b:73:4d:
b3:27:44:41:7b:03:f0:f8:71:43:d8:fc:08:27:b8:
35:82:6c:03:ae:2a:05:1f:33:84:8a:5d:44:60:72:
59:66:7e:d8:b1:f5:15:9b:42:1c:2c:ec:fc:44:6f:
12:ae:3f:23:32:1b:7d:39:c5:a6:5f:c4:b7:64:33:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:65:F7:8B:F3:0A:AF:FD:0C:76:95:BC:F7:06:51:87:41:D3:4C:21
X509v3 Authority Key Identifier:
keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:df:6d:dd:ba:a0:e3:ab:c1:8d:5f:ed:50:e1:fd:85:60:61:
9a:62:9e:74:c4:6f:f6:c4:51:07:0d:a8:0c:68:6f:ef:5b:05:
e4:31:b0:e8:93:08:3a:2a:4c:9e:84:2a:7a:92:17:57:4a:5e:
e4:b6:76:97:53:bf:db:08:ec:a5:be:80:5d:24:bf:98:89:1c:
ce:7f:8b:11:4f:95:be:2f:2f:0c:13:38:4b:1d:e3:21:94:e9:
e1:b4:d8:35:f7:37:f6:84:20:11:cd:03:01:22:83:23:de:4d:
7e:04:9d:20:ef:cb:13:43:53:16:25:26:62:96:62:34:96:8e:
7d:4f:41:46:72:83:55:8c:18:92:cd:4b:d3:ac:86:9f:b3:22:
98:c6:98:33:f5:44:2a:2d:5e:ab:8d:88:96:b4:01:6b:63:03:
cd:e0:e2:89:7e:ed:24:9f:85:c2:8a:bf:1e:32:dd:a3:2b:ac:
ad:e5:62:d7:39:a7:36:69:69:4f:7b:45:33:da:34:3b:6c:7d:
9f:9d:f7:84:07:98:61:c9:35:e9:1b:de:67:86:07:73:c9:c5:
39:b4:35:85:8a:ff:15:99:55:7f:e3:27:6c:b8:5b:0a:b3:90:
45:36:22:ae:dd:9a:3f:f0:74:59:54:61:c0:3d:b3:dc:a9:bc:
d7:fd:26:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:17:11 2025 by rpki-client