Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
File: z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json)
Hash identifier: anMB5mTKJFw8W6lPrz53pT8eXCgg6cFNAnzRbhtDs2Q=
Subject key identifier: 67:4E:0F:A0:1B:B9:0A:84:5E:B8:33:61:A1:2F:9C:F3:8F:6E:B0:7B
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial: 01974A438E533C048B2A9BE1EC7EF825EE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
Manifest number: 0346
Signing time: Sat 07 Jun 2025 12:00:30 +0000
Manifest this update: Sat 07 Jun 2025 12:00:30 +0000
Manifest next update: Sun 08 Jun 2025 12:00:30 +0000
Files and hashes: 1: dZiRDpde3UOQ1xx2KMjg7n8fR5U.roa (hash: yPB+megpjB1yqKHInLenUJsMo1ixynNI2NtglnJ5Xh4=)
2: eZlHkjP7bcQ5mqdW_8q_Z3CHJtQ.roa (hash: 34+cbh9+LJiKxMOepvEoyovCBwIb8f2BDirppGV1VYI=)
3: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: c6+LWDY8Uel6jCsFzhZ2zBn9TPWjkJu492E4EaAODLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:8e:53:3c:04:8b:2a:9b:e1:ec:7e:f8:25:ee:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
Validity
Not Before: Jun 7 12:00:30 2025 GMT
Not After : Jun 8 12:00:30 2025 GMT
Subject: CN=674e0fa01bb90a845eb83361a12f9cf38f6eb07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:26:28:38:94:11:33:9d:38:12:d8:77:c9:76:
91:96:c8:b6:12:35:8c:01:98:8f:06:5b:ad:b2:1f:
d3:c5:47:12:e6:b7:70:cc:28:b8:af:35:05:fd:7f:
8f:84:f1:59:cb:f9:84:de:4c:bb:43:04:1a:74:8e:
2f:d6:5b:84:db:87:6c:7d:c0:cd:f4:1f:28:b4:77:
99:12:73:fa:f6:cc:f2:3a:1e:15:ed:d1:d2:da:21:
42:3f:4c:65:21:35:53:88:bc:c1:43:85:45:22:3f:
04:d3:29:63:bc:3e:86:e9:1c:92:d4:18:9d:9f:ec:
d2:ef:8c:41:21:fe:73:3e:5f:3b:ae:98:e0:c8:d1:
b3:c9:ea:c2:45:19:c6:71:0c:14:9b:e7:57:7c:c2:
a4:cf:8b:91:0b:a6:da:ac:a1:ff:3e:3c:f4:a8:47:
91:04:87:ab:c7:33:ab:0b:78:7b:0f:df:f7:ff:21:
a3:46:22:5c:ca:4e:31:b6:af:ab:6e:b3:22:3f:d1:
f8:a3:67:78:54:6c:8c:76:46:e9:de:fd:b3:ef:78:
96:b8:f6:c5:55:59:08:7a:6e:80:2c:ce:9a:60:d6:
c9:43:97:27:d8:26:bc:cb:3e:d2:85:51:8e:3f:00:
37:68:9f:34:a5:70:b2:94:e8:26:eb:58:9e:81:d1:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4E:0F:A0:1B:B9:0A:84:5E:B8:33:61:A1:2F:9C:F3:8F:6E:B0:7B
X509v3 Authority Key Identifier:
keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:72:c2:5c:e9:e5:92:01:d4:f6:89:9b:c4:49:42:ed:62:b4:
22:9a:7f:c8:ea:86:a8:9c:d1:51:d0:ab:9a:d7:15:b7:6b:c9:
75:f1:06:d7:10:0e:91:eb:5f:da:8f:ff:1e:69:a2:32:40:c5:
9f:ca:b0:b7:c4:d5:40:32:25:11:b1:b8:9a:02:ca:01:32:20:
8b:d9:b2:76:12:cb:3e:aa:c3:48:1a:df:71:40:c4:be:39:a7:
13:54:45:bc:e6:8e:93:a8:6e:c4:a7:6d:8c:c9:3c:c4:95:98:
65:a8:73:6a:9e:25:d8:d7:ca:b0:35:0a:b8:b0:e4:0e:33:0f:
69:52:d6:7b:51:f3:d6:72:46:51:58:5b:aa:05:1f:a2:28:4d:
5d:74:19:df:4e:7a:a4:ed:19:cf:49:b7:ed:ad:0f:31:1c:41:
ef:a1:01:8b:bd:d4:e0:5e:f4:78:57:30:9c:98:33:c2:6e:e0:
e9:c5:c0:bc:13:16:86:f5:57:5a:3e:1e:30:33:83:25:cc:ca:
af:38:f7:10:fe:f1:c2:78:81:a4:9d:ea:22:9e:75:d4:6f:bc:
ee:5a:69:4e:04:23:e8:ea:3f:44:7d:0e:91:7e:42:84:08:6f:
de:7e:57:bf:09:12:6b:72:c4:7d:40:28:f6:e4:f3:1b:07:34:
31:99:5b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:50:34 2025 by rpki-client