Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
File: Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft (raw, json)
Hash identifier: Cak2Pq5UaHfI7o75jKeHcId1yhIVUcayhqwWQTqsD4g=
Subject key identifier: 84:FD:0E:C7:77:54:07:82:78:A9:D2:A8:DC:DE:19:80:F3:F3:54:01
Authority key identifier: 67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
Certificate issuer: /CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Certificate serial: 019745C277DC4756B7CD705501DD71140CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 15:01:01 +0000
Manifest this update: Fri 06 Jun 2025 15:01:01 +0000
Manifest next update: Sat 07 Jun 2025 15:01:01 +0000
Files and hashes: 1: MnPqlVHc9fosDLrnBlP0E1NoB4o.roa (hash: mD2+/j4E1Q+n6Btlz8PZ33xc+5cKf1HzvljXUQ+mRBY=)
2: Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl (hash: wGEq0RluSTU6rg4nj9X3kSPeUmSlyY9Al5Xf3/gODNc=)
3: dAVWxqlNNVP6A8VBFL9RneZwmJI.roa (hash: 1lPQWQ8lwFJDBfgG4WjGvPhvOrJDEic6DuXOVo8+YHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:77:dc:47:56:b7:cd:70:55:01:dd:71:14:0c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Validity
Not Before: Jun 6 15:01:01 2025 GMT
Not After : Jun 7 15:01:01 2025 GMT
Subject: CN=84fd0ec77754078278a9d2a8dcde1980f3f35401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:b0:47:72:3e:b1:8f:72:e2:96:1e:14:7d:
63:b5:ad:2d:23:0a:eb:d3:8b:5d:7a:48:d8:a4:80:
d0:26:1c:02:58:6e:9f:a4:99:8e:75:cc:34:c8:59:
25:3f:69:d8:8d:08:7b:07:ab:ad:95:a3:95:45:56:
ab:07:96:86:c4:7c:6c:4f:d7:50:3a:26:48:6b:fe:
15:4d:1e:7c:e5:31:52:00:50:a1:27:7d:7b:39:58:
aa:d4:4e:50:b3:68:12:2d:ab:25:4b:39:44:70:1d:
15:f6:93:cc:45:82:bf:21:fc:be:89:f0:59:58:7c:
7e:9c:3f:7b:65:62:83:98:f3:c7:66:6c:ea:8d:81:
95:83:db:70:e7:97:9f:b7:76:72:fd:3b:94:79:f9:
7b:51:2e:11:a7:65:80:59:f6:e0:ba:1f:e4:a4:19:
c4:2d:70:7e:1e:87:7c:f8:0e:7a:f3:e9:4a:f8:9a:
4d:93:a4:dc:46:21:d2:de:1f:01:29:e3:ac:99:49:
ea:7a:4a:04:a6:94:c7:82:d2:db:44:e5:69:e4:4f:
d8:7c:61:1c:03:e4:5a:f2:e9:73:68:ca:69:88:f8:
53:1c:ab:c6:6a:a3:50:6e:70:5e:34:24:27:6e:7a:
5f:65:0e:20:a3:32:99:52:e0:3d:71:8a:33:b9:31:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FD:0E:C7:77:54:07:82:78:A9:D2:A8:DC:DE:19:80:F3:F3:54:01
X509v3 Authority Key Identifier:
keyid:67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d9:8a:46:fa:dc:bb:86:a7:5d:ea:c4:ca:af:fd:e7:a3:a5:
27:ae:4b:cf:93:01:42:d6:4e:58:dd:c2:0d:07:f6:fb:47:05:
34:8a:a2:e7:dc:f5:80:d4:9e:01:a0:fd:0b:fc:fa:b9:4e:f3:
68:39:eb:d4:26:8c:43:ed:47:ab:db:fc:c7:70:b9:58:f7:a2:
cf:dc:36:4b:f6:0f:ae:d9:5b:0c:34:b1:2b:ec:b9:f9:66:fb:
dd:b0:40:af:2a:ef:1f:f9:49:3b:e1:59:a9:67:7d:13:5b:3a:
19:71:33:81:01:6e:b5:a7:d8:80:24:59:1c:18:18:e0:14:7f:
cc:aa:ef:22:2e:59:c6:7d:3b:78:7e:13:6c:26:31:19:77:50:
46:3c:52:79:ca:ad:a3:76:fe:2d:76:12:85:12:5f:a7:ba:78:
2d:89:82:eb:e1:e7:e5:64:97:72:21:30:24:6f:1d:06:b7:b5:
db:ab:aa:46:bb:e8:30:9e:46:52:26:26:72:4d:4b:01:c0:46:
84:bd:81:74:52:3a:e5:74:4e:16:cf:06:81:9a:75:e0:a8:e2:
b4:0c:d3:49:7f:21:c2:6d:61:90:17:4d:40:8b:e9:07:65:07:
7e:3b:ec:86:e7:14:e0:62:f7:29:65:09:82:69:79:0e:2b:3e:
49:46:4d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:26 2025 by rpki-client