Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
File: Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft (raw, json)
Hash identifier: BdgcHxjeN8VWgoDlJgO838HLuQFRs0khYl/5AvH7DV8=
Subject key identifier: C6:37:80:5C:2A:DA:54:8A:D4:F1:9F:4A:A8:40:A9:E3:0D:00:87:EC
Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Certificate issuer: /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Certificate serial: 01976327A144E873699DB88760B726E5231F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
Manifest number: 1589
Signing time: Thu 12 Jun 2025 08:00:30 +0000
Manifest this update: Thu 12 Jun 2025 08:00:30 +0000
Manifest next update: Fri 13 Jun 2025 08:00:30 +0000
Files and hashes: 1: Rn5W7oiVYRufZC2Cc9HQB686zNI.roa (hash: r6LX/rQ2IMQ0lnqajopwaJaJ6RgScSLx/FlgSbqRLTc=)
2: XHUUpmsTIvK_KTF6Ns7MAyI399w.roa (hash: Hd7LpYgtsmwvaWEwTnrD15eJzW3l7MahPrkz65fNT1U=)
3: Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl (hash: L2GF8+/Dwkd3X1HJa3way5EvbvBjE+AePMSofcBA2zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:27:a1:44:e8:73:69:9d:b8:87:60:b7:26:e5:23:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Validity
Not Before: Jun 12 08:00:30 2025 GMT
Not After : Jun 13 08:00:30 2025 GMT
Subject: CN=c637805c2ada548ad4f19f4aa840a9e30d0087ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:10:56:a3:b0:e5:3c:fe:ae:95:43:41:99:
69:e9:52:40:d4:50:61:e1:28:70:46:40:54:cd:34:
80:64:cb:41:b7:b2:a4:bd:90:48:fb:f6:45:85:71:
ee:04:75:30:a3:aa:93:fd:ff:b2:59:68:2c:f2:48:
20:b9:e2:91:d1:79:8b:d7:11:10:68:7f:df:43:81:
f1:83:0d:99:85:3e:25:c2:ea:ef:0a:b6:b1:5f:ea:
3e:09:87:77:83:ff:78:58:ef:2d:bd:c9:50:a7:07:
5d:f1:c1:1f:18:f7:d9:a6:c2:f7:85:9b:52:77:da:
6a:b9:6e:6d:92:f4:de:e8:e4:f3:80:99:6b:7a:d7:
1d:1d:b1:2f:f6:f2:01:da:fb:b0:46:91:e6:49:0a:
52:5e:a0:dd:86:61:f2:5c:31:83:14:5a:8f:20:26:
98:f7:64:dc:b0:ee:6f:3b:50:c9:c5:ea:61:d4:59:
62:fb:6e:4e:1a:71:9c:90:ba:41:68:60:aa:55:72:
a5:98:b9:7d:bd:fa:1b:eb:3b:30:27:f6:e5:b0:c4:
e2:7e:d4:03:6c:9f:da:7d:fc:08:cb:05:c7:54:db:
6d:34:3f:0c:b2:56:0a:8f:b8:a1:05:bc:b4:63:d3:
7e:43:b8:ca:32:9e:ea:7d:14:cc:8a:44:f9:4f:55:
c5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:37:80:5C:2A:DA:54:8A:D4:F1:9F:4A:A8:40:A9:E3:0D:00:87:EC
X509v3 Authority Key Identifier:
keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:73:af:43:1a:c4:93:e4:71:55:f6:2f:ec:21:c2:b2:0b:1d:
39:0f:fa:e5:a5:da:08:da:35:83:c4:50:e3:0e:e7:13:71:58:
ec:d5:7a:17:80:2c:51:eb:55:3d:05:5d:99:82:68:d9:dc:17:
6a:a9:0c:64:68:9e:1f:90:ee:40:33:0e:4a:9e:00:04:32:a2:
d6:ac:9a:7f:b4:05:44:0d:c4:a2:f3:ed:4d:0f:5e:03:49:a4:
b5:ce:2b:f7:40:8b:2b:29:68:20:b9:94:f8:2e:91:f3:0d:ba:
05:4d:24:50:8a:a8:95:24:c8:bc:7c:ee:96:23:17:21:38:47:
61:73:23:7f:ec:43:33:ef:81:94:ff:4c:6e:8f:53:ac:0a:8b:
c0:ed:c1:54:0e:38:48:75:57:42:9a:c4:f0:b0:cb:dd:ab:b5:
27:64:8c:d7:84:dc:e5:28:b8:b8:4c:b6:05:f8:f1:a3:cd:43:
5d:f0:2a:92:21:30:5c:f1:6b:be:0e:2c:72:30:ec:e6:e8:a0:
33:bf:e2:e6:6b:dd:b2:d2:19:06:a8:dc:60:ee:6f:be:fa:34:
86:2b:a6:a0:11:04:ab:a2:b5:d0:8b:45:d7:c0:2c:8f:60:68:
a1:50:0d:df:9a:6a:97:37:a0:ae:81:e7:cf:c3:a9:53:04:48:
99:09:5c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:44:12 2025 by rpki-client