Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
File: Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft (raw, json)
Hash identifier: yAr4Oei3hikZf2tWspPklnDSgCTpkc6mx+PVvuY2ZLM=
Subject key identifier: DE:DA:B1:04:71:D7:02:23:2A:63:1F:D5:16:01:58:B3:06:47:55:5C
Authority key identifier: 67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21
Certificate issuer: /CN=67cc77931dbb0e9e229c7217652b76aef4002721
Certificate serial: 0197485569929E9921E93A0450303B8A1628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
Manifest number: 31
Signing time: Sat 07 Jun 2025 03:00:46 +0000
Manifest this update: Sat 07 Jun 2025 03:00:46 +0000
Manifest next update: Sun 08 Jun 2025 03:00:46 +0000
Files and hashes: 1: Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl (hash: Un/rhkRjpbBH0pn13lB62iq1yJPNqDT/iaeacBmmApY=)
2: uTpH5OwzcZTfOpu8X57ZjeWWBJs.roa (hash: 6nsDviQDF/u+HfsVoAuFYxI3/pTqIdYdXhGDj3wFL8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:69:92:9e:99:21:e9:3a:04:50:30:3b:8a:16:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cc77931dbb0e9e229c7217652b76aef4002721
Validity
Not Before: Jun 7 03:00:46 2025 GMT
Not After : Jun 8 03:00:46 2025 GMT
Subject: CN=dedab10471d702232a631fd5160158b30647555c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1a:68:fb:b0:39:14:62:ec:08:45:88:1e:d2:
e1:82:b2:ef:7e:dd:aa:73:e3:92:d4:82:da:28:0f:
8e:ec:78:e8:38:86:90:a5:15:30:f0:2c:a1:1f:fd:
49:5d:32:8f:e2:73:09:59:e1:59:d4:b2:17:0c:71:
c0:00:94:92:56:8f:9e:27:36:b5:d7:68:b6:5c:86:
39:2d:fa:36:88:99:80:e2:2d:8f:55:db:7b:cd:68:
05:f2:88:fe:3a:c3:20:df:1e:1e:ae:de:85:c8:f9:
7a:f7:4a:ab:c6:94:0d:c1:c2:ed:54:f3:48:06:89:
19:f3:69:d5:b9:c8:6c:a2:30:3e:72:25:d4:d4:c8:
f4:c4:8f:20:1d:84:a1:95:49:68:76:3c:79:69:a1:
f0:26:1b:f5:4b:2a:d3:31:19:a8:6e:c4:86:4a:89:
2f:eb:a3:17:f5:fd:ee:ad:8d:85:34:c0:4d:15:3f:
3d:01:8d:15:ca:c3:9f:57:2d:e6:73:fa:07:00:ed:
77:2a:7c:4a:8f:9c:07:ea:71:0b:e7:21:ee:b6:7a:
9b:29:c1:e7:96:b5:6b:84:50:ac:08:5c:c7:71:8e:
67:d3:92:82:c4:a4:54:d7:ac:da:65:5c:a7:6f:4b:
c4:9e:b3:f8:78:71:e4:08:c2:f8:79:cb:e0:5f:1b:
ff:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DA:B1:04:71:D7:02:23:2A:63:1F:D5:16:01:58:B3:06:47:55:5C
X509v3 Authority Key Identifier:
keyid:67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:17:21:18:87:c6:98:c6:de:8a:d8:2b:81:60:bd:f7:f5:53:
ed:22:60:c9:c1:7f:65:cb:7d:b6:51:18:7d:6a:0f:35:e7:50:
15:d4:a7:1d:4e:cb:fa:6e:e5:a1:a9:a4:2c:66:e3:86:76:01:
a3:58:e4:ae:f3:88:72:98:8b:36:70:78:0a:ad:48:6b:a2:21:
c1:a7:92:29:b2:d4:02:13:58:f0:09:91:67:42:5c:4f:fe:9d:
a7:ed:48:8c:ba:04:d1:7f:ed:66:0b:f9:f2:d8:ca:ac:6f:5d:
fe:4d:4e:83:e4:1a:76:c5:c9:ad:63:a5:9a:20:25:d1:cf:43:
0c:bc:83:64:f9:b6:a1:c2:b3:81:21:77:bb:bf:fa:da:3e:bc:
20:cb:7c:2f:10:f1:a6:4c:62:50:4f:0d:e9:95:9f:ac:45:5f:
7d:7f:7f:56:e3:da:8d:14:b7:7f:7f:22:f5:73:9a:d4:6d:e4:
18:b1:99:4e:f1:92:f2:4d:91:9c:79:07:a0:f3:2a:a1:90:01:
6c:82:5d:9a:84:a0:41:f6:35:da:07:35:dd:a2:67:10:2d:c2:
81:e4:c1:4a:3e:d8:23:28:80:ac:06:82:d1:b6:13:3b:05:47:
65:02:8e:6b:d6:ac:b8:37:32:28:c0:0b:0d:1e:fd:51:47:e3:
6e:a4:d2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:30:11 2025 by rpki-client