Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: Gm/uPkpg1ijgjJWOyLx0pNHeMRzaM06PO/+8MDpZdiE=
Subject key identifier: FA:35:A2:21:F2:0D:12:28:AF:C6:A5:01:CD:B7:6C:9B:1F:D1:29:45
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 0197488D181C97439367001A8D6E52E8F82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 0171
Signing time: Sat 07 Jun 2025 04:01:35 +0000
Manifest this update: Sat 07 Jun 2025 04:01:35 +0000
Manifest next update: Sun 08 Jun 2025 04:01:35 +0000
Files and hashes: 1: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (hash: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: PzmwKgKM4P8y3n/qNzVXYTICR1GmkQ8o4jHbNWnHZTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:18:1c:97:43:93:67:00:1a:8d:6e:52:e8:f8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Jun 7 04:01:35 2025 GMT
Not After : Jun 8 04:01:35 2025 GMT
Subject: CN=fa35a221f20d1228afc6a501cdb76c9b1fd12945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1e:79:ce:cb:e5:8e:ee:00:ca:ca:76:95:86:
79:0f:ef:3d:68:9b:c9:7e:05:2c:bf:92:19:4f:27:
34:25:ad:74:53:ee:40:f0:cb:f0:3d:39:b1:c2:77:
a2:ee:ac:08:14:69:c9:6d:7c:7b:7d:a9:60:32:20:
ac:6a:5f:58:a0:7c:9e:b2:ed:42:5b:f2:32:7a:35:
70:6e:df:31:fc:c2:69:a0:70:8e:a9:71:07:c6:ed:
75:b6:f3:71:46:78:dd:c8:d1:93:b5:c1:45:04:1a:
7d:bf:2a:2c:07:71:24:56:54:84:18:54:9f:d4:0a:
b2:3c:2c:37:ae:b6:02:44:d9:6d:aa:82:a6:ba:b2:
68:34:96:d3:79:a8:08:d0:3e:0b:4d:d3:fc:0a:96:
d9:bc:5d:bf:05:9f:12:a3:b4:2f:17:b8:70:84:9f:
36:99:78:3f:d1:42:37:38:93:16:e7:5f:45:9d:56:
8b:26:54:07:66:0f:7f:b1:9e:0e:dd:c0:ab:94:ad:
51:a0:35:c2:1e:7d:b4:ad:bc:b2:84:a0:3e:82:da:
cf:a1:e8:0f:51:be:34:cd:b7:20:41:0e:f3:c4:d5:
ea:36:18:09:00:d5:a8:8a:aa:93:71:b1:3d:0e:e4:
d4:a1:c0:64:56:a1:9a:15:ca:e9:f7:ce:ea:67:6c:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:35:A2:21:F2:0D:12:28:AF:C6:A5:01:CD:B7:6C:9B:1F:D1:29:45
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:06:29:d9:da:4e:39:0b:e0:b2:53:de:d5:90:b7:ab:fb:f0:
55:52:a9:1f:36:c3:65:3a:7a:e8:9b:c9:56:a0:fc:ca:6b:5d:
12:e1:48:3b:ae:78:7b:17:e6:74:38:63:d8:a2:d6:6b:07:a3:
ab:0e:f9:b0:e9:07:af:eb:5b:7c:b2:6f:3f:90:5e:30:0a:66:
79:4b:a9:42:2a:b2:aa:49:05:9d:e5:e3:f5:34:04:a3:81:6f:
4c:08:54:4e:8a:58:ab:74:f6:f6:14:50:11:b2:da:5e:cd:b2:
aa:6d:a9:e9:eb:42:a5:57:33:61:aa:99:6b:c8:77:ee:74:1d:
8f:58:3e:66:6f:e0:65:ff:d0:55:01:7f:9f:1e:44:fd:aa:fa:
b1:9d:ee:2a:ee:71:52:9d:aa:91:73:51:f8:76:db:b5:28:e9:
1a:44:ee:8a:87:5b:04:bf:47:10:c2:16:a2:db:7c:53:45:56:
e3:15:52:94:63:6a:85:88:95:4a:90:f6:bf:f5:15:25:51:e5:
c7:50:57:12:88:ea:2a:ae:3d:44:94:d7:13:be:92:26:34:ea:
87:36:74:39:bd:d4:c1:d6:54:00:75:0f:2d:9b:00:8c:29:a1:
a6:4a:e6:e7:59:41:a7:99:0f:bb:30:d3:63:86:e4:87:a3:b5:
6e:30:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:46 2025 by rpki-client