Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier: vUxvKTKnM6JSSi7kSk5xsRmQIsDqZcPsCPehjfmKqWE=
Subject key identifier: 74:63:35:79:78:91:62:4A:74:E3:FF:1C:A7:B0:0C:95:E4:29:6C:9A
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 0197512169AFC34C147DF6BBFD6C4297E9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number: 13A2
Signing time: Sun 08 Jun 2025 20:00:33 +0000
Manifest this update: Sun 08 Jun 2025 20:00:33 +0000
Manifest next update: Mon 09 Jun 2025 20:00:33 +0000
Files and hashes: 1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=)
2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=)
3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=)
4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: o3ZmYULDSnTIvl8EPMhsZ0vzjoRN8ipuSzfwzH5bkcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:69:af:c3:4c:14:7d:f6:bb:fd:6c:42:97:e9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Jun 8 20:00:33 2025 GMT
Not After : Jun 9 20:00:33 2025 GMT
Subject: CN=746335797891624a74e3ff1ca7b00c95e4296c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:d5:ae:ae:2b:de:b3:58:3e:34:c4:0e:4d:
f9:f5:e1:3b:17:87:61:2e:2e:f1:13:fb:48:51:e1:
9c:86:60:0c:80:18:9a:74:a1:ab:40:90:9f:45:ec:
6d:d6:e6:3f:e6:bf:94:3e:dc:17:de:93:04:db:14:
da:9b:e4:2b:19:db:15:aa:93:cb:8d:38:a0:df:38:
a0:2b:de:b1:1d:02:61:48:7d:6d:02:c7:b7:fa:9a:
a2:53:26:e0:23:d8:60:32:55:00:f4:8e:83:35:8f:
ab:7a:8d:06:d5:e2:1c:ba:cc:b3:d5:00:ac:52:17:
c8:41:61:8b:39:57:f2:81:d0:3c:2b:16:2b:54:0b:
80:01:a5:3e:65:42:2a:3b:a8:a7:e0:3b:8b:40:d5:
bf:0f:4c:d2:62:18:30:9e:9d:90:3e:a5:6d:4a:b3:
81:e8:7e:14:d6:fd:b8:7d:4f:dc:81:f0:b1:2e:10:
da:59:15:46:37:bc:50:5e:17:c3:7f:aa:80:66:3f:
ef:ea:87:8f:a1:44:04:e1:0f:f4:71:12:89:78:21:
79:58:0e:c2:67:fc:9e:3b:6a:75:91:1a:08:fd:16:
53:81:e1:ae:a7:22:8e:e2:26:2d:cd:e8:9b:4f:34:
64:60:bd:4d:14:fe:0c:f0:36:67:1d:b5:79:fb:7c:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:63:35:79:78:91:62:4A:74:E3:FF:1C:A7:B0:0C:95:E4:29:6C:9A
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c3:25:fc:84:eb:8e:09:d3:3c:08:18:47:39:d2:bf:bf:50:
ee:20:a7:0e:05:e8:5e:2a:13:89:58:fc:aa:d1:e1:cd:ba:bc:
7d:c3:7f:ac:74:44:bd:2e:22:65:e1:00:43:b2:ac:ef:2c:ca:
f4:21:4f:f3:fb:39:2d:39:67:ee:45:dc:22:e6:3e:80:02:f5:
02:aa:17:d7:b0:cb:e8:50:af:c5:9d:77:10:56:87:9f:09:ae:
ee:15:e6:9e:7e:24:dc:20:09:9e:8d:ab:46:23:bd:43:b0:f2:
70:48:93:a4:a1:31:f4:8d:33:9d:d9:4a:33:83:72:3c:88:73:
86:2e:6a:5a:23:64:ac:8c:4a:62:f2:93:21:b9:31:fb:44:70:
bf:4a:86:0e:b1:b8:e1:de:42:ef:df:1f:76:be:46:68:14:d8:
da:41:73:a3:4d:67:9d:b4:9e:30:58:8a:c8:db:a4:c3:c8:a8:
e8:d4:fe:b9:08:d7:57:d2:9b:bc:37:9b:77:f5:ef:61:8d:97:
1b:e0:9d:91:0e:2e:74:c2:53:c6:ef:cc:8c:a1:3e:e0:f7:5d:
00:4a:31:bf:25:fb:a3:57:3d:d6:2f:3b:d3:5c:7d:d8:89:bb:
4f:ac:6f:56:06:dd:dd:b0:87:69:be:bb:e5:89:d0:f8:d4:f2:
bd:33:b0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:38:16 2025 by rpki-client