Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: 82Nz5DysGBtGmJCIc1Z6POwwIWhUFBAbChPxsF6Sa8g=
Subject key identifier: AD:CC:03:93:E1:3D:60:CB:57:0B:28:75:14:F3:DF:FC:95:75:26:DD
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 0197488D2F57FD23B0B435FE7CFC3A3D4E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 0C09
Signing time: Sat 07 Jun 2025 04:01:41 +0000
Manifest this update: Sat 07 Jun 2025 04:01:41 +0000
Manifest next update: Sun 08 Jun 2025 04:01:41 +0000
Files and hashes: 1: Oc0qle0fVAxYCYZVrPoLp9Koy14.roa (hash: OoYjo8j96JGZ/KIKji2EFWXUPAYR+0wfSdmWkW1Apho=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: Rpzfb3CSpt+UkeE8lPSgkNMbZI7K0e6j4lNVgSfWDKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:2f:57:fd:23:b0:b4:35:fe:7c:fc:3a:3d:4e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: Jun 7 04:01:41 2025 GMT
Not After : Jun 8 04:01:41 2025 GMT
Subject: CN=adcc0393e13d60cb570b287514f3dffc957526dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ea:58:82:ba:50:c9:c3:ab:40:10:c4:0e:67:
14:9c:5d:01:df:60:da:28:49:e1:ef:56:25:93:8e:
8b:17:03:dd:28:9e:fd:f8:62:4e:9c:28:17:33:ab:
60:fe:e1:66:de:c1:01:ac:c3:d3:a3:2d:d3:ad:85:
48:54:77:1c:64:50:f4:df:c6:fc:97:6e:ea:78:c2:
85:32:4f:e5:3f:d9:0c:29:b5:16:b4:d9:bc:f2:b3:
51:fd:eb:8f:a3:6c:8b:45:e8:af:cc:21:07:1b:bb:
c7:db:0f:55:79:a4:62:49:38:c4:b6:2b:16:04:f8:
a5:7d:37:4c:b8:be:0f:c8:cd:34:2c:c4:cb:a8:72:
28:97:aa:4b:76:f3:88:83:dd:f7:d7:38:b5:9b:7d:
dd:a7:fd:d6:98:2a:9b:32:00:01:01:74:60:a1:a0:
cc:24:b7:66:2b:1c:d5:d9:99:f4:23:e7:2d:b0:5e:
fd:cc:96:a1:eb:6e:c1:ae:27:c9:ca:e4:38:c6:d5:
58:3a:de:61:88:d8:0b:79:97:c5:29:6d:59:4f:ec:
a1:aa:78:29:45:9c:7e:30:89:81:8e:e9:cb:5e:e4:
d4:8c:a5:7f:7b:51:40:ef:31:1d:8f:fa:e9:62:47:
1e:a5:62:39:b7:60:fb:90:2c:3a:d2:12:46:6d:e9:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CC:03:93:E1:3D:60:CB:57:0B:28:75:14:F3:DF:FC:95:75:26:DD
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:96:d0:a4:d0:ea:a7:a8:70:01:05:89:6b:e5:3b:11:f7:81:
bd:d8:9b:fb:9c:1d:5b:64:38:71:43:db:3c:d6:2d:92:f2:d0:
99:64:d4:87:db:0d:9e:4f:ac:88:d4:13:2e:2e:99:7e:4f:83:
50:08:1d:1e:df:78:0b:49:a3:5d:5e:a4:92:0e:d5:c3:06:2d:
d9:7f:c4:6d:8a:05:fb:8e:51:df:87:cd:cc:db:7b:36:8e:6f:
c5:31:6f:c5:0d:ba:24:96:58:ad:81:02:98:fb:b8:ae:06:b3:
0d:8a:f9:5b:f7:3a:24:94:ad:be:b0:86:d2:c4:7c:48:f2:ee:
33:53:75:da:c3:2a:dc:17:a3:73:91:7e:77:67:db:bc:f2:63:
01:92:3e:9e:9b:85:22:0e:d1:4c:b3:87:5a:36:0d:b8:c6:12:
fd:e4:ca:2f:55:11:f7:16:62:7c:de:91:67:be:0e:5c:63:7f:
64:5b:fe:2f:d6:84:fa:08:3b:29:29:62:fa:8e:f5:23:f2:5b:
42:f5:57:58:74:ad:8e:31:ec:fb:b0:c5:c1:c1:80:5d:b0:68:
ad:ab:01:a0:44:a3:d2:3e:3a:6a:45:44:b8:db:8c:e3:b7:19:
ac:5e:fb:d0:cc:6a:86:5f:1c:8b:8b:18:67:20:37:fd:76:54:
db:40:0e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:08 2025 by rpki-client