Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier: 3joYixzM7J4KVbOPGaKTy9RMlEApvFlr1I6dRvWSQCo=
Subject key identifier: 2B:C0:34:8C:81:40:8F:45:05:87:3F:4F:5A:94:7A:08:F5:AF:BE:4E
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial: 01974F336C27D39CE88011753E980822B32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number: 047A
Signing time: Sun 08 Jun 2025 11:00:59 +0000
Manifest this update: Sun 08 Jun 2025 11:00:59 +0000
Manifest next update: Mon 09 Jun 2025 11:00:59 +0000
Files and hashes: 1: CzKe7bcDbHPl7S7VFX1GJ1fjZ-U.roa (hash: YjWNT62+NZ4QheBAVnVeuwY8eccUxnidCuMqn96YN2M=)
2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: /WmaSdmTA6djQIElm8S/fXHdMW8PkzCwss6n0nbBULM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:6c:27:d3:9c:e8:80:11:75:3e:98:08:22:b3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Validity
Not Before: Jun 8 11:00:59 2025 GMT
Not After : Jun 9 11:00:59 2025 GMT
Subject: CN=2bc0348c81408f4505873f4f5a947a08f5afbe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a3:62:d1:9d:8a:85:6d:de:11:da:57:8a:26:
30:fe:57:88:df:91:b4:06:47:ce:85:b7:b2:de:4d:
ec:50:9b:8c:d7:78:a9:3f:9e:56:53:c4:e1:33:c8:
2f:b4:eb:02:11:d5:a6:80:76:be:f8:23:af:82:4d:
4f:30:76:8a:4a:b7:b4:5c:35:47:bf:47:0a:f5:e0:
0e:3a:1b:29:c3:17:49:5a:14:3d:70:45:7f:3c:9d:
6f:fe:da:2b:ec:4c:fa:04:05:48:7c:46:1e:40:64:
c4:14:d6:26:ab:bf:7d:a4:36:7d:1e:05:55:e1:17:
fd:1f:ea:1f:17:71:fd:53:b1:3f:b7:fd:1a:0f:22:
e9:ce:17:2f:fd:06:7a:43:cd:74:77:51:12:27:83:
32:86:44:26:30:29:30:6b:6e:48:bb:2b:2d:87:b3:
ea:80:5d:81:e8:27:ca:27:00:50:24:58:8f:e3:b2:
81:5c:b6:37:b4:df:a1:92:76:7e:33:79:3a:8a:ef:
8c:1c:77:02:d3:1a:15:61:15:b4:5a:62:49:1c:ff:
9c:32:48:0e:d4:53:39:d1:03:7e:d9:1d:71:b0:cc:
9e:1c:e8:8f:6e:1d:cb:a4:ce:11:cc:04:06:c1:53:
56:7c:c1:57:81:a6:69:48:a7:8d:a2:ce:d3:10:e7:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C0:34:8C:81:40:8F:45:05:87:3F:4F:5A:94:7A:08:F5:AF:BE:4E
X509v3 Authority Key Identifier:
keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:46:f0:ca:04:5c:8f:08:0e:0b:02:5d:f4:75:69:9b:f1:71:
52:da:ee:69:2c:d7:f4:e9:e1:16:37:65:65:64:02:5f:b6:3e:
b6:9c:5d:7e:6b:d3:f8:d3:2a:76:9c:11:2a:6e:f8:78:db:7c:
28:6b:ae:86:91:d4:e5:8a:db:93:ce:e7:f2:3c:31:cb:a3:ad:
7b:c4:98:cb:70:82:22:e1:26:2d:53:db:4c:9e:a4:97:87:56:
bc:62:27:14:f4:94:8c:49:07:3c:90:c7:e1:8f:e1:24:25:62:
3d:d7:8c:9b:8b:00:68:53:88:df:27:91:cd:03:e9:f8:c1:f8:
1c:5e:64:45:b0:98:a7:a7:c6:c6:a8:ca:b2:b8:51:a9:03:80:
72:61:7b:67:52:c3:50:68:a9:d6:b9:89:13:42:2a:be:47:3f:
36:ba:39:2c:a1:e3:88:90:e3:f3:50:48:66:03:4a:8c:cc:16:
b5:d9:f0:db:3f:2f:18:7e:02:62:11:81:fe:26:84:87:ef:49:
0d:fe:7a:07:7c:b6:38:0e:ff:14:23:c1:6c:f2:fc:4e:43:46:
72:2d:ec:23:32:cc:5b:ff:1d:25:97:30:2c:0a:3b:df:2a:4b:
1c:eb:aa:bf:f3:78:7b:ca:ed:e0:3d:9d:fa:b0:a2:04:0e:75:
4a:e7:af:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:48:31 2025 by rpki-client