Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
File: z13l9P7Bb1FvC8TWMcJidmP5BfM.mft (raw, json)
Hash identifier: WlZfw/1OehbQ0dZwstRBg723EvJ7UpO4/4QEX/NCyAA=
Subject key identifier: E9:6F:76:62:6E:8A:D4:A0:49:2A:A9:58:5F:B8:0A:D5:CD:96:C0:D6
Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
Certificate issuer: /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Certificate serial: 019753B4E4479E9140885C441854FCA2403A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 08:00:53 +0000
Manifest this update: Mon 09 Jun 2025 08:00:53 +0000
Manifest next update: Tue 10 Jun 2025 08:00:53 +0000
Files and hashes: 1: LzSQuYv1x63WY7QfqJCJtkZHVLg.roa (hash: wpzsWwm4YF25nKdgTs214tQfh9B7Ss09QnFGWVON9kQ=)
2: z13l9P7Bb1FvC8TWMcJidmP5BfM.crl (hash: +tHU6aoKwvb0/9DNrYVzC8yT2b5bzeWjAGZndKmWAFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:e4:47:9e:91:40:88:5c:44:18:54:fc:a2:40:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Validity
Not Before: Jun 9 08:00:53 2025 GMT
Not After : Jun 10 08:00:53 2025 GMT
Subject: CN=e96f76626e8ad4a0492aa9585fb80ad5cd96c0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a7:19:c6:9f:55:02:75:d8:14:97:ac:a5:2a:
ef:84:32:19:74:6f:04:2b:55:e5:ad:89:7f:9a:93:
8a:a2:86:6f:2d:3c:6c:cf:f6:e6:0f:3f:ae:21:9a:
b7:78:ac:bf:12:65:61:33:de:54:e2:96:65:06:03:
9f:fa:85:47:a5:4a:7a:04:b6:03:a2:0a:f7:d3:a9:
1e:fd:86:90:44:ab:fc:e5:27:61:fb:18:fa:1b:d7:
ef:b1:b6:8f:5b:a3:b0:b0:fc:48:d6:6a:e1:9e:5d:
e8:f2:ec:30:24:36:96:90:33:f2:11:12:bc:2b:45:
2b:51:09:4a:1a:25:c5:c6:9f:54:d3:d4:17:8d:56:
f5:b9:40:3a:d0:74:18:c5:77:1f:84:e5:62:e1:7c:
56:2e:e2:41:28:73:2e:38:63:7b:32:28:b3:95:b5:
13:0e:33:39:84:39:97:ae:c4:8e:42:64:93:21:e9:
95:01:04:47:d5:87:48:1d:85:4b:26:3f:c8:1e:a2:
ac:54:90:d3:f2:54:46:e3:91:18:af:05:6f:17:d7:
d7:75:f8:1f:ef:73:96:ef:5a:6e:66:cb:89:5f:4a:
6a:25:49:84:b5:c0:bf:fe:38:05:1f:5d:bc:02:fa:
c1:df:42:b5:46:31:48:f6:36:11:3a:60:0f:26:01:
70:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6F:76:62:6E:8A:D4:A0:49:2A:A9:58:5F:B8:0A:D5:CD:96:C0:D6
X509v3 Authority Key Identifier:
keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5a:24:06:f2:4a:04:5b:b9:f0:51:6c:25:92:fe:8a:e7:c0:
3a:5f:b6:53:42:5c:03:c9:63:cf:2b:de:aa:4c:d2:38:b4:be:
e9:5e:30:1b:2f:c9:5a:9b:a9:57:85:fa:f8:62:80:8a:f5:6f:
8c:aa:36:f7:3e:8f:43:a7:28:da:97:9e:fc:c7:01:f2:cf:fd:
65:20:01:1e:4e:85:9d:0e:ce:6e:f2:59:ac:35:fa:1f:49:90:
7b:3a:72:d1:43:94:39:c8:56:2e:4c:52:11:b3:3b:11:c3:1f:
f0:0b:6e:2d:30:aa:80:48:07:95:0d:23:6d:7e:58:f7:18:22:
2a:41:7f:88:df:6b:e0:ed:5f:00:33:59:44:f6:89:02:e9:65:
62:ed:38:c7:a1:14:78:77:96:97:5d:eb:b2:53:3a:42:48:59:
51:a2:1b:6b:d4:b7:a8:01:e9:d2:f2:73:09:68:84:39:79:a5:
e4:ac:f1:e4:c3:d0:f5:63:7f:ec:fe:4f:9a:6e:f9:49:86:9c:
5b:ad:6a:10:83:e0:17:21:c0:d1:41:b3:3b:0c:1a:73:32:94:
a9:36:27:96:c9:e1:f2:e5:f4:12:86:31:59:4d:27:e7:75:1d:
34:6b:07:d5:ec:a0:23:0c:23:0a:e4:a3:9b:b5:5b:cb:b6:d9:
01:07:b6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:47:01 2025 by rpki-client