Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
File: z13l9P7Bb1FvC8TWMcJidmP5BfM.mft (raw, json)
Hash identifier: ZV15o5DXJCEVcXxymn9LkVbqMbGLOg7sHqWU+xYgSKM=
Subject key identifier: A8:9F:93:DF:20:5D:06:67:70:B3:F5:D1:7A:A7:2D:6A:95:72:9F:B8
Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
Certificate issuer: /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Certificate serial: 01976CCF7986C56A70300FA1BA217D56EAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 05:00:25 +0000
Manifest this update: Sat 14 Jun 2025 05:00:25 +0000
Manifest next update: Sun 15 Jun 2025 05:00:25 +0000
Files and hashes: 1: LzSQuYv1x63WY7QfqJCJtkZHVLg.roa (hash: wpzsWwm4YF25nKdgTs214tQfh9B7Ss09QnFGWVON9kQ=)
2: z13l9P7Bb1FvC8TWMcJidmP5BfM.crl (hash: hlUEiJPXWc/N1VggNPya9y7OfZF1tLXvKSc+minQg0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:79:86:c5:6a:70:30:0f:a1:ba:21:7d:56:ea:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Validity
Not Before: Jun 14 05:00:25 2025 GMT
Not After : Jun 15 05:00:25 2025 GMT
Subject: CN=a89f93df205d066770b3f5d17aa72d6a95729fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:be:10:70:11:da:2a:19:f2:af:22:4d:4c:94:
4e:18:00:ac:ac:89:96:18:19:b6:53:81:08:e5:2a:
66:63:50:50:f9:0e:47:15:04:a2:48:32:dc:17:2e:
c1:c9:f8:01:01:c4:4a:3d:e9:37:40:07:3b:45:07:
f8:d7:4c:1d:be:89:cb:03:15:41:66:68:fa:a0:68:
e4:2a:23:29:e9:18:22:6f:01:ce:75:88:b5:ea:48:
4a:5d:03:13:04:10:cf:a6:75:ba:4b:95:7a:3c:36:
74:3c:7c:b3:34:2e:cf:e5:ba:9f:c7:95:12:f4:5b:
01:0b:ec:97:65:59:46:7c:31:7b:33:ca:d8:30:5a:
1a:1d:cf:59:87:24:24:15:00:aa:6c:f4:1b:8d:c7:
8d:83:68:51:fd:e7:17:45:2a:a2:d4:55:f4:0d:8d:
a3:4f:b3:9d:41:32:d1:a8:12:7f:4c:4d:40:54:23:
ba:bb:1a:b3:72:0a:1c:50:16:ca:88:65:e5:fd:33:
f8:f3:f0:c7:2a:e4:05:0a:a3:6e:6e:5d:79:56:b1:
36:3f:c3:5b:c9:46:14:c2:0e:3a:67:42:5b:25:55:
5a:aa:1f:d0:69:0d:b5:32:56:66:23:12:b3:00:0e:
80:38:86:9f:38:c7:a5:06:e6:a3:f7:ef:ba:78:9a:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9F:93:DF:20:5D:06:67:70:B3:F5:D1:7A:A7:2D:6A:95:72:9F:B8
X509v3 Authority Key Identifier:
keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:10:21:5a:84:82:82:67:69:d2:cc:f6:75:95:02:71:b7:15:
d7:9e:7a:bf:4f:a4:31:8f:b7:3d:36:41:77:fa:0c:f7:5d:0a:
ca:da:6e:c5:a6:a8:a1:63:d1:a3:a2:f1:dc:42:34:df:db:3f:
e8:ae:de:39:59:d0:7e:92:a3:4e:35:c8:52:43:23:4e:f8:fb:
a0:15:b8:da:51:02:30:94:87:99:5f:c2:a4:35:eb:ff:54:0d:
73:7b:de:44:7e:ee:3f:3f:36:ed:28:58:81:c1:20:0a:c0:b3:
06:c1:e9:eb:e0:a4:91:9f:ed:04:81:2f:c3:f3:02:8d:ec:13:
4f:ea:a4:4e:a9:e7:44:40:22:91:22:86:cb:30:ac:a0:5e:be:
05:e6:43:0b:76:cc:16:82:37:a2:61:a1:d3:cc:66:45:5d:1e:
4b:58:fe:aa:64:05:78:c3:f9:2f:4f:73:31:98:fa:6b:f6:6a:
ea:63:50:ba:d0:15:44:12:df:c6:d9:5f:5c:eb:1c:e7:49:3f:
39:55:b3:ef:17:b7:98:a9:f5:ab:55:45:9c:be:db:86:ea:a5:
f0:d9:9b:cc:01:13:61:59:39:11:92:b3:12:6e:52:2b:da:8c:
e5:fb:22:af:54:14:ad:79:97:6b:f0:2e:1b:e9:ed:7c:bc:33:
ce:6d:91:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:47:20 2025 by rpki-client