Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: wNndi/Qyo+eCrdbNhCZYRljWhoTMJU953cD3p8oPS7w=
Subject key identifier: B9:A0:FB:88:09:C9:DA:8E:B0:63:EB:E3:63:C6:B2:CF:59:02:27:3B
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 01977865EA0013EFF9BC508D9533608E0254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: D3
Signing time: Mon 16 Jun 2025 11:00:34 +0000
Manifest this update: Mon 16 Jun 2025 11:00:34 +0000
Manifest next update: Tue 17 Jun 2025 11:00:34 +0000
Files and hashes: 1: 2hDPatYNHQhIPlvymgRA-xmm86U.roa (hash: 8kdVjJKDXzBN5JG+XGLJqwndIaq/0FXixJOUEgyTy9Q=)
2: BU0K-jq4yCTRDFgFmlLWawEJYAU.roa (hash: HyTY7vvT0OCEeAhfRH+8wyCsyeDuJjUYTouZKbB1WlU=)
3: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: 8IRIeZKMl5y0dLAl0OdyZ8dBM01v2mDndqa7Be1vSG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:ea:00:13:ef:f9:bc:50:8d:95:33:60:8e:02:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Jun 16 11:00:34 2025 GMT
Not After : Jun 17 11:00:34 2025 GMT
Subject: CN=b9a0fb8809c9da8eb063ebe363c6b2cf5902273b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:86:82:89:04:1c:5b:1d:a3:ba:a1:52:03:
09:b7:32:ff:75:9d:c8:3a:f9:97:a7:5b:66:67:cb:
45:d8:fb:80:8e:e6:05:48:e6:f9:4c:62:7e:4f:85:
5f:33:ac:a9:0d:8b:86:5f:59:ce:d3:de:5d:47:b9:
dc:37:8d:73:3d:1d:9f:a7:13:ea:79:29:57:ff:7d:
ea:87:75:7f:b5:d0:4e:cd:12:8f:53:58:80:b5:55:
c3:2a:95:8e:e1:c1:49:bf:8e:28:a2:ab:f6:30:0b:
63:ce:37:fa:ce:60:67:2e:1d:ab:2b:a1:55:b2:a9:
d3:97:b3:ca:ea:27:99:e6:49:e8:f4:d9:78:25:ae:
14:79:6e:a6:87:e7:e8:c6:b5:62:0e:41:36:45:08:
64:55:dc:ba:04:0f:ea:2e:b1:3e:87:65:5e:ea:dc:
8b:57:e8:9a:ed:48:14:f4:81:72:b7:af:35:78:15:
8f:6f:12:93:42:6b:f3:3b:06:c8:11:84:0b:12:fe:
73:fe:23:7d:0b:a8:a6:f2:2b:05:59:4e:f8:1f:d1:
c9:14:39:77:8f:f6:fe:3a:c6:01:36:ba:78:af:56:
20:58:f3:a3:d6:06:df:b2:83:9f:7a:c6:79:8a:fa:
81:59:d8:bc:75:0e:33:56:94:b1:ee:f2:6a:5e:a1:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A0:FB:88:09:C9:DA:8E:B0:63:EB:E3:63:C6:B2:CF:59:02:27:3B
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6a:a4:8b:9c:45:f1:f9:ad:8d:eb:bd:4b:d3:55:54:ed:68:
64:e7:e3:7c:da:47:5f:2a:d7:b2:31:95:b3:3a:8a:ce:1e:07:
aa:33:8f:d1:7b:cc:67:d5:27:5c:67:b3:a5:31:55:12:21:aa:
a9:c2:5f:52:e9:33:36:29:1f:bc:e6:d2:32:91:0c:e5:ef:20:
34:80:bd:54:17:22:82:8a:bc:e7:86:81:24:de:99:59:24:61:
63:6a:6c:d1:02:b2:bf:df:20:d5:72:44:c3:a9:dc:74:51:22:
6e:c4:9e:66:a5:e0:d5:a1:65:e9:95:35:77:8a:10:28:62:2e:
44:9e:c6:55:ee:42:1d:55:b0:61:89:51:e2:af:63:ab:c5:c7:
56:22:8d:53:29:d5:7e:14:40:b8:bd:70:4f:af:a1:e8:96:98:
1c:f5:0e:7e:0b:e4:d7:e6:ea:de:a6:c6:e7:21:85:14:5d:c6:
88:93:a7:d8:a4:08:83:73:43:f3:04:b6:fe:49:48:fc:d4:30:
aa:c8:fd:69:c3:08:7c:8b:b3:67:0d:f6:41:ce:b3:63:99:0c:
1f:42:99:c1:45:f2:8b:dd:82:aa:d7:8c:5b:c1:f5:0c:ab:91:
7f:f6:cd:a9:59:6c:84:4b:65:6a:de:a7:80:5b:a0:bb:21:e4:
dd:5d:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:41:25 2025 by rpki-client