Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: Ot5k9TjZkockjH4jpM3gOcVqCJvWV6dUle82FltmZog=
Subject key identifier: 9A:C8:71:F7:9A:DB:6C:9D:D2:51:35:8C:10:7D:D9:43:66:CD:A5:C1
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 01976D06C54DF7AF20F70470F333D6A3BBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 0E27
Signing time: Sat 14 Jun 2025 06:00:49 +0000
Manifest this update: Sat 14 Jun 2025 06:00:49 +0000
Manifest next update: Sun 15 Jun 2025 06:00:49 +0000
Files and hashes: 1: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: ZfqwKqBk0FnROoR8821RlaX7zpIxp2j/kWPIOXKqXso=)
2: _BrWLEBfYPYfGOoM_00MeFoB9s8.roa (hash: ONS0Sr1NVQgM4PQUgLtLkyRNai6z7sLm2R6unFgdvYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:c5:4d:f7:af:20:f7:04:70:f3:33:d6:a3:bb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Jun 14 06:00:49 2025 GMT
Not After : Jun 15 06:00:49 2025 GMT
Subject: CN=9ac871f79adb6c9dd251358c107dd94366cda5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:82:1b:5f:19:0b:4f:b2:8b:47:d9:99:89:13:
5b:26:28:45:f3:69:bc:9f:c0:e6:78:93:93:03:dc:
a0:9b:e0:6b:23:09:cb:47:7c:3e:16:ff:e3:2a:4e:
48:f9:58:db:ed:cb:60:e8:38:71:6a:2c:d3:75:a2:
78:21:7c:8b:52:c6:bd:ef:fe:44:20:8d:bd:17:57:
a8:c0:1a:c5:3a:74:09:28:a1:7c:25:65:24:c2:60:
3e:95:56:38:d6:2c:03:7c:5e:ad:a0:b0:bd:86:5e:
55:36:18:b0:e3:24:5a:6f:a4:cd:60:4e:44:57:50:
d3:9f:5a:33:ea:42:a4:af:78:d7:29:04:fc:c5:fe:
50:e2:b1:8c:d7:81:9f:34:5d:e0:04:bd:4b:37:9f:
a3:ff:ab:83:3b:1f:67:09:03:1c:e4:67:70:85:5a:
2e:62:f7:2e:ef:5e:f5:0a:a4:84:89:29:31:0e:b7:
d4:f8:22:e1:5c:7e:9e:33:ff:a4:69:f8:e5:c0:1a:
0a:4d:3f:e1:4b:fb:b5:a2:7e:00:de:e9:83:f0:94:
7a:f0:eb:f1:aa:f2:b3:ca:9b:b6:a3:eb:8c:4e:11:
a6:c8:13:4e:39:b7:63:e1:03:35:16:be:ef:d7:ff:
ed:b8:74:b6:31:98:99:db:ef:fc:e3:bc:89:00:3f:
eb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C8:71:F7:9A:DB:6C:9D:D2:51:35:8C:10:7D:D9:43:66:CD:A5:C1
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:95:17:aa:47:9d:13:4f:2d:10:6e:31:59:62:36:03:a3:74:
68:9c:ff:80:0d:63:c0:1d:e5:49:c3:f6:18:6c:9c:f8:30:7d:
70:0a:5f:6e:9a:3a:a6:17:af:06:2d:59:57:c0:c5:ff:5d:02:
30:fd:60:e9:78:02:3f:e7:7c:2f:e7:55:48:21:b3:aa:ac:29:
af:81:a0:2c:b5:83:c3:c0:4f:f0:1d:a3:87:58:65:91:80:1a:
a8:45:d8:5f:d1:fb:97:32:11:18:ea:51:47:0f:9a:29:d1:39:
cc:28:1b:de:ef:aa:d5:4a:70:75:ac:74:c5:11:7e:86:f5:f8:
0f:31:1c:d5:5b:59:22:6f:48:63:4e:a8:b7:1f:5e:87:75:4c:
42:54:df:5a:68:ae:15:ce:23:c3:1b:1e:03:f7:f0:44:67:5b:
bc:b2:83:4b:f6:81:27:60:17:c4:c0:7d:5e:ff:6d:66:c6:9d:
03:fb:ca:f6:af:d8:e7:79:b4:79:ef:de:8e:5a:b6:e2:3b:5c:
48:12:99:a9:ac:1d:81:76:89:de:44:ad:4b:bc:68:ae:f2:73:
c5:9e:62:53:8f:3c:36:53:e9:b1:07:a1:1b:a9:8f:cb:ab:ab:
1b:35:26:ab:e8:6f:8a:ef:d7:36:ee:24:27:fd:39:cc:31:f2:
dd:50:c5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:41 2025 by rpki-client