Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: WPW2sfcKMXdKql4Oxj3my+TyCNEbo+w62ZGZGwSmffs=
Subject key identifier: 4F:1E:DB:07:A0:F4:79:CE:A1:AD:5B:3B:2B:3B:05:7B:A6:60:7A:D8
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 01976D3E97DEA6A61B8F917A680177D66C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0C51
Signing time: Sat 14 Jun 2025 07:01:47 +0000
Manifest this update: Sat 14 Jun 2025 07:01:47 +0000
Manifest next update: Sun 15 Jun 2025 07:01:47 +0000
Files and hashes: 1: 3p5nhLsOjt1h69C859DNKbB2MQU.roa (hash: fomkhfBpGlBS0AfRGY4b/l04Zngyijm1T6FQ0+oESso=)
2: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: sg1DnT6k8WyHJLQfvn7wzIeivS08KxPOW9QV71QeCHs=)
3: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:97:de:a6:a6:1b:8f:91:7a:68:01:77:d6:6c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Jun 14 07:01:47 2025 GMT
Not After : Jun 15 07:01:47 2025 GMT
Subject: CN=4f1edb07a0f479cea1ad5b3b2b3b057ba6607ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:12:11:41:ac:06:ed:ef:a1:85:c9:3d:3b:
b2:ec:ae:75:f6:f8:90:83:d9:25:56:3a:6c:2d:a4:
fb:40:04:f2:c2:76:e4:67:66:aa:c2:05:f0:4b:92:
23:1f:b2:1d:d2:36:11:4e:55:44:ef:2c:61:10:6e:
f1:35:b6:73:7a:40:48:aa:46:d2:b5:c5:a2:b2:fe:
19:3d:b6:f0:c9:ea:ce:e9:d5:8d:54:d7:78:6c:50:
0d:0e:98:57:53:32:bd:38:3c:24:f3:e4:b1:42:64:
b9:50:51:8e:3a:e2:fa:4d:14:16:10:6f:5e:18:4e:
4d:3e:f6:6b:38:5e:bc:6d:e6:19:38:e9:54:da:70:
65:da:16:6b:ef:c0:97:89:e5:27:fa:61:20:9f:d5:
5d:ac:a9:46:55:aa:1f:f3:c3:8b:d8:43:b3:f1:d4:
47:74:15:c1:3a:51:2e:bd:65:85:e6:c5:f0:cc:8d:
43:2c:e3:e2:5c:9b:cd:74:cd:2e:22:f8:9e:5d:63:
fb:75:d6:0b:79:73:9a:22:3e:b3:3f:73:d5:82:40:
13:75:ac:1d:5e:ed:74:d6:1f:8c:44:63:24:66:78:
36:08:17:29:f6:2f:99:1d:11:18:a8:4e:5e:62:d6:
59:a7:4f:48:04:2b:17:cd:1d:4c:bb:92:05:db:ab:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1E:DB:07:A0:F4:79:CE:A1:AD:5B:3B:2B:3B:05:7B:A6:60:7A:D8
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a0:f7:cf:36:86:9c:19:8e:69:7c:ad:1c:a2:9c:26:7f:04:
20:91:b8:9d:40:17:f5:f1:b0:2f:d9:d6:d2:cf:2b:11:9a:8b:
26:87:f3:00:a8:2d:62:f8:60:42:d3:96:1c:3f:51:5e:92:a4:
b2:fc:9b:d7:85:5c:37:a4:4b:1a:1d:0b:29:4f:bb:cd:b4:6c:
9e:b8:3a:de:86:ff:9d:90:d2:53:a5:03:cb:d0:0a:44:e5:0d:
46:fe:35:b9:11:1f:73:f8:c4:f8:eb:74:5e:fe:7c:61:b2:df:
60:50:ee:08:b1:75:c1:67:25:8f:5e:82:6b:db:cd:64:21:d8:
49:58:94:63:61:e9:fb:c0:7e:7e:99:58:2c:3d:8a:62:de:44:
28:d8:71:92:d2:25:f8:f1:1f:26:f7:d6:9f:7a:de:4a:de:73:
c1:3d:4a:8a:0e:a0:ed:c7:74:7b:26:cb:96:a2:69:ef:c5:8e:
7c:5b:4b:43:40:ed:b6:28:4c:96:8e:fb:56:fb:b4:c8:3f:59:
72:0a:ce:e2:1c:76:61:16:ad:19:6d:72:80:4c:c6:e7:34:26:
d9:39:55:47:f1:a7:8e:5f:74:6d:08:5f:f9:41:05:af:43:86:
0d:01:75:fa:75:30:83:02:df:76:3f:fe:ed:42:9e:88:66:13:
f9:d0:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:48 2025 by rpki-client