
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json)
Hash identifier: kMJPSor1JTdFPXH6gaZiRkYjOAnfGCjWQJtG3TXCp6U=
Subject key identifier: 9F:BB:6C:4F:72:6C:5B:39:00:17:C8:DD:0C:B0:60:20:E8:6D:B9:FD
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 01977F43851AB7076CF031E76264DAF356FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
Manifest number: 159A
Signing time: Tue 17 Jun 2025 19:00:20 +0000
Manifest this update: Tue 17 Jun 2025 19:00:20 +0000
Manifest next update: Wed 18 Jun 2025 19:00:20 +0000
Files and hashes: 1: 90E-kBjO5zMPh_CjvoGF6X6gBPo.roa (hash: CtoUcToSQH/z7T8Z7IC3trmKUCXpBxtjD/8pAoHxgVE=)
2: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: kO5JklFlOC6Ltksn1INNhbgw4tIBknwmmFOz9ANLr64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:43:85:1a:b7:07:6c:f0:31:e7:62:64:da:f3:56:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Jun 17 19:00:20 2025 GMT
Not After : Jun 18 19:00:20 2025 GMT
Subject: CN=9fbb6c4f726c5b390017c8dd0cb06020e86db9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:de:8a:a9:a3:25:5f:a7:e2:7e:41:ff:38:
df:08:bc:bb:fe:be:7b:a4:48:b6:15:fa:fd:68:14:
c3:b5:9a:94:de:68:f2:b4:2a:ca:4b:78:c8:62:24:
86:df:1f:bb:ae:a9:84:ae:db:1e:40:cd:34:d0:65:
18:52:a4:8f:83:c9:d7:5e:b1:39:e9:30:cd:dd:e6:
3b:a1:af:e5:74:34:58:3e:47:d1:1d:21:71:48:e5:
c7:33:48:50:8a:a9:ec:a4:51:96:39:d1:f8:89:20:
b8:95:e9:cf:81:51:95:99:96:0c:b7:1a:1c:f7:56:
3b:5b:5f:24:e1:60:ea:84:71:ce:1d:12:0f:e6:af:
bb:14:ac:e5:01:8d:ce:61:5d:eb:7e:99:f2:b5:47:
89:4f:62:d3:82:ea:07:88:0f:0f:c5:68:45:78:3f:
52:8d:33:7e:10:ff:d6:8f:18:67:e6:45:91:38:85:
2c:02:d9:f7:81:16:49:c3:da:91:76:59:b5:bb:30:
45:b2:eb:dc:f1:0e:e7:3a:c9:62:92:2b:e8:cb:ce:
80:ce:52:4e:bf:ad:d4:b7:89:21:05:61:99:e4:f4:
a4:c5:a1:0d:9d:21:c5:8b:5d:53:ae:fd:7b:8e:cd:
a2:4c:75:f0:26:b5:dc:4e:49:b8:25:e2:ea:dc:3f:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BB:6C:4F:72:6C:5B:39:00:17:C8:DD:0C:B0:60:20:E8:6D:B9:FD
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:63:6f:a9:67:bc:b5:c8:5b:87:c2:f0:df:b6:41:bb:ab:09:
a4:77:4e:a5:81:f4:81:d6:9a:94:2a:9c:39:19:74:93:db:13:
01:6d:e3:fb:70:24:df:03:1b:be:1e:07:b6:d0:44:2f:41:9e:
23:6f:97:ff:23:56:a1:e3:84:66:b4:b6:a3:24:19:6c:a0:0a:
39:cf:50:15:96:1c:67:72:3b:aa:30:80:1d:dd:bd:4f:a9:fa:
3e:a9:d2:40:49:02:16:fe:6a:ea:bc:2c:7a:5d:a7:e3:0e:f6:
05:dd:88:fe:ec:3b:a5:32:0a:0e:e5:26:be:f7:75:ca:79:48:
92:2a:08:52:21:19:e8:ba:bd:07:1e:d3:2a:e6:97:56:10:a2:
b8:54:88:1b:5a:90:21:4b:2b:ee:22:6e:5a:19:75:86:78:fe:
68:f0:10:02:b0:41:3f:fd:7a:7b:b9:c0:1b:7d:40:6f:c4:51:
d0:25:7c:e6:f0:0b:f9:15:20:74:f5:94:1f:71:4a:43:ad:a0:
4e:e0:3b:e6:14:45:86:c7:86:20:65:f8:9a:04:d5:cb:74:b7:
2e:6c:d3:9e:0b:79:05:be:d5:16:85:21:68:b4:8f:12:7f:da:
63:c6:a5:ea:f0:49:1b:4f:56:69:96:d1:e0:5b:78:e0:40:4f:
8a:49:a6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:42:51 2025 by rpki-client