Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: +AeiIxeledXAWbpOXvnA0I96ZqqgZUtxIUHGwk2/06o=
Subject key identifier: F8:01:65:CD:E6:FE:96:EA:D5:72:CD:E0:E3:08:79:B7:7A:A7:10:AB
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 01976BBCCCCB144D283BBC2D805AABEBB498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 00:00:24 +0000
Manifest this update: Sat 14 Jun 2025 00:00:24 +0000
Manifest next update: Sun 15 Jun 2025 00:00:24 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: mUNBgGj3QeT6DGfCVL3jrxxRCAi7/bR7nR13H5l7S60=)
2: f2XJfv98xMfqrpaFL1qLYMfVin0.roa (hash: mHLRZPkQ/y6jVuiV902GM613VmK1FGvmtwd5Ojyc76Y=)
3: g8Y2TOOKVhHIEabpCmuLfqLOwz0.roa (hash: c/0TsoE4PcOybpB4LfpOknZ1hO7co+C172nPxlIdcnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:cc:cb:14:4d:28:3b:bc:2d:80:5a:ab:eb:b4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Jun 14 00:00:24 2025 GMT
Not After : Jun 15 00:00:24 2025 GMT
Subject: CN=f80165cde6fe96ead572cde0e30879b77aa710ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:79:be:c5:76:7f:52:06:9f:29:22:19:5a:
cd:d3:d5:af:25:da:55:49:19:b0:f4:70:9e:0d:9e:
c9:77:c5:ae:f6:53:db:94:0c:9b:59:2b:76:8b:78:
95:14:e7:cf:11:d3:7f:a9:0a:20:9e:40:19:f6:b1:
2b:32:89:45:f7:f3:e8:36:d9:d8:16:5f:01:3f:72:
30:e9:22:2a:49:ab:3e:60:17:3d:cb:6c:8a:5e:ec:
bd:34:8a:17:14:a0:f4:17:0e:2b:d4:b7:87:3d:8b:
23:d4:b5:7b:f1:b8:9e:30:c8:ee:8d:97:10:7c:cb:
59:30:b8:6d:d3:5f:69:78:d4:78:a4:ca:5c:7f:45:
25:3a:25:6f:98:f7:76:01:35:05:c7:0b:fb:db:d7:
e9:5c:6f:6f:af:b2:4f:86:7e:49:c8:81:fa:96:7d:
c0:bc:da:ba:f9:8d:9b:31:39:8c:10:e1:87:f0:9b:
e0:73:2c:7c:69:8d:1c:0d:a3:5b:17:54:8d:88:df:
a7:6e:da:2c:e2:7b:28:27:36:c8:6b:a0:a4:bf:14:
4a:dd:62:52:be:4a:ae:50:a0:70:9e:88:55:92:b8:
75:b4:40:71:66:9d:a2:91:dc:af:d6:5b:22:26:ce:
9d:89:ea:d3:34:43:79:de:fb:e4:52:b3:ca:45:07:
24:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:01:65:CD:E6:FE:96:EA:D5:72:CD:E0:E3:08:79:B7:7A:A7:10:AB
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ca:a7:62:d0:10:20:9a:2b:d9:6b:8c:3d:dd:cc:7e:73:4e:
dd:49:99:7a:7c:9a:77:da:48:25:4c:c3:87:b4:73:48:52:48:
de:03:bc:e5:fc:9b:c6:6c:87:1c:d8:b1:e6:30:9b:c0:e6:0f:
b6:c1:f0:4d:46:35:58:67:3c:22:3b:18:f2:ea:a0:a4:8a:1a:
13:2f:57:31:de:29:8d:c5:fc:6b:76:b2:8e:3f:63:40:7a:d6:
6a:47:46:e8:25:de:f9:4e:2c:9f:df:7b:91:c4:16:81:66:d7:
63:45:34:54:ed:69:fb:08:37:02:bb:ae:f7:14:da:67:aa:33:
36:0d:46:f0:f2:19:42:a7:38:16:e3:ec:0c:fa:0f:24:51:44:
dd:38:45:93:88:b8:7c:81:01:64:c9:88:1e:36:d6:d6:b0:e0:
19:69:8a:57:62:81:92:ac:a8:44:0b:dc:a4:b7:f7:fb:78:bb:
ad:6e:48:da:33:20:11:bf:9b:86:ff:9d:53:12:f8:30:fc:3f:
98:3b:75:bd:b3:b0:c5:ad:7d:29:75:a8:51:e4:db:48:ed:ea:
9b:d5:e0:db:72:c6:31:b2:58:1d:35:49:27:db:9a:81:80:35:
b5:be:c1:ae:d0:fb:f1:ad:4f:a9:db:82:80:4e:fc:12:17:31:
62:33:14:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:50 2025 by rpki-client