Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
File: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft (raw, json)
Hash identifier: Z+cp0erEfpizxpWf3btjHRKU/9kVGanmDtk5QewDuTA=
Subject key identifier: 4D:0C:E1:97:8E:5C:FB:F2:74:EF:41:82:F0:15:99:F4:49:F2:CC:C8
Authority key identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
Certificate issuer: /CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Certificate serial: 01977376B31B3F14A81FEB6E82CB57BCF4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
Manifest number: 0C86
Signing time: Sun 15 Jun 2025 12:00:48 +0000
Manifest this update: Sun 15 Jun 2025 12:00:48 +0000
Manifest next update: Mon 16 Jun 2025 12:00:48 +0000
Files and hashes: 1: QSFoTY-rZFAhWSMN9-_p_o-BDiU.roa (hash: 3LADFmQvbHE7KoUBEivUP2jD8vxc2/ZNRnufgFEmEsE=)
2: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl (hash: gNw5dsX2x20+rFVxZ4iSOrigOuP0cW3sApQsyn3fD9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:b3:1b:3f:14:a8:1f:eb:6e:82:cb:57:bc:f4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Validity
Not Before: Jun 15 12:00:48 2025 GMT
Not After : Jun 16 12:00:48 2025 GMT
Subject: CN=4d0ce1978e5cfbf274ef4182f01599f449f2ccc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:d3:5e:16:3b:83:45:18:80:20:76:dd:bc:
43:56:53:db:fc:bc:f3:e6:05:ac:3b:64:ae:6f:c0:
c8:e7:42:ce:e8:3e:2c:fb:15:a6:8a:9c:28:33:ef:
67:fd:79:38:ce:93:5f:74:15:a6:61:b4:1f:70:a1:
3a:89:a1:f8:ce:bd:55:f6:59:1b:19:c6:9e:a6:5b:
4f:a3:34:0a:38:e3:2f:98:4b:f2:b8:ac:4a:bf:25:
5e:04:30:2f:fd:eb:ef:6d:32:ce:75:3a:e2:a1:34:
ca:48:b8:40:74:d0:3e:39:35:32:e1:05:c4:52:78:
42:37:a3:c0:e2:aa:9d:0d:73:30:bd:d8:e7:7c:c4:
60:bb:ac:b3:b1:e5:85:4a:8a:e3:87:54:4e:e3:7c:
92:1f:96:28:28:bd:cf:0a:a1:d8:e0:8c:14:f0:c2:
1e:47:c4:d0:84:09:b9:fb:4e:86:06:06:0b:9a:a8:
50:1f:02:3f:58:b4:ba:19:1d:ba:2a:ca:49:7d:95:
b9:31:5c:fd:42:a6:32:c1:9a:d1:53:ae:d1:86:a1:
83:11:5d:6a:6b:95:bb:76:98:08:ed:d0:0a:44:0d:
48:c7:98:eb:3d:6b:27:75:57:d7:03:0e:a5:e6:5d:
05:3a:ec:5d:f4:22:09:db:2f:29:e0:c7:b1:b7:05:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0C:E1:97:8E:5C:FB:F2:74:EF:41:82:F0:15:99:F4:49:F2:CC:C8
X509v3 Authority Key Identifier:
keyid:67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4a:4e:0c:a9:44:75:59:2b:2f:89:4c:c0:84:55:c5:21:38:
a2:ea:13:4d:c9:52:c5:51:f4:6d:15:75:76:73:6a:0a:be:60:
d9:78:87:e4:c5:b5:35:67:29:0c:17:63:0b:9c:f3:ee:06:ef:
db:45:0c:72:a2:a9:e6:52:6e:47:ea:64:6a:d3:82:87:b3:1d:
89:bd:0e:32:b9:40:50:0b:63:11:fd:83:c6:f4:75:c2:92:08:
cd:b4:76:bc:22:bb:60:ab:63:fd:6f:12:15:6a:39:5d:dd:70:
0f:a6:51:87:d5:88:21:49:f3:65:85:8c:2f:fd:da:a0:60:73:
16:e9:63:85:a8:cd:df:06:52:46:67:55:50:79:48:c1:eb:d7:
05:b3:c2:ac:97:2e:06:97:a7:89:3f:0c:a3:3e:74:5c:e9:3b:
6e:f3:77:50:98:1b:e8:a1:6e:2c:43:ca:00:27:c4:79:90:04:
40:56:a3:bf:b4:17:c2:53:8c:55:ea:11:9f:d3:12:4b:35:83:
2d:6f:2e:b7:2e:b9:92:5a:62:6f:d8:76:b9:54:29:44:a8:25:
dd:3c:c2:72:b9:d5:4b:9a:c8:36:ed:75:05:1b:ba:86:76:c6:
6c:c7:4b:62:6c:71:07:7a:19:c9:b9:a3:af:99:5b:32:9e:ac:
4b:5f:6b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:05:11 2025 by rpki-client