Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: E4nelXmsoUzhrk/c1MzE8sk0O+jEw30oW3GEGrvDFgc=
Subject key identifier: F8:5C:79:57:A0:45:9C:D7:87:D6:0F:40:F9:90:FC:23:82:76:70:16
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 019787342918582A1715EF4FBB193AB4E8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 15B0
Signing time: Thu 19 Jun 2025 08:00:31 +0000
Manifest this update: Thu 19 Jun 2025 08:00:31 +0000
Manifest next update: Fri 20 Jun 2025 08:00:31 +0000
Files and hashes: 1: 3CMB0mE1xTb-XY0wsKNGKjk0bFk.roa (hash: lQQ7mzHc9z9XCmBgSmyDJlA6JGPYMp41l5No4NnlwB0=)
2: bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa (hash: 9Cz0tiQS8/nDaglgPuFlELicHHSaEtfkwdT1X8AgbOU=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: YdXKwcG3VE1+dweAiWTBoJgPXSGIvYHePqWGpgcMdGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:34:29:18:58:2a:17:15:ef:4f:bb:19:3a:b4:e8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Jun 19 08:00:31 2025 GMT
Not After : Jun 20 08:00:31 2025 GMT
Subject: CN=f85c7957a0459cd787d60f40f990fc2382767016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:60:85:b2:f2:39:2b:7a:5e:71:b2:0f:23:
e4:04:02:3e:10:33:4a:ba:80:ae:8e:6e:61:8a:5e:
38:68:0b:e8:e4:ff:0a:a6:9f:48:7b:e4:82:76:e4:
74:c0:0d:e3:9d:8d:f2:bf:cc:4c:85:bc:c3:43:7b:
e2:c4:72:78:30:1b:c8:6c:14:18:8b:15:09:f1:ae:
fd:96:17:13:e4:f5:e5:aa:fc:6e:20:4a:ac:a4:c2:
74:de:a8:eb:25:a3:76:db:75:b2:19:ec:bd:2e:ca:
91:fb:0f:36:8b:4f:ab:38:37:ae:8c:1d:c6:0f:6b:
d0:d5:99:85:0c:df:92:53:90:b7:66:8b:e5:2c:54:
a2:39:80:61:2d:3c:06:7a:3b:2b:59:39:4b:14:07:
46:3f:55:6c:9f:4f:9d:5e:49:48:a5:5c:97:78:ca:
99:a2:98:78:d6:90:f6:4e:dc:b8:d3:b9:7c:71:b3:
be:d4:78:15:32:48:d4:e8:47:19:6e:d1:bc:9c:8c:
05:ec:83:da:e2:f2:a0:16:ff:6a:42:24:e0:76:66:
1c:55:ca:b3:81:21:0e:0d:64:45:1a:f1:01:4d:5c:
96:69:b1:d7:1c:98:83:78:64:59:b1:92:6d:90:67:
57:52:77:cc:31:64:08:c9:49:42:e7:1d:13:ca:82:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5C:79:57:A0:45:9C:D7:87:D6:0F:40:F9:90:FC:23:82:76:70:16
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6c:f7:ed:8d:a5:db:59:47:33:73:cf:7e:b2:ec:75:ae:75:
58:54:d8:eb:b2:bb:6d:49:cc:de:ee:5a:ee:33:c3:d8:19:21:
32:4d:7d:d9:9a:d5:f8:a0:a0:1c:b0:15:71:98:5b:9b:db:60:
9d:35:3f:6d:ce:03:e7:c2:dc:1b:a8:3b:a2:2d:e1:19:6b:60:
c8:4c:1d:2e:74:3f:11:26:e1:58:c6:62:f9:8f:77:fe:fb:ce:
83:1e:b9:ca:9a:3d:a4:2d:a9:c4:dd:82:39:2a:96:0a:0d:68:
4e:3c:cf:f3:d9:04:15:62:5b:fa:36:70:bf:2a:59:eb:2e:0e:
d7:c5:7b:6c:50:2d:ce:6e:30:4c:85:16:f2:7c:b8:f9:bd:bf:
3e:e5:c1:f4:64:d1:27:a2:9d:52:3e:b3:fa:c3:d4:95:78:13:
73:5e:68:a8:57:e9:54:8d:b7:26:63:0e:3e:21:73:34:1b:bf:
4b:7a:07:14:c7:86:3c:14:58:6a:86:40:af:8e:14:b8:39:56:
91:95:b5:bb:84:2b:82:db:a7:7d:92:55:1e:6e:bb:29:40:65:
c8:91:77:fb:3f:7b:af:65:b3:26:cd:81:4c:5e:84:2e:e8:05:
ae:50:6e:84:62:e3:d4:b2:54:3f:53:3e:f5:71:1c:da:d9:78:
30:b8:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 16:09:03 2025 by rpki-client