Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier: lwvDO7nToOmoUtmyzqrPSAf0cLioOnm+gXMNA6E+BkM=
Subject key identifier: CE:17:54:D5:35:E5:F0:AB:6D:B7:EC:AB:D4:6C:3F:74:BD:DD:12:C1
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 01976FD0D5D5DD58123B6AF46AEBF4D6167B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number: 0C86
Signing time: Sat 14 Jun 2025 19:00:46 +0000
Manifest this update: Sat 14 Jun 2025 19:00:46 +0000
Manifest next update: Sun 15 Jun 2025 19:00:46 +0000
Files and hashes: 1: AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa (hash: jHy+WZea/KY2LIPLNfFyrSljh52WzofvhmuIGDrREzM=)
2: YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa (hash: FDzee6XqGxeVxnvKkrH/BVWvy6+j3Z62PPnSpcuiI80=)
3: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: sf+BkpC9vNfGDluYau7CfYWEHgVat9MpkXL5mFh5x/k=)
4: zx2sQUv3rsJGXAZABCst4_xZkOQ.roa (hash: FBqifBeUX2hPnOiisT6KsJiWdU/gan88BUTxXJkwpMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:d5:d5:dd:58:12:3b:6a:f4:6a:eb:f4:d6:16:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Jun 14 19:00:46 2025 GMT
Not After : Jun 15 19:00:46 2025 GMT
Subject: CN=ce1754d535e5f0ab6db7ecabd46c3f74bddd12c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6c:0b:a1:7e:01:d4:62:c3:2e:8c:2b:7a:92:
bd:58:e8:aa:ca:72:90:0b:89:7b:5e:b4:1d:ca:1d:
8e:92:1c:c8:1f:b9:f2:0e:43:e3:3d:61:9f:65:2a:
e4:2f:12:19:7e:e2:15:d5:ef:60:ea:53:4e:6f:50:
04:96:4d:69:64:49:1d:4b:c2:e6:ac:66:fc:bb:2e:
1a:43:d7:ed:1c:a5:78:4c:2e:a2:77:ae:15:3b:b8:
a3:72:1e:87:1e:ee:6b:3d:b4:65:fb:51:b0:50:bd:
0e:20:27:99:a5:b0:80:27:35:20:fa:c3:8a:af:01:
1f:9e:d3:0f:44:b9:36:8a:cb:1d:c8:d1:e9:94:db:
33:bf:4d:c7:95:d9:55:18:03:19:97:26:9f:df:e1:
65:b2:73:25:8a:5c:05:42:7e:ef:c4:e7:c6:fb:43:
11:73:90:56:04:91:0c:1a:88:80:38:03:a1:5e:81:
fc:6d:f9:45:3e:0d:24:a4:c8:35:2d:4b:ce:08:3a:
4c:36:f4:75:71:13:92:99:3a:a4:47:b7:cd:3d:ac:
56:36:51:a8:57:7e:97:aa:a3:72:ab:eb:f8:80:12:
d4:dc:00:27:76:3e:09:87:3b:32:3f:5f:b7:4d:3e:
ef:7d:52:bd:60:15:ae:c7:3d:73:ec:41:ea:61:6d:
1d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:17:54:D5:35:E5:F0:AB:6D:B7:EC:AB:D4:6C:3F:74:BD:DD:12:C1
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:06:38:2f:ee:b4:96:f2:39:b6:59:a4:ff:a4:04:4c:b0:05:
7e:00:c0:7d:cb:1a:b1:ea:81:97:3a:06:0c:ed:e6:da:10:58:
f2:20:78:96:52:d5:d7:de:4b:aa:79:dc:1d:36:b0:6b:f1:82:
82:26:98:ac:31:2e:bb:c3:a8:bb:a2:5a:ad:62:46:88:c2:09:
29:49:6e:25:c1:f0:5e:bd:b7:68:e1:00:60:5e:c2:fc:0e:e3:
04:0c:a3:91:90:44:11:c7:1f:ef:6e:2d:13:25:48:8d:15:de:
ec:8d:d1:9a:49:7d:28:34:21:21:4f:eb:ef:32:ff:f9:26:58:
0d:ed:62:94:08:d4:7d:96:04:9a:4c:46:ef:13:ad:b5:16:82:
82:e8:87:6e:cc:a7:0b:83:7e:5e:39:57:c8:e8:a3:fd:2d:6c:
87:c4:6a:c2:95:e6:dc:d2:17:78:e6:f6:f9:7b:5c:31:dc:f6:
9e:ec:7a:b1:7a:2d:4c:f7:be:96:19:c0:9f:37:f4:67:05:3e:
6f:14:fd:94:b3:41:bc:8d:51:5d:29:36:80:aa:0d:e4:9b:51:
25:2c:4b:d0:c6:c6:f9:98:d7:27:d2:3d:d2:53:9c:a5:ee:d8:
c4:6b:58:1d:89:1d:16:e3:9f:3e:a1:fa:5e:c3:39:92:61:7f:
6b:46:70:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:13:43 2025 by rpki-client