Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier: mLlNVFYLjL1K4mRA7DD95+4GD1RXlUu0hIrRSbt+QTI=
Subject key identifier: 75:EB:50:D6:C7:D2:1E:0B:6D:FE:F7:1B:49:B1:8A:FA:E9:7A:B5:1B
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 01976884F2577E1D33887B0F14A012253E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 09:00:32 +0000
Manifest this update: Fri 13 Jun 2025 09:00:32 +0000
Manifest next update: Sat 14 Jun 2025 09:00:32 +0000
Files and hashes: 1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: 49q8wUftnh1h4GAQCT/vJ0ohj7hN2xLH47c420HoVdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:f2:57:7e:1d:33:88:7b:0f:14:a0:12:25:3e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Jun 13 09:00:32 2025 GMT
Not After : Jun 14 09:00:32 2025 GMT
Subject: CN=75eb50d6c7d21e0b6dfef71b49b18afae97ab51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:31:99:c3:0f:8c:19:7a:25:e8:10:7c:be:
d9:de:f9:99:48:33:df:29:a2:3c:6f:34:29:65:69:
fa:eb:1d:22:ba:6e:94:d6:ea:6d:97:cd:0a:3c:bf:
da:23:1f:6c:41:05:18:2d:30:28:73:0d:2f:79:b8:
ac:ee:a2:44:d6:64:c7:a2:72:44:c0:24:ce:bf:b6:
5c:53:10:7d:41:e5:b5:3a:7c:76:fd:ea:d3:07:c9:
eb:4d:ab:c8:85:dc:e0:6a:f2:7c:ec:49:33:41:cf:
aa:1a:e3:2d:a0:bf:ad:b0:6a:88:55:04:e6:83:46:
94:2d:fc:aa:ba:b5:95:b1:2a:0c:95:6d:74:8b:bd:
a2:c6:74:e7:f6:22:84:85:01:0b:e5:db:3d:25:0a:
bf:90:3e:34:fc:c1:74:7d:53:36:38:c5:ae:40:3f:
0a:3f:8b:8d:7d:8b:10:03:5d:82:0a:56:3f:a4:cb:
5f:fb:c2:9e:ae:c6:12:0f:fa:6d:fd:61:e2:09:b6:
66:8f:f3:dc:84:93:64:4f:4c:90:99:0e:b9:18:3d:
92:36:c2:0a:48:16:fd:c4:75:05:68:74:9f:6c:89:
ce:10:54:3f:b4:3e:52:96:28:0c:ca:87:61:a5:85:
ce:16:4b:c1:fe:33:ed:ec:63:e9:04:8b:cc:99:2c:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EB:50:D6:C7:D2:1E:0B:6D:FE:F7:1B:49:B1:8A:FA:E9:7A:B5:1B
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:26:bf:5a:e4:2b:d3:12:1d:01:ac:5d:99:5f:76:18:37:18:
ed:ca:c6:8e:a0:1a:84:9f:1d:e3:a2:db:aa:67:18:c9:b0:3e:
2e:ed:e9:1f:52:8f:c3:34:b1:de:b9:b4:6e:84:ac:8f:7c:b3:
bb:6a:b6:c9:d3:46:bc:b9:84:2a:ab:63:33:b9:fe:78:b5:b2:
1b:8a:37:6b:1c:f7:f3:10:b9:81:2b:8e:a0:64:e4:55:1d:88:
3e:16:bc:99:07:68:e8:4d:f5:c5:35:97:67:80:e9:fc:0c:bb:
88:74:bb:83:ed:7f:d9:8f:4c:6e:05:02:1f:44:81:23:31:e3:
43:0c:4f:b0:65:b9:89:e1:2b:cf:f4:92:63:30:e1:94:a3:df:
5c:44:27:ed:07:30:41:1a:77:78:db:e2:e1:e1:2a:a2:b2:e2:
1e:92:66:d3:24:a5:b9:ca:aa:57:0f:12:15:9e:dc:65:d5:8c:
cb:72:12:d8:ca:08:a0:42:c0:15:33:66:aa:4f:7c:9a:13:0a:
d7:b4:2e:97:f3:ec:64:b5:5d:5f:f6:ba:53:57:43:a0:34:07:
f1:18:28:66:3f:e2:1f:6a:05:83:79:96:0b:64:f2:09:9f:fd:
5f:fe:0f:d0:5f:e5:87:ca:ec:fb:fd:5e:1b:0d:43:be:4d:a3:
fc:e1:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:59 2025 by rpki-client