Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: LL+W+u2eoXC3UqEduAP7go5onCo+UuczxXH1NJj9H7I=
Subject key identifier: 75:2E:8D:32:7E:C0:36:17:B6:A4:AD:69:60:8E:24:BD:56:50:43:FA
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 019769CEA2C9801ABB6CF29F7E4E6440C3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 15:00:38 +0000
Manifest this update: Fri 13 Jun 2025 15:00:38 +0000
Manifest next update: Sat 14 Jun 2025 15:00:38 +0000
Files and hashes: 1: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (hash: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=)
2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: 1nuu3wQlA9/iReJf7Ng3JyEXNY11k+/NXAlpYOktA1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:a2:c9:80:1a:bb:6c:f2:9f:7e:4e:64:40:c3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Jun 13 15:00:38 2025 GMT
Not After : Jun 14 15:00:38 2025 GMT
Subject: CN=752e8d327ec03617b6a4ad69608e24bd565043fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:ad:74:45:17:52:12:74:31:bf:b9:24:fb:
dc:d6:ae:4b:cb:df:0f:d7:a0:9b:e5:7c:9e:9c:02:
e2:aa:b6:72:2b:37:2a:ec:85:e4:75:9d:9e:a5:4b:
09:37:c3:60:ba:ea:ae:1c:57:03:be:28:2c:7e:0e:
87:c2:67:10:7e:0c:34:e5:e5:10:9b:d1:68:e0:d0:
0a:5e:c2:9f:51:50:27:51:45:a5:e1:48:29:2e:c6:
9b:2d:9b:8c:e6:9e:1b:87:eb:cc:d5:4a:56:17:18:
e3:35:67:90:ae:fa:c8:dc:17:3d:15:d7:e0:f4:b4:
ef:78:bd:d2:5b:0d:07:6f:98:d2:db:31:1d:87:d9:
48:a6:ed:2d:74:7a:e4:ec:fd:9f:da:77:a2:6b:38:
4e:f0:a6:2c:a6:70:4d:82:6c:f8:4e:c8:75:b7:b3:
36:7f:4c:04:11:4c:d0:1e:d8:e2:1c:75:36:e8:9f:
8b:7e:d7:9b:91:ac:82:0f:da:0e:30:27:e6:07:db:
7a:d5:11:d4:3e:81:3d:e3:8d:71:30:1d:a5:75:d0:
08:3b:95:1b:69:4a:7e:cb:e4:1c:b9:59:be:d8:cd:
ae:2c:ec:37:8f:7b:50:75:61:53:58:2b:41:ba:f0:
c0:98:a3:00:7e:ee:28:5d:60:89:b1:27:08:5b:17:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2E:8D:32:7E:C0:36:17:B6:A4:AD:69:60:8E:24:BD:56:50:43:FA
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:87:1d:e9:de:0e:04:f2:6b:ac:e8:4e:76:fe:3e:93:dd:86:
ea:0e:21:fc:41:1d:24:63:83:81:2a:1f:5d:12:d5:62:ae:81:
cd:94:b5:ab:50:c3:d4:9f:a0:00:5b:54:32:c9:b8:6a:d3:6c:
84:f4:ec:7a:42:af:db:02:c9:94:5e:bf:17:dd:f0:b9:1e:3f:
40:ac:5f:33:19:88:9b:7e:43:26:10:2a:70:7e:73:1b:a7:bc:
97:52:ec:13:80:fd:02:04:bf:58:9d:58:dd:6c:e9:3d:d8:05:
f6:a5:1f:dc:d0:1f:83:51:2e:12:07:22:4d:fc:b5:ec:39:5d:
31:07:f7:30:ad:62:8a:05:8c:1b:ac:57:b7:33:d9:7b:a7:60:
14:e1:d3:70:9d:24:c5:2e:d1:da:0b:27:ea:53:2d:1f:06:10:
00:54:98:bd:ed:10:33:ec:d3:ce:52:89:af:76:4d:7d:10:89:
b1:eb:19:b7:0c:66:dd:05:cd:20:fa:4b:bb:94:af:4e:22:11:
79:13:ea:e8:e3:c2:7e:d5:c4:53:fe:3c:db:20:17:a9:8c:18:
0c:b1:9e:53:9c:b8:64:74:5e:e3:28:fc:fa:16:74:14:bc:da:
27:f4:8c:35:90:d7:dd:3f:91:05:6d:8c:4a:2a:1a:3c:f3:74:
fd:cc:cf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:03 2025 by rpki-client