Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: 6iNqZDjxTSQYDKSng2qYySnPuwFTp1AZP9kuaFkXCHk=
Subject key identifier: 6B:AF:23:F0:B3:08:DB:E1:A4:4D:A2:77:00:C3:66:59:86:FA:90:59
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 0197771CA75CFAEE5A9B9F626C374F6DE33B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 015F
Signing time: Mon 16 Jun 2025 05:00:55 +0000
Manifest this update: Mon 16 Jun 2025 05:00:55 +0000
Manifest next update: Tue 17 Jun 2025 05:00:55 +0000
Files and hashes: 1: MGVqJJOFzu2un2swGTuXTTEGsNg.roa (hash: gTMkvTBOmf7oEcLgyb6M80tZ/0OamavqqMR1gZp8YYk=)
2: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: KmeblYLRu/tt0ASqxxVFmE0+Y3zVdb1GzxB2Y2QA0ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:a7:5c:fa:ee:5a:9b:9f:62:6c:37:4f:6d:e3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Jun 16 05:00:55 2025 GMT
Not After : Jun 17 05:00:55 2025 GMT
Subject: CN=6baf23f0b308dbe1a44da27700c3665986fa9059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:c0:92:92:27:30:41:76:86:40:51:7f:30:
38:9a:97:5d:e0:fd:1d:10:70:99:83:99:2e:28:be:
a4:46:b1:57:a1:dc:57:fa:c4:dd:3a:9e:91:0c:08:
8e:6a:b6:f1:c2:42:95:6f:ba:70:47:57:92:0e:f9:
5d:7b:7a:36:2d:ad:1c:7f:c5:1f:f3:d0:31:78:97:
13:e3:06:64:a6:fe:57:79:2c:6a:5b:4a:c7:fb:6f:
f2:0b:56:c1:bb:85:5a:8a:96:df:2f:cd:a3:b5:d4:
d8:2d:15:30:e9:56:4f:a3:03:6e:93:da:dc:ce:a0:
0f:aa:19:69:1d:28:ea:26:75:67:97:05:59:3b:ca:
c0:78:51:c8:7f:17:9e:eb:67:98:d4:5d:dc:2d:7b:
c3:a2:7a:d4:d4:3c:d0:39:5b:0b:04:3e:cb:64:87:
8b:b9:1d:a6:b5:d1:0d:ff:e2:03:75:78:3d:c0:58:
82:bd:71:fd:41:89:e0:59:1f:bf:1c:dd:43:72:71:
96:25:6f:e8:f5:ef:24:a3:84:81:20:27:a5:9b:f0:
bc:f5:87:9c:ae:76:0a:e4:7a:a2:fa:09:00:fb:16:
cf:6b:c5:ec:18:a7:58:22:5a:78:48:f9:62:67:3c:
82:3e:d1:df:66:ab:18:76:cd:07:df:c4:13:70:e8:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AF:23:F0:B3:08:DB:E1:A4:4D:A2:77:00:C3:66:59:86:FA:90:59
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1c:59:59:2d:67:ae:47:49:68:d2:ba:fa:10:1a:b2:40:03:
f1:13:81:fa:7c:af:6e:d4:0f:9a:8e:20:c0:16:e6:78:2d:d0:
d9:21:ab:ac:27:0b:7c:b7:ec:5d:9e:f9:65:00:3c:4d:f2:33:
b1:0d:b5:9c:3d:ac:b2:45:e9:51:27:ac:40:51:94:05:50:cb:
bf:c2:4f:19:84:67:bf:b3:72:cb:97:d3:e1:9b:9e:ef:a3:3f:
52:08:18:3a:62:83:06:9a:f3:aa:f3:0d:ee:7b:fd:9c:c7:e9:
64:18:be:c8:58:0e:48:1e:6d:6d:bc:63:28:88:4b:c2:da:28:
a4:ee:b6:71:d7:41:b8:98:7b:bd:12:45:4f:8b:4b:e8:5c:a9:
4a:05:ed:cf:21:91:25:77:3a:82:ac:4e:57:57:da:b5:c0:e8:
68:92:58:fa:85:03:30:84:e4:c2:45:62:b0:54:ae:bb:26:5c:
d2:52:4e:3c:6b:1d:0c:6a:d0:3a:52:88:ca:70:ad:e6:93:ca:
02:b2:cf:cd:c5:36:1d:4f:e0:7d:32:3f:a6:d4:6e:45:a2:d4:
fd:de:89:dc:80:c2:52:80:e3:59:b6:33:f3:e7:21:25:75:ce:
ea:25:2c:1a:6c:07:b2:f9:64:33:49:c3:04:95:47:52:ed:bd:
cf:df:c1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:58:23 2025 by rpki-client