Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
File: Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json)
Hash identifier: GI4z+SOTUuejrC33zIGBTv/am/+LXBhCzqzdi7FDjY8=
Subject key identifier: 2D:00:FA:C9:D6:C2:00:4C:F3:AC:AA:E9:49:C5:DA:4B:8C:56:DE:A5
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Certificate issuer: /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial: 01976E5063D05B1C7220EE1DAD26B0D13956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 12:00:51 +0000
Manifest this update: Sat 14 Jun 2025 12:00:51 +0000
Manifest next update: Sun 15 Jun 2025 12:00:51 +0000
Files and hashes: 1: 1e1cgbN_Yaq9w5khFXqXWp5wB-4.roa (hash: zmQ3HER/wocZd/4CaU6ugdYYeJQWdIjr3eNuvlDrc/k=)
2: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: KM+JIuJQA5rcMNd3okkXPmkxCQ+OuIQ9fc1v5LSPGt0=)
3: oEDva5HidP8r6cb7WhOb-gmJPJE.roa (hash: 9TsxQ3hcN0p2uqMr17StMIl3OkBXg7z6xNl42bQ2Vmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:63:d0:5b:1c:72:20:ee:1d:ad:26:b0:d1:39:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Validity
Not Before: Jun 14 12:00:51 2025 GMT
Not After : Jun 15 12:00:51 2025 GMT
Subject: CN=2d00fac9d6c2004cf3acaae949c5da4b8c56dea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:b7:94:d6:8a:f1:63:9b:8b:fb:6f:d3:ec:
92:bd:17:d0:7b:bb:c9:02:de:26:89:c7:d9:2d:10:
3c:63:e6:e6:1e:e0:39:40:55:6c:3f:37:39:b6:c4:
6e:25:cf:cb:2f:79:2f:9f:1b:d8:72:fb:0f:c1:d8:
93:b1:cd:0a:4b:01:58:e6:92:56:e0:51:6a:d1:9d:
0d:f8:94:4a:10:db:aa:8f:55:be:2c:a9:14:16:59:
a6:e7:c8:39:56:b3:3f:8e:a5:4e:ad:7b:9f:e6:bf:
0b:f6:91:6d:9f:ad:76:a6:eb:27:93:b7:aa:8a:96:
5f:ed:86:9a:0f:7c:04:3b:26:ee:fe:ed:b9:45:83:
38:64:b6:9e:40:97:a5:77:86:2f:d4:3b:8d:f5:61:
1f:0e:5e:3a:0c:af:d4:f2:37:30:e8:b4:78:74:13:
d7:57:54:0f:ed:7b:33:7d:3a:cd:ab:aa:ec:0a:b5:
72:3c:8f:35:19:0d:b8:60:13:6d:35:4d:47:c9:3b:
ff:99:ee:11:5b:de:6a:5b:6f:9d:ab:66:7b:42:96:
34:f4:d2:2e:54:3e:b9:94:9d:52:06:2b:0f:41:63:
6a:19:ba:f0:db:5d:bd:fe:72:ac:9f:f5:d8:8f:4f:
58:88:c1:7b:54:f0:47:7e:d6:64:c6:5d:93:38:66:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:00:FA:C9:D6:C2:00:4C:F3:AC:AA:E9:49:C5:DA:4B:8C:56:DE:A5
X509v3 Authority Key Identifier:
keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:8d:b4:5e:88:3f:63:27:52:aa:47:18:9e:40:b2:0c:ed:9c:
5f:a0:42:ba:16:5e:9f:75:03:fd:8c:69:49:d0:8e:ae:30:08:
e1:8b:1d:f7:f8:c5:15:e0:65:6e:71:a0:11:6c:b8:dc:73:bd:
19:a4:5a:2a:ce:be:24:b4:dd:67:71:7c:c9:e5:f1:92:db:b9:
f5:ba:c4:8a:b8:87:bd:3f:b0:33:fd:77:da:f0:53:1c:97:24:
17:b9:db:a3:3b:2b:07:1f:69:fc:6d:85:f9:98:73:37:dd:54:
7d:19:cd:18:22:8a:2d:36:b5:8e:56:8b:00:e5:dd:2c:e3:7c:
2d:d8:72:2c:0c:61:f6:38:1b:24:35:2a:70:bf:7b:2d:e8:a8:
5b:2f:a8:6c:0c:b8:6b:8b:82:a8:59:b2:02:a7:10:37:fc:71:
50:e5:be:b4:15:be:1f:15:f7:30:ef:fd:a1:2e:f5:74:cd:30:
63:61:ad:fd:ee:9b:43:72:a1:6a:fb:2c:3e:2c:33:94:b9:f1:
0e:b1:0d:a2:d1:1c:87:ba:81:66:cb:2f:4c:8f:76:8d:5f:ac:
2b:d1:79:29:5d:0d:c9:bf:a4:7a:14:9e:2e:d6:5a:d7:02:d8:
dd:b0:a7:6f:fd:06:ec:43:1e:21:c5:22:78:f0:32:0b:28:66:
38:b9:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:51:17 2025 by rpki-client