Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
File: Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft (raw, json)
Hash identifier: uUmQy/CwO6EVYJemJTBn2W8QmqwqhSverdlE7jhK53M=
Subject key identifier: E6:B6:7D:C5:A1:C2:D8:6C:D9:A5:33:FD:89:DA:23:2B:AB:79:85:01
Authority key identifier: 67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
Certificate issuer: /CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Certificate serial: 01976E50260577D4DA58CD2706A23833E509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 12:00:35 +0000
Manifest this update: Sat 14 Jun 2025 12:00:35 +0000
Manifest next update: Sun 15 Jun 2025 12:00:35 +0000
Files and hashes: 1: MnPqlVHc9fosDLrnBlP0E1NoB4o.roa (hash: mD2+/j4E1Q+n6Btlz8PZ33xc+5cKf1HzvljXUQ+mRBY=)
2: Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl (hash: I2cgGn3tIyMCEUb8m/CtlInv75bqIkkEmjgOsaXQMnI=)
3: dAVWxqlNNVP6A8VBFL9RneZwmJI.roa (hash: 1lPQWQ8lwFJDBfgG4WjGvPhvOrJDEic6DuXOVo8+YHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:26:05:77:d4:da:58:cd:27:06:a2:38:33:e5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Validity
Not Before: Jun 14 12:00:35 2025 GMT
Not After : Jun 15 12:00:35 2025 GMT
Subject: CN=e6b67dc5a1c2d86cd9a533fd89da232bab798501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:ac:ac:6b:02:66:1c:be:50:c3:68:c4:e6:
6e:a2:e9:3f:10:d2:32:40:25:56:d9:b4:6c:c8:fe:
fa:11:09:6a:59:16:95:c4:aa:35:04:16:4f:a5:48:
ef:75:63:5c:d7:47:c3:5c:49:63:2f:78:69:f8:0d:
f9:21:94:d2:93:ae:fd:98:5d:cc:99:41:48:dd:56:
89:f8:61:2d:c0:d7:d1:8c:85:0a:34:73:55:12:7f:
9f:2e:29:b4:bf:70:35:b4:36:d7:0f:43:9d:1c:dd:
65:10:81:97:8d:ef:4b:70:12:43:0e:d3:5b:81:27:
9d:a2:e9:aa:ad:e0:cb:aa:2e:c1:3f:28:0a:d6:7b:
fa:37:1b:fb:76:c1:36:2a:6d:26:1a:f1:3f:8d:5d:
fe:7c:a5:9a:0f:7d:5b:e4:a7:95:39:b3:e4:8f:89:
00:08:4e:fe:6d:d8:7f:5c:1d:e8:1a:b9:e4:8e:48:
71:3b:92:24:52:80:68:41:4c:83:2a:63:a5:a8:c8:
e4:b8:f2:cb:8c:48:c5:ee:b6:04:1c:64:20:23:47:
01:d8:9f:ca:6b:47:21:34:d0:5e:b3:5c:4e:04:e1:
d2:2b:0f:ae:d7:59:bc:06:6d:5b:62:2d:27:94:c3:
55:f6:57:8e:93:1f:e5:d2:75:43:1b:ba:67:e4:fc:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B6:7D:C5:A1:C2:D8:6C:D9:A5:33:FD:89:DA:23:2B:AB:79:85:01
X509v3 Authority Key Identifier:
keyid:67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5a:d6:7f:98:f9:da:88:d1:19:25:88:d7:38:00:d0:6b:73:
f1:dd:f7:eb:d4:a2:4d:b0:e8:4c:80:2b:a9:24:9d:ad:b9:89:
b9:25:b2:64:7f:bc:7d:1f:34:49:8d:6d:0d:c4:dc:e2:06:dd:
7d:02:df:36:67:73:74:f6:77:bd:f7:d4:45:3f:a6:64:9a:c6:
f0:7a:84:3e:33:69:71:68:0d:a3:d8:b6:36:23:21:e3:1c:05:
68:f2:9d:02:23:56:21:d8:9d:4e:d0:ec:af:bc:84:2d:a2:61:
f9:06:be:76:4a:f4:f1:3f:9d:8e:9e:21:00:67:4c:d0:43:cc:
4e:3d:52:a2:40:0b:98:ff:7a:51:68:52:4e:1b:69:d0:0b:2c:
0b:85:1e:31:61:b3:c5:e2:f4:ef:b6:3f:0d:c5:af:d4:45:3d:
70:84:51:2d:57:15:a6:35:fd:a8:9f:dc:3b:6c:ce:b0:28:48:
6c:56:76:e8:b8:32:7a:26:72:d2:f5:27:dd:a4:9f:23:49:5a:
f1:1b:d2:f5:0b:86:98:e8:d9:47:b7:81:55:8e:f9:9d:06:34:
cf:77:ac:eb:70:26:d3:6d:93:c3:f3:dc:10:77:0a:47:76:b3:
de:eb:3f:72:f1:b3:69:f4:85:b7:16:b4:ae:e2:b1:bd:06:c6:
4e:64:55:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:45:58 2025 by rpki-client