Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier: UK6Zb2UlLhPxlLalcEaBkP/NonRdzQupZ8+Ckx5dVR8=
Subject key identifier: 8F:08:0F:DD:08:9C:0D:F3:10:1F:5C:65:81:7D:BC:AC:69:09:E2:D1
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 01976BF3FAD833419603121ABECC74548824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number: 05F7
Signing time: Sat 14 Jun 2025 01:00:40 +0000
Manifest this update: Sat 14 Jun 2025 01:00:40 +0000
Manifest next update: Sun 15 Jun 2025 01:00:40 +0000
Files and hashes: 1: R8NsFHiOMt_I9kRi69VS0cdeD3Q.roa (hash: xksdmSwt2Z6iAfq+Be7Evwsm6EdDBph6gWWX0xJnVLc=)
2: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: BTZ8o64DrgjBzkcSi13FoFILwttFqsi7tw0Y3mUNXgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:fa:d8:33:41:96:03:12:1a:be:cc:74:54:88:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: Jun 14 01:00:40 2025 GMT
Not After : Jun 15 01:00:40 2025 GMT
Subject: CN=8f080fdd089c0df3101f5c65817dbcac6909e2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:ed:d5:20:c5:26:4a:ad:e3:00:33:34:a6:
71:91:1c:34:76:85:bf:9c:22:ca:66:ec:d6:a0:e6:
fc:2d:e0:a7:d0:fe:26:c8:d9:89:0a:7b:88:46:bc:
ab:aa:7d:6b:02:70:fc:ae:3a:d5:fd:6b:f5:bc:db:
5b:cd:6f:5d:5e:b6:c4:15:72:c4:72:79:d1:e4:ac:
46:dd:90:75:e6:f5:79:fd:c3:9b:87:d8:f5:b2:78:
84:b7:ee:ce:b9:06:09:7f:9c:ce:f4:c1:8f:61:1b:
ec:9b:d3:79:4e:71:dc:4d:d1:bd:01:49:89:48:b4:
fc:a8:6d:4f:7d:b2:32:1a:b4:62:74:46:f3:ca:ec:
24:e0:07:56:1a:36:c8:65:7a:52:dd:d7:67:91:d9:
74:44:7b:88:e2:94:5e:3a:d5:9e:52:96:68:8d:c2:
ac:12:83:22:3a:32:f1:ca:47:70:7f:23:e8:be:ed:
dc:80:45:89:c4:59:b9:37:c7:2f:22:fd:c4:3f:55:
34:ff:b8:3b:66:73:d0:6d:01:75:cf:fa:a5:89:7b:
a3:c3:b4:77:b8:3e:88:63:df:42:39:43:62:23:af:
83:17:ae:ce:2c:33:a1:1c:1c:91:e9:d1:1b:4d:42:
03:2d:dc:1e:90:d3:44:fa:f0:e0:75:b6:16:68:32:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:08:0F:DD:08:9C:0D:F3:10:1F:5C:65:81:7D:BC:AC:69:09:E2:D1
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:81:83:0c:84:a7:be:15:5a:2d:dd:45:d9:71:25:d5:23:e1:
88:cc:16:50:32:90:d9:d0:c8:05:bd:3b:14:be:22:7c:59:c4:
96:36:38:2e:74:39:2c:ee:18:9a:bb:6a:cc:31:ef:73:59:75:
9a:b7:db:6f:a2:e3:fc:a1:92:4d:02:e7:93:4e:2a:56:0d:32:
76:f1:2b:8b:34:28:4c:a8:10:d0:33:08:fd:42:12:c2:ef:66:
f7:76:a8:a3:a1:e0:45:82:e8:4f:c5:d7:fc:b5:a8:9f:27:65:
2f:dc:2c:27:15:3a:1a:e9:fb:87:6d:74:24:d2:bf:10:8d:45:
80:10:33:16:c6:21:df:20:bf:11:a4:02:9f:f9:26:3d:8f:5b:
40:2f:2e:7c:36:a9:fe:21:4b:10:d2:3c:67:9d:36:e8:ab:6e:
f0:8d:d4:87:9e:3a:2e:bc:e0:31:eb:5c:99:1c:ec:e2:95:0b:
20:16:05:f2:e7:bc:27:61:7a:bd:9f:df:6d:5d:a9:6d:2b:61:
89:96:a4:52:19:38:b2:9c:66:34:a9:ff:d3:b1:84:3b:1f:3a:
5b:d0:6a:60:aa:7c:1f:43:13:9a:7c:9b:57:79:4b:54:2e:73:
83:48:68:bc:90:27:da:16:a9:3d:93:49:9f:c2:4e:31:a4:d6:
10:ab:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:39:36 2025 by rpki-client