Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: SwbpJgQhVJuDYjD6ukcolfyuHEFNyTETRaFt+hYarcw=
Subject key identifier: F1:DF:26:60:75:91:65:9A:49:79:3B:CF:16:8F:16:55:C0:6D:34:BA
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 019776E63B7263B73CE0CBB9D789010DB2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 0C21
Signing time: Mon 16 Jun 2025 04:01:29 +0000
Manifest this update: Mon 16 Jun 2025 04:01:29 +0000
Manifest next update: Tue 17 Jun 2025 04:01:29 +0000
Files and hashes: 1: Oc0qle0fVAxYCYZVrPoLp9Koy14.roa (hash: OoYjo8j96JGZ/KIKji2EFWXUPAYR+0wfSdmWkW1Apho=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: 0N8xAkZhosfauI+Jcv7ZgcAC1QuUL2PGYVJCYqzR9qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:3b:72:63:b7:3c:e0:cb:b9:d7:89:01:0d:b2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: Jun 16 04:01:29 2025 GMT
Not After : Jun 17 04:01:29 2025 GMT
Subject: CN=f1df26607591659a49793bcf168f1655c06d34ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c4:87:ef:fe:97:a9:3b:be:9b:02:83:ac:46:
af:5c:64:71:be:2b:da:80:20:ce:3d:9d:bb:7f:5e:
c7:9a:5f:d3:d1:6c:6e:70:59:39:7b:ad:3a:8e:4b:
5d:f0:3b:81:d6:29:13:71:30:4f:b5:cb:c4:22:b7:
86:71:45:20:06:36:93:1f:60:6c:53:23:06:b4:cf:
58:4d:7d:17:63:88:58:e9:81:79:c6:7f:bb:d7:9a:
41:fb:3c:93:aa:5e:dc:24:45:80:ae:14:ec:90:80:
9c:3e:2b:5c:71:6f:3b:52:a0:0d:31:f8:a7:9e:39:
55:93:ca:84:35:03:a7:10:6c:4f:06:a6:6c:d9:50:
9c:ec:d8:5f:13:c8:2c:3b:be:f3:7a:72:e6:2f:81:
ee:6c:bc:9c:8b:53:5b:e0:a8:f3:fc:9f:de:f8:6b:
f3:be:3e:ce:07:0f:79:9c:a6:38:d1:2b:71:e7:c9:
d4:12:91:73:4c:b5:0f:4b:f4:e9:b9:1f:fa:bc:40:
72:2b:e2:c9:ef:01:59:8d:b3:cc:e1:1a:de:af:a1:
93:c4:fe:89:56:2e:c0:52:4c:50:83:77:96:11:09:
62:ef:71:9b:59:db:48:a4:8c:ee:b7:e2:97:22:06:
3c:36:a2:f3:59:19:8b:fb:95:6a:f6:59:a9:f4:33:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DF:26:60:75:91:65:9A:49:79:3B:CF:16:8F:16:55:C0:6D:34:BA
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3f:5a:81:b9:f5:af:e3:3f:ec:ee:e5:79:dc:6f:79:47:3d:
38:fc:ed:ca:a1:13:97:77:09:ed:89:50:7b:0a:4e:13:25:8d:
fd:17:45:b8:5a:57:7b:ed:b9:49:47:6b:f2:c6:6d:8a:0e:03:
12:82:85:11:ee:af:07:b7:d5:1d:d7:10:1c:4f:c3:cb:c7:62:
0c:87:d1:63:dd:13:45:19:c2:8e:05:05:54:48:9d:96:06:50:
31:68:e8:44:32:82:64:61:ba:63:70:0b:75:6e:35:e2:1d:08:
66:af:3c:fe:5a:e3:82:4a:be:44:76:73:98:13:e0:09:1d:d1:
19:0f:8c:46:21:56:58:20:ac:38:5e:3c:e1:ae:ca:4e:e6:fb:
23:7c:06:2f:1c:64:35:d2:f5:75:75:91:18:7f:dc:a7:71:c7:
16:bb:52:5e:d4:68:da:a7:41:8b:86:d2:1a:86:2f:0b:20:19:
47:3b:5d:3c:10:f6:6f:5d:15:71:50:66:10:49:1b:87:8c:e3:
8c:c5:1a:bd:ad:e5:47:b9:1c:03:0b:10:2e:25:1b:11:38:f9:
98:c8:3f:7c:d4:d7:ca:73:32:60:0a:58:ee:8e:db:95:91:16:
2c:33:74:1f:60:c6:b6:ab:15:a8:f6:fd:aa:6e:be:36:a9:25:
59:02:98:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:28:41 2025 by rpki-client