Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
File: ZNFx-TzBynFvyAbjalWFLN9PHBw.mft (raw, json)
Hash identifier: oJbbq1NfhcMt1CO4VWpIz44QCRffoMQF96RllSDmwwY=
Subject key identifier: 4B:C2:A9:B8:B4:F0:4D:5D:72:AF:B9:85:41:AF:6D:55:BC:EF:4A:8E
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 01976C2ADEF00C4C1BC32E0DCB643D5C25EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
Manifest number: 159C
Signing time: Sat 14 Jun 2025 02:00:38 +0000
Manifest this update: Sat 14 Jun 2025 02:00:38 +0000
Manifest next update: Sun 15 Jun 2025 02:00:38 +0000
Files and hashes: 1: 4DVldFO5y9KBtzxCTr71AtgC-eU.roa (hash: sBM0L37YAXg4FUlTCLrrPugqQEHySprVmExRuh4Lv3Y=)
2: 6kPkXmlWSAQjjCwMVOC6F-rjNv0.roa (hash: sTc836fo7TkkLRKHAoIO0+HiUzTAeRmVazBYlJks2f4=)
3: Ai07EY_IrLJeSRlVULJ-hyiwIik.roa (hash: SAAKzZyhC7heFcOPxTR1SIf1TFq7lgei6jj4stUF64s=)
4: ZNFx-TzBynFvyAbjalWFLN9PHBw.crl (hash: JdDSWz9L6x/CQKXPk+Yhm2KOIMtMggrssXAMoDrg6hM=)
5: _9bhuNhFLcA0HPv8bquRW0OUHTY.roa (hash: +AAi2JdNKRV5CFL7Yq+UFdnc1nHIGlMicPgKcuKxkmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:de:f0:0c:4c:1b:c3:2e:0d:cb:64:3d:5c:25:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Jun 14 02:00:38 2025 GMT
Not After : Jun 15 02:00:38 2025 GMT
Subject: CN=4bc2a9b8b4f04d5d72afb98541af6d55bcef4a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:b8:d9:8b:1f:0d:80:1d:28:ca:c3:18:cb:
12:2f:e2:ca:5f:a8:93:38:74:73:3c:68:37:f5:d0:
81:ff:e7:93:af:58:3f:d9:fa:39:e8:a9:5a:b1:4e:
82:59:ef:12:d8:7f:79:17:aa:5d:c7:e8:02:53:35:
70:9f:a8:37:8e:ad:01:dc:f3:a9:41:4c:25:62:3f:
c6:ac:24:e1:2e:6b:4c:e8:e0:cb:e2:7f:66:f4:49:
b9:3d:3b:dd:69:32:bf:a7:3f:87:05:37:5c:aa:9f:
01:86:b0:df:f9:00:26:13:fe:75:22:2e:d7:8f:ea:
48:f9:e4:aa:c1:d1:d3:31:6c:47:ce:ef:9a:99:99:
35:c3:3a:49:8e:38:c0:cf:81:54:40:5f:50:bf:c6:
90:7c:6f:92:a8:92:8c:31:df:86:f3:15:0d:6f:5e:
46:66:d7:21:04:ac:39:ca:10:97:9e:c5:05:29:68:
0e:cc:e6:2a:63:33:e0:bd:73:53:24:56:41:55:b7:
1f:a4:c7:d4:22:82:43:29:15:fa:62:65:12:79:29:
29:66:27:18:1a:43:90:a1:31:de:c1:bc:0e:32:c4:
49:10:da:5c:bb:82:fd:87:d6:35:4a:60:07:a6:a2:
56:3d:36:09:36:c8:06:ed:ed:70:b5:42:b4:d0:b0:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C2:A9:B8:B4:F0:4D:5D:72:AF:B9:85:41:AF:6D:55:BC:EF:4A:8E
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:76:25:ae:b1:d6:f2:fd:ed:c8:74:89:e1:36:35:29:dc:b6:
c2:be:fe:96:a5:97:d8:cb:12:d0:6e:f4:bb:92:d8:99:fa:e3:
5b:78:7d:7c:2f:2d:7e:f4:c9:2c:20:cd:4b:62:f0:af:75:c5:
be:08:b9:64:70:39:ad:3b:29:9e:2a:7b:11:fa:3c:f5:a8:fd:
0b:c4:ec:e0:28:a4:9b:51:f1:df:f6:9c:ce:3e:6d:9a:0f:6b:
3b:05:f8:6a:92:24:e1:dc:75:38:76:73:d8:9c:a2:8b:d8:b6:
e1:c3:ec:68:d6:28:0f:dc:2e:e1:f5:41:eb:9c:df:4b:f0:bc:
a9:07:11:aa:b2:73:dd:b3:41:d3:db:69:b2:fc:93:63:a5:d5:
70:48:9b:bc:1b:7b:0b:f7:1d:e9:22:50:a5:40:16:c7:45:d9:
4f:5f:e0:29:ef:ff:c6:cd:c6:7d:7e:64:32:83:05:e9:9f:d5:
8f:38:02:3f:c8:da:bf:cb:89:45:dc:50:be:b3:cd:4f:c4:9b:
3d:d9:98:77:b6:af:6e:7f:6a:e2:5b:4a:34:7d:0a:37:ed:63:
3e:ca:88:80:3e:3f:ec:70:91:d7:3e:2e:48:75:95:ed:b8:6b:
92:a7:39:9a:eb:f6:36:4b:de:da:da:a4:57:0a:a6:8f:3c:3d:
eb:79:d8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:46:58 2025 by rpki-client