Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: B0y947Mv+7HTsoj9L7FxbgRMmw447g9BxcmYrwskYJw=
Subject key identifier: 00:34:86:74:B2:64:8C:63:D6:73:0A:B7:58:E5:44:3F:89:A5:23:9F
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 0197C2372E7266314ABFF4AC2907735C4801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 0221
Signing time: Mon 30 Jun 2025 19:01:25 +0000
Manifest this update: Mon 30 Jun 2025 19:01:25 +0000
Manifest next update: Tue 01 Jul 2025 19:01:25 +0000
Files and hashes: 1: ntif6JQzKkt15ZXJfkk8Oj8cYf0.roa (hash: 3JrfUgNRXXI9DKBiBLG/+I75NBSeTwYH7idBMj+gRRQ=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: CmbrOJtMolme2Pli9L5x2iAO0hLPUQrdMXS44RUIdlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:2e:72:66:31:4a:bf:f4:ac:29:07:73:5c:48:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: Jun 30 19:01:25 2025 GMT
Not After : Jul 1 19:01:25 2025 GMT
Subject: CN=00348674b2648c63d6730ab758e5443f89a5239f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:41:e9:38:94:8b:99:9c:e8:b9:3f:a1:23:
96:37:53:08:f5:da:39:9e:79:2a:64:c0:43:b2:59:
f2:db:50:95:00:9a:9c:f4:e5:4c:db:b9:2c:be:39:
5b:67:7e:d1:b4:54:16:db:51:60:2b:1e:b9:c8:c9:
ec:86:17:0a:88:22:6f:56:53:66:fa:13:73:29:0e:
e4:92:4f:7c:64:6e:a2:0f:7b:30:3f:64:07:66:54:
ea:8d:83:b8:e9:de:3f:4f:32:91:c0:3a:2c:39:23:
a6:c1:2c:fd:3a:35:c3:2e:ea:78:7b:36:01:dc:37:
18:39:e8:00:24:90:49:fd:48:3f:a1:be:8e:87:24:
da:6e:51:7a:23:81:71:c5:37:22:d3:97:ea:d1:3f:
04:41:d5:ef:53:ab:10:c6:52:72:a7:7c:b5:4f:a0:
da:ea:c8:3c:2f:82:5b:e6:ac:e8:c9:b8:ac:50:16:
ef:a0:f7:f3:34:45:92:bb:2f:a3:29:db:1a:63:58:
32:bd:18:79:3a:54:80:79:18:32:75:d7:32:83:12:
3e:f6:ed:21:89:d1:08:ae:1b:f6:36:f1:e7:1f:03:
99:5c:71:7b:ee:9f:a7:dd:b6:8c:7a:0c:ab:7d:07:
ab:5a:76:e4:e7:8c:9e:63:1c:ab:e8:27:82:c8:ed:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:34:86:74:B2:64:8C:63:D6:73:0A:B7:58:E5:44:3F:89:A5:23:9F
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3d:51:04:cd:ac:f0:cf:8d:ad:aa:f5:2a:5b:bf:58:6d:fa:
c3:23:eb:bb:94:81:61:2a:f1:e2:36:e7:b3:27:05:38:d7:0a:
af:a5:0c:e6:ac:49:91:e7:c8:74:c0:15:a5:4a:b6:6d:08:4e:
f4:47:dc:61:cd:c1:1f:c4:10:24:b4:51:8b:c3:ee:f6:20:93:
bc:a7:ab:bb:0d:16:5a:12:d9:e5:63:ed:f9:33:3d:95:63:54:
01:1f:6c:62:d1:11:de:bf:82:4f:f0:7b:59:59:97:9d:b4:c5:
41:0b:85:ee:ec:04:f0:e1:ca:5c:45:d6:fe:88:3e:fc:ce:7a:
1b:06:c8:54:8a:c8:d9:12:d0:cd:f2:2b:e6:cc:4a:af:1c:4b:
bd:f5:37:13:fe:e9:84:5d:a9:82:43:7b:d5:70:7a:17:24:cd:
e3:03:a1:f9:6f:23:35:84:a0:41:59:fc:46:6e:c2:a0:f3:17:
44:ec:57:f7:b4:fb:48:99:df:ff:04:9f:28:62:35:e9:23:1b:
d0:50:8a:7d:40:12:d4:6d:fb:8f:c8:34:4e:78:9b:fc:4c:bb:
6e:d7:0a:c8:6c:70:aa:d1:44:19:84:9e:90:a0:05:89:f5:a0:
64:b8:a3:ec:92:ef:be:ba:45:af:b9:a9:c2:c1:51:6c:8b:51:
dd:36:44:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:06:31 2025 by rpki-client