Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
File: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft (raw, json)
Hash identifier: RzhlKbT50Nxf0HYtNK7LCgqemFMBd47Ugqqp+F4oEuw=
Subject key identifier: 6E:6D:91:3E:A6:BF:1C:28:1A:56:EB:5D:31:BA:28:FC:B6:EF:13:CE
Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Certificate serial: 0197B96B22C42FF1C00FE02AB7B2A91348D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 02:01:35 +0000
Manifest this update: Sun 29 Jun 2025 02:01:35 +0000
Manifest next update: Mon 30 Jun 2025 02:01:35 +0000
Files and hashes: 1: DoDdOAUlW0tUPkZU1ktuElEn3oE.roa (hash: KlbVm+I0oV0L2Y/KM4GiRobC6enmDYLnzhNJQOXiNU0=)
2: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl (hash: z5//3TGYcIN6Gnml09p9QLQYi0Kd9PkzUcrt8h+RBt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:22:c4:2f:f1:c0:0f:e0:2a:b7:b2:a9:13:48:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Validity
Not Before: Jun 29 02:01:35 2025 GMT
Not After : Jun 30 02:01:35 2025 GMT
Subject: CN=6e6d913ea6bf1c281a56eb5d31ba28fcb6ef13ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e9:8a:cb:bf:29:41:83:fa:57:18:68:30:5d:
ed:46:50:33:c3:f3:a2:d0:83:c8:20:3b:bc:68:fd:
41:61:32:5a:dd:9f:cb:e9:03:17:f3:59:6e:c8:dd:
c6:3b:0a:d9:4e:06:54:38:fd:b0:ca:45:51:b3:9d:
8c:ea:b6:15:6e:d4:de:57:6a:d3:68:c8:2e:83:51:
e8:6e:a6:15:b9:62:d9:38:74:23:35:4a:d2:9a:17:
39:55:b4:b6:e7:c9:6e:7a:43:eb:f1:51:d8:17:3c:
b8:f4:cc:95:82:f3:de:24:dc:77:e7:9c:9e:0d:49:
45:70:46:46:1c:42:16:76:9d:68:2d:51:ea:ba:e6:
40:bd:37:2b:2b:0f:42:1f:e1:9f:44:3b:01:e3:aa:
f4:92:95:3d:34:88:a9:04:72:08:94:21:fe:c9:4c:
77:fa:d6:03:89:22:3c:77:68:5e:8e:a6:1a:b0:ae:
1b:ae:f6:a9:77:f5:44:b7:d5:ec:b9:b4:9b:46:fd:
88:d2:74:6e:b3:eb:2b:ea:d5:5a:20:04:09:21:a4:
f3:d3:b3:6e:5e:54:7f:44:74:89:39:31:1f:c4:22:
c9:20:01:b6:2c:2e:75:cc:df:32:e7:eb:64:cf:67:
6b:96:92:fd:d9:f7:c8:d1:46:7d:a4:a7:c8:85:f7:
8e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6D:91:3E:A6:BF:1C:28:1A:56:EB:5D:31:BA:28:FC:B6:EF:13:CE
X509v3 Authority Key Identifier:
keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f6:8e:14:e5:89:40:1e:28:36:f9:bb:e7:f5:dd:9d:ee:9d:
1a:ca:f6:d3:04:27:b2:12:fe:3c:d2:45:37:4b:3d:33:ff:0e:
2b:69:8f:43:60:e8:e9:9e:57:11:51:16:5c:80:c1:81:e4:1f:
70:65:63:af:85:21:ba:2b:31:26:65:0b:32:77:7e:b0:e4:4e:
88:97:92:f6:b5:49:69:20:04:d4:21:43:27:f6:33:66:bd:f2:
78:c3:60:71:49:55:c9:ed:17:d2:78:9b:4c:08:1b:90:f7:f2:
c8:c2:11:09:01:7b:ea:9f:e0:5e:2c:f0:e7:7e:21:ce:ad:43:
ac:b5:d8:e4:f8:c6:50:e4:e1:77:9f:c0:b9:8a:3c:30:48:0a:
7c:e3:a0:60:ee:47:49:9c:80:fc:de:37:12:85:68:7d:15:6e:
cf:49:3c:16:39:20:3f:73:8e:0a:76:f5:52:5e:7d:35:12:50:
b4:f4:ca:38:31:81:c5:f2:91:1f:f2:e0:46:7d:1c:87:6a:26:
02:b0:0e:29:54:c7:cf:22:49:1b:80:bf:9c:7f:05:e3:05:61:
80:23:26:d2:0a:1c:55:ab:91:f6:5a:71:fd:46:58:40:fe:3e:
c3:e1:5e:a1:a5:e7:2a:5d:62:9c:3c:b8:51:a8:70:ad:32:7e:
06:51:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:27:11 2025 by rpki-client