Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json)
Hash identifier: a5oZmJodIhC34EO8+IXr9SNP4/3G2jox8kaBFAhwh5U=
Subject key identifier: 76:FD:DB:10:06:85:AE:71:00:F8:E3:54:9F:D9:B2:CC:9C:79:D3:8A
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial: 0197B6D799002D3F2E2BECA1D2607EBACE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
Manifest number: 06E2
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: Sm3lswcII0bf-ALKj_DDpzZvLMc.roa (hash: /Kb0jwUQMRGuhoCXPSsBRGNhGMzqhfM4ypAYr8K7OsM=)
2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: Ggjviq6BLRncHPKNVpgwXHEjT6ibxx/xmCSOzbJ0jwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:99:00:2d:3f:2e:2b:ec:a1:d2:60:7e:ba:ce:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=76fddb100685ae7100f8e3549fd9b2cc9c79d38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c5:99:6b:f3:98:44:7e:88:bc:8e:c7:a2:7e:
f3:4d:dd:54:f6:0f:4b:95:12:b8:ff:70:ad:b4:34:
d4:0d:2d:72:2a:af:63:5c:3f:09:80:20:f4:86:37:
2d:1f:b0:1a:b3:8f:9c:d6:11:59:d9:66:a1:6d:46:
7e:42:55:f1:d5:96:3a:e0:5a:cd:b5:6e:fc:8a:75:
1a:3d:c4:77:93:d7:b0:02:94:1d:51:54:54:b8:ee:
1b:c0:04:23:2f:56:28:cc:b9:80:5c:4f:99:20:05:
d2:e2:3b:e4:f1:22:d2:9b:e6:08:d9:b2:9e:e3:6d:
8b:1f:b9:f9:0b:34:04:3d:c2:f2:87:08:00:7b:28:
51:9c:40:e3:a3:88:47:c7:2e:f4:14:29:be:48:02:
bb:83:93:be:ae:0d:3e:f0:5e:21:8b:ad:50:9f:fa:
65:8b:28:02:5c:1a:5b:78:2b:38:2a:89:36:0d:7b:
04:a9:2e:3e:67:c0:11:71:2e:36:da:05:86:8a:7b:
e8:44:33:07:63:b0:96:31:ea:dd:c1:c9:5d:c6:d2:
df:83:a1:ef:1e:7e:b6:17:ff:b2:51:ec:9d:e6:ad:
29:04:1d:d9:79:e9:e7:7c:6f:b1:e1:29:3f:46:5a:
7a:2d:e5:e5:ff:13:73:37:2c:72:17:6d:ca:01:3b:
de:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FD:DB:10:06:85:AE:71:00:F8:E3:54:9F:D9:B2:CC:9C:79:D3:8A
X509v3 Authority Key Identifier:
keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:40:83:a7:10:0f:2e:d9:e8:0b:74:35:ec:3d:93:b4:60:09:
0d:52:0b:48:5c:46:6c:71:47:20:9c:a6:5f:7b:5c:83:9c:c0:
40:fe:44:2c:73:29:1a:9d:c7:e1:2f:fb:71:dc:a1:c4:e2:d1:
6e:94:11:6a:ef:69:3c:8f:e4:cf:0a:6b:c7:5b:d5:0b:eb:8f:
cd:5b:85:42:e0:43:6a:3a:7b:53:ef:ac:0d:ad:17:94:13:b1:
f0:d5:82:9b:f4:5f:65:87:11:75:5b:89:6a:2b:5d:f7:4f:b7:
91:b0:8c:9c:70:80:0f:f5:ca:1b:9d:0b:bb:19:d3:c6:9a:35:
14:9d:98:cd:eb:21:60:7f:cf:e6:16:92:c8:29:ec:1a:b2:95:
7b:99:a4:bf:9b:9b:db:3d:e9:4e:cc:9d:ce:bb:63:d2:7e:88:
fb:65:a1:ab:0e:10:f5:92:83:e5:e3:08:ed:5a:5f:71:fc:85:
f7:eb:b4:5b:61:76:c5:53:0c:92:20:fc:e5:43:b2:c5:b3:ca:
23:44:83:06:3a:81:cd:46:d6:56:c0:82:0e:a5:01:20:82:3b:
72:88:b3:66:2c:39:03:0b:41:19:c4:0d:43:5f:84:a2:fe:e9:
e2:09:89:89:04:56:c0:4e:01:8b:ca:d0:b5:dd:f9:d5:f0:fe:
37:19:ba:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:05 2025 by rpki-client