Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
File: z431Kt_i_Oaulvb-BdFAieAkfO4.mft (raw, json)
Hash identifier: E7oKr9GUohMgfnCMPW/QasndA33hgkwj97TwXK1vqFU=
Subject key identifier: AF:C3:E4:D7:91:AA:0F:50:C7:FA:84:D1:14:61:43:9A:33:A3:8D:29
Authority key identifier: CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
Certificate issuer: /CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Certificate serial: 0197B77C84E3981A1C190E34C691B291B069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
Manifest number: 0D6A
Signing time: Sat 28 Jun 2025 17:01:20 +0000
Manifest this update: Sat 28 Jun 2025 17:01:20 +0000
Manifest next update: Sun 29 Jun 2025 17:01:20 +0000
Files and hashes: 1: TiwKb7nlOPMc1Vnv8DcKupSD5jY.roa (hash: nQWhe0fyffCN2quQfKSQ56T2rfLrYZUxC64fwkrxixE=)
2: z431Kt_i_Oaulvb-BdFAieAkfO4.crl (hash: hU4s1Dkzplqi+BN8B/EXNeptzpjorTQpu7igTa4bPQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:84:e3:98:1a:1c:19:0e:34:c6:91:b2:91:b0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Validity
Not Before: Jun 28 17:01:20 2025 GMT
Not After : Jun 29 17:01:20 2025 GMT
Subject: CN=afc3e4d791aa0f50c7fa84d11461439a33a38d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:94:d9:d0:85:c9:34:59:a4:ef:64:62:26:13:
50:a7:e2:98:b7:36:5b:29:a0:3b:64:b1:7e:8e:1a:
48:72:9f:00:93:1d:a6:e4:23:7f:d8:23:64:12:66:
81:0f:a2:da:26:c1:9a:ed:48:17:97:0d:4b:c7:a8:
b0:aa:43:ca:d4:bf:f5:f7:9b:ae:46:73:71:a4:48:
cc:e6:80:a7:49:8c:c9:2b:22:82:f1:e0:48:2d:1d:
15:7d:7f:e2:6d:01:5d:93:99:06:01:ff:22:c5:17:
6a:aa:df:e8:ac:39:fe:61:b0:61:47:5e:61:0f:fb:
bb:77:d9:d5:02:f7:4c:a4:1b:d2:20:55:fd:5a:5c:
ba:cf:a7:a5:3a:5d:e2:80:dc:55:c6:63:ce:dd:6f:
f0:41:34:01:61:ce:00:ce:8b:38:ec:b4:0c:bf:49:
3c:9e:2d:4f:61:da:46:1b:53:98:93:55:41:8e:9d:
65:00:69:15:7e:52:30:b2:42:a9:5b:fb:e4:c6:c3:
c4:f7:38:91:12:a2:40:65:95:2c:0e:25:e8:0b:a2:
c0:8c:fa:86:4c:e3:8a:da:0c:b4:51:99:f4:1e:25:
fe:91:03:fe:08:7c:46:5a:ce:f8:b0:32:46:89:1e:
28:26:7f:1f:a4:6b:b9:6f:9d:ed:c7:9e:2b:a4:85:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C3:E4:D7:91:AA:0F:50:C7:FA:84:D1:14:61:43:9A:33:A3:8D:29
X509v3 Authority Key Identifier:
keyid:CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e8:cb:24:65:23:f8:a3:3e:20:b2:be:e3:94:43:bd:33:53:
81:23:7d:ce:3c:10:0c:92:1b:bb:57:8a:06:e6:be:ce:d5:4a:
bd:49:22:d9:99:3a:5d:20:d7:c1:4a:0c:d3:34:2d:21:af:9e:
79:8a:fe:08:2d:f6:60:03:be:2b:f4:0c:df:25:94:c1:62:dc:
b1:ea:f3:de:5b:a1:bf:6b:00:d8:d9:91:8e:46:5e:be:50:08:
c6:44:37:87:53:9f:3d:4a:e1:a5:e9:f1:e3:d9:16:d8:9e:8e:
8a:f1:91:03:41:7a:c5:4c:b6:96:b4:b6:86:1f:3e:e6:fd:24:
cc:e6:14:2f:ab:d3:87:1f:48:0a:6f:a7:4d:a9:6b:34:56:4a:
a0:54:a7:fb:88:72:c0:be:87:f4:e0:a7:9a:d8:cc:b8:f6:e5:
12:c9:4f:47:2b:e8:a7:89:d3:16:b3:2c:d8:ce:5c:38:b3:1e:
47:c4:b3:8c:48:05:7a:c8:14:04:2f:2c:91:a7:58:1b:6e:ec:
f4:e6:e9:1b:7f:fb:fd:fe:57:55:9f:86:6b:33:cb:02:d3:a0:
bb:9c:46:07:ca:dc:23:48:ff:30:e6:61:80:30:79:28:10:22:
bf:13:c2:c2:10:bc:cb:0a:f7:73:19:06:ed:0e:f6:9b:e7:69:
8e:91:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:02 2025 by rpki-client