Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: kOU00LZraupxNk515/jvJ2kvC0tykDrgL1/pxZfALGw=
Subject key identifier: 51:39:7D:64:0A:15:0E:25:DD:A7:D7:04:48:E4:12:A5:56:50:40:23
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 0197B820FF810C297742821D1F0435245942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: F4
Signing time: Sat 28 Jun 2025 20:00:59 +0000
Manifest this update: Sat 28 Jun 2025 20:00:59 +0000
Manifest next update: Sun 29 Jun 2025 20:00:59 +0000
Files and hashes: 1: 2hDPatYNHQhIPlvymgRA-xmm86U.roa (hash: 8kdVjJKDXzBN5JG+XGLJqwndIaq/0FXixJOUEgyTy9Q=)
2: BU0K-jq4yCTRDFgFmlLWawEJYAU.roa (hash: HyTY7vvT0OCEeAhfRH+8wyCsyeDuJjUYTouZKbB1WlU=)
3: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: gGifmI9A422dSgU50RyfRYhCl61jq4f26w2SfxBIZHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ff:81:0c:29:77:42:82:1d:1f:04:35:24:59:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Jun 28 20:00:59 2025 GMT
Not After : Jun 29 20:00:59 2025 GMT
Subject: CN=51397d640a150e25dda7d70448e412a556504023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:09:3c:ab:39:4b:5b:da:db:84:b3:3a:05:
77:15:6b:dd:56:ec:d3:f9:45:cd:d9:21:78:c2:ab:
ca:ce:b9:a5:ef:16:60:a9:90:b9:7b:72:d1:c2:e2:
a3:25:54:5a:94:71:e3:3b:d6:83:70:4a:3a:fb:05:
5e:77:24:a2:63:c3:3a:3f:9f:0c:4c:29:1a:6c:86:
b8:66:55:1d:c1:d7:c0:16:c1:19:09:f8:66:6e:e3:
82:f8:aa:b5:66:05:1b:f7:78:31:82:0f:dc:1b:7f:
37:23:5c:bf:38:f5:cb:95:dc:21:86:4b:9c:be:e2:
fb:cb:04:c5:a9:b6:e1:e0:fe:60:ef:d6:0d:92:b0:
14:6a:43:e2:de:4b:65:55:70:56:99:34:25:41:7c:
bc:78:34:cd:7c:82:60:f8:ab:c5:8c:e6:2b:e5:c0:
27:bb:ff:1b:fd:a5:01:7e:c0:c6:c5:de:94:17:68:
66:62:e1:37:48:04:a8:07:d0:22:34:2d:da:43:69:
24:bf:ab:81:8b:c8:10:32:03:d8:7e:d1:96:d2:12:
c5:e5:f5:04:6c:9c:a8:08:78:6c:7e:ec:d4:15:35:
23:a9:fd:63:14:ea:9a:a8:6a:55:8c:05:da:0a:c5:
32:b3:a5:73:ad:bb:dd:f0:61:6d:d9:27:a6:d0:a5:
e7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:39:7D:64:0A:15:0E:25:DD:A7:D7:04:48:E4:12:A5:56:50:40:23
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:79:c2:5f:5b:d6:a1:92:0f:0b:35:e9:82:08:a8:68:41:fb:
fd:6a:f4:76:33:be:e0:79:83:cd:08:6f:1b:a7:60:bd:c4:27:
44:39:fe:b2:bb:0e:b2:16:b5:ea:da:97:3f:07:08:e4:cc:f8:
1d:20:d0:cb:55:bd:ed:0c:76:44:4f:78:59:1c:d2:80:31:12:
96:31:e1:ca:a6:58:b8:f7:81:e5:c0:42:80:0d:3b:83:f3:ce:
65:ef:59:4d:de:69:07:14:46:b1:49:f6:e6:9b:6d:66:c1:43:
6a:e6:04:7d:a0:37:6e:ff:e4:40:f3:25:57:d8:ae:7b:96:85:
5e:f3:15:ec:eb:b0:b6:5b:ee:d3:61:b2:4e:33:41:3e:47:75:
b3:88:64:b4:64:80:f4:7f:e7:56:00:15:92:27:a1:bc:3e:64:
81:2e:ff:64:4c:21:88:d2:e6:ac:a8:fe:89:28:94:85:35:5a:
00:9e:43:c4:c0:23:e0:7b:05:d3:2e:e1:46:bf:0a:ef:82:9a:
79:5d:e6:3b:5b:24:c5:c4:5e:78:45:f4:ab:ca:f5:4b:80:1b:
50:b5:46:ef:5f:8e:a8:04:7b:49:36:6e:9f:19:c8:7f:67:77:
d1:97:7e:96:a9:b1:51:f4:42:58:2d:b3:b3:f1:51:fe:17:ca:
db:34:73:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:55 2025 by rpki-client