Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: ItghsMa7WBGszcZfnIqwCQm4vWMtbkX9T/AQIZCHkpo=
Subject key identifier: 82:84:31:B0:14:68:15:67:D0:BE:D9:F2:2C:B5:57:07:AE:71:36:42
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 0197B6A19E6B520E63A26AC1D6E6E2BBEF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0C77
Signing time: Sat 28 Jun 2025 13:02:14 +0000
Manifest this update: Sat 28 Jun 2025 13:02:14 +0000
Manifest next update: Sun 29 Jun 2025 13:02:14 +0000
Files and hashes: 1: 3p5nhLsOjt1h69C859DNKbB2MQU.roa (hash: fomkhfBpGlBS0AfRGY4b/l04Zngyijm1T6FQ0+oESso=)
2: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: kpKsyB5Gkhasuu088IVHpyXaK4h5iJVM8jOQ9MKEKTo=)
3: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:9e:6b:52:0e:63:a2:6a:c1:d6:e6:e2:bb:ef:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Jun 28 13:02:14 2025 GMT
Not After : Jun 29 13:02:14 2025 GMT
Subject: CN=828431b014681567d0bed9f22cb55707ae713642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:d7:bc:03:ee:fb:ab:f5:74:d6:e5:0b:5b:
d1:35:ba:28:b6:52:23:29:b2:c3:62:36:37:3d:e6:
fb:c5:0e:1f:ef:fa:66:eb:15:da:52:83:b4:5c:a5:
88:45:89:18:ec:48:59:b8:3f:62:8b:f8:09:33:07:
7f:34:58:9c:ac:d7:ae:b1:2a:09:d7:05:45:7e:91:
8c:bb:1b:4b:b3:6e:78:1e:68:70:ce:f9:b0:65:aa:
b1:56:17:e4:a1:11:c2:42:87:26:4c:61:e0:64:97:
bc:64:7d:20:94:30:ef:83:a1:72:48:35:5c:64:16:
07:4f:ab:91:31:d0:cc:bf:3e:d0:64:fa:7e:67:1c:
a4:77:4b:c3:8b:14:2f:ff:a6:f3:57:f4:26:5a:f9:
cb:b3:4a:d7:90:72:b4:b3:44:46:06:a6:fb:ba:33:
aa:d0:28:9c:18:f0:2e:7c:e2:dc:9c:9f:98:81:da:
28:ad:24:6d:a3:33:54:c8:94:55:e9:56:dc:c1:ba:
aa:7d:ac:0e:2e:1e:42:db:c8:6b:f0:8b:cb:96:bc:
e9:18:3a:e5:84:92:43:e6:a7:69:49:f9:50:22:bb:
17:ba:52:7d:2d:39:5a:ec:d1:60:ce:0a:0b:8d:79:
67:79:6e:96:12:e7:b3:26:a2:2c:8d:d6:a2:09:b8:
2c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:84:31:B0:14:68:15:67:D0:BE:D9:F2:2C:B5:57:07:AE:71:36:42
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ea:75:63:14:61:6f:a0:e4:88:da:a4:31:1c:ed:0c:98:82:
1e:c5:ad:88:fc:a7:23:30:39:54:70:66:72:8d:7f:ea:9e:9d:
33:c5:a3:76:cf:90:94:3b:a0:f3:f7:7c:40:70:46:41:22:b6:
d2:54:01:18:5e:e3:a5:13:e4:3b:35:dd:db:80:19:46:e3:f4:
41:93:ce:d5:1f:a9:28:9b:20:c0:f7:f8:f7:8a:61:6c:94:1e:
a8:e3:7c:c1:02:99:e7:c7:b0:69:9e:7a:c3:ba:1b:e7:7a:0d:
0c:47:b6:64:e2:26:2c:9e:12:75:fb:1f:9e:87:30:c8:22:a4:
ac:f5:15:cb:6f:77:d7:45:80:59:c5:c6:ea:14:26:bf:4e:6d:
0a:3f:ae:f6:ac:98:ef:fb:d4:30:98:71:95:d2:91:f6:b9:c5:
c4:8b:b3:89:46:17:3c:a8:ad:8d:d5:0e:c1:5c:ec:61:7c:ce:
f1:3b:4b:8d:6d:ec:ef:f6:a0:a6:25:e0:66:b5:4d:6f:1b:cc:
49:59:dd:af:9f:5b:46:b2:1d:78:d9:79:48:d3:4a:2c:21:b4:
68:9a:f0:2e:a2:1e:17:5b:92:70:0d:18:b2:fb:f7:2c:26:fc:
58:4c:7c:95:f2:61:ef:73:13:e0:45:ac:15:ee:97:b4:bd:0e:
48:aa:da:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:35 2025 by rpki-client