Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: 7f/vZCMvDa9LXDCkDpoGKnvpV9cfXZg66YQs4z+9n+4=
Subject key identifier: 86:A5:E3:A2:DD:4A:74:FA:4E:1A:59:68:E7:C0:B6:44:D5:3F:0D:F1
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 0197B70EE8778B6714D6057A8C9109F2CFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:36 +0000
Manifest this update: Sat 28 Jun 2025 15:01:36 +0000
Manifest next update: Sun 29 Jun 2025 15:01:36 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: 7O6MGVvU0ViCDt7eKjZ7tuEFAe2GJ8r8CgCfTSAXonk=)
2: f2XJfv98xMfqrpaFL1qLYMfVin0.roa (hash: mHLRZPkQ/y6jVuiV902GM613VmK1FGvmtwd5Ojyc76Y=)
3: g8Y2TOOKVhHIEabpCmuLfqLOwz0.roa (hash: c/0TsoE4PcOybpB4LfpOknZ1hO7co+C172nPxlIdcnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e8:77:8b:67:14:d6:05:7a:8c:91:09:f2:cf:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Jun 28 15:01:36 2025 GMT
Not After : Jun 29 15:01:36 2025 GMT
Subject: CN=86a5e3a2dd4a74fa4e1a5968e7c0b644d53f0df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:11:ba:ce:b8:91:0e:d8:58:17:c0:79:8c:
d0:f0:8e:4f:59:e6:88:11:8e:39:31:7e:49:59:1d:
17:e4:0e:c8:7f:c9:1e:6c:b1:58:f1:ba:c2:ce:29:
aa:c4:a2:af:a2:43:85:4e:3c:c6:c6:ad:d0:eb:2a:
3e:20:00:c9:d8:2e:9f:d7:b2:75:6a:ca:7b:5b:b8:
1b:38:d2:36:2c:dd:19:7a:38:66:aa:46:22:d5:6f:
c4:80:37:66:bb:a3:e6:9f:66:6d:96:30:4e:e2:e2:
53:0b:4f:9a:68:0b:42:2f:cb:ae:34:3b:4b:7c:e9:
f7:ff:02:a8:66:d4:56:08:c6:a9:24:20:a1:00:3d:
7e:54:6c:ea:70:7e:f9:82:a5:54:9a:eb:72:36:25:
cb:bc:6c:b8:02:c5:2c:14:25:35:57:3d:08:39:70:
b8:a0:37:b1:0d:d9:fe:67:cf:5e:51:ef:58:86:f3:
b2:a1:fb:3b:38:d9:9b:bb:a1:a1:e1:66:6b:ac:48:
9b:cf:f8:6b:be:57:b4:31:bc:25:32:c9:32:04:4e:
32:da:14:69:db:64:a3:dd:50:4f:d5:87:00:14:37:
83:f6:ab:41:38:bf:22:d9:da:d4:55:7b:c8:62:a2:
c0:ed:92:f4:eb:c0:50:31:e6:e8:91:49:b3:1b:a5:
c2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A5:E3:A2:DD:4A:74:FA:4E:1A:59:68:E7:C0:B6:44:D5:3F:0D:F1
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9b:3a:92:7e:2f:4b:f1:b2:ee:1c:a5:24:d9:91:32:88:d9:
f1:7e:d7:15:e7:4b:f1:07:d6:d6:29:d2:eb:1c:54:24:ab:ac:
74:69:cf:78:a4:ea:50:b7:2d:94:62:2e:18:76:6b:6f:0f:e5:
fb:07:a3:a5:81:5a:43:15:2c:81:48:3a:0d:7d:99:6b:5e:8f:
3a:d7:3c:69:df:66:42:e1:3e:e5:41:7c:a0:8e:3a:62:1e:a7:
ad:db:ce:b5:24:46:6d:31:b6:b8:52:69:9f:4f:87:27:73:69:
15:86:74:d2:59:6c:b6:0e:43:7e:57:41:86:87:16:02:19:f2:
4b:60:85:29:e4:8e:dc:4f:05:ab:61:f8:a9:ce:76:48:ee:90:
ba:af:6b:c9:47:c9:cd:3f:ce:ef:66:ba:72:8b:81:ed:59:10:
91:ad:e5:66:45:95:e2:81:1a:c5:4c:00:51:da:ca:97:3f:6a:
ff:96:aa:3b:f7:da:0b:47:41:da:e9:47:50:8f:0c:24:77:f1:
87:5f:93:d0:62:ac:34:75:9c:50:fe:4e:a5:8d:2a:71:8c:62:
d4:d6:08:10:2f:d6:57:b2:ad:6c:76:c8:81:5f:b0:9f:ab:0e:
eb:ec:44:ac:61:93:b8:68:b8:c4:3e:b5:cb:43:65:71:18:5f:
b8:f8:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:35 2025 by rpki-client