Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
File: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft (raw, json)
Hash identifier: Z0muN4cbNruaxodXixHtFh18Y6mTFOfs8P5xZ80zRsw=
Subject key identifier: 26:7A:C7:8B:41:FB:90:28:48:DF:BD:EC:C4:BD:FE:86:D2:63:3D:F7
Authority key identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
Certificate issuer: /CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Certificate serial: 0197B70E79F50B0E4EAEB8ECFF0C562239F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
Manifest number: 0CA9
Signing time: Sat 28 Jun 2025 15:01:08 +0000
Manifest this update: Sat 28 Jun 2025 15:01:08 +0000
Manifest next update: Sun 29 Jun 2025 15:01:08 +0000
Files and hashes: 1: QSFoTY-rZFAhWSMN9-_p_o-BDiU.roa (hash: 3LADFmQvbHE7KoUBEivUP2jD8vxc2/ZNRnufgFEmEsE=)
2: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl (hash: 7FFGdXOyD/bGvYZ3ry/Dr846cnoI62CAqS1bTJbbPMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:79:f5:0b:0e:4e:ae:b8:ec:ff:0c:56:22:39:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Validity
Not Before: Jun 28 15:01:08 2025 GMT
Not After : Jun 29 15:01:08 2025 GMT
Subject: CN=267ac78b41fb902848dfbdecc4bdfe86d2633df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:63:1a:b9:52:58:37:38:e2:74:66:44:4e:
28:c4:dd:80:d1:01:28:47:0c:2f:08:d1:55:ae:2d:
5f:b6:10:de:86:78:a9:9c:54:6b:a7:a3:84:f1:db:
a8:ae:e4:b6:a1:e9:a5:04:e8:79:b9:35:59:57:6f:
51:75:ba:72:95:03:e1:84:4d:32:1e:52:b1:b1:47:
26:7c:6c:2b:74:5e:ff:25:1a:c2:68:d7:b9:0f:8c:
bd:b7:ac:35:67:00:68:55:02:8f:4c:b9:83:ae:9e:
12:40:c9:11:aa:bc:0a:f5:52:ca:24:70:bc:fe:4e:
9a:c2:3d:91:d4:9c:7e:99:43:2c:85:6a:6e:76:31:
32:f8:37:62:a3:d6:f1:c1:ba:a7:93:7a:a4:77:4a:
de:60:d6:04:d1:6a:4e:10:17:87:5d:d3:a9:3c:0f:
a7:25:98:45:af:fa:f2:c4:8b:e5:66:7e:fc:d9:6c:
6a:00:d1:9e:8f:94:4d:c6:71:d8:9a:0e:3b:d5:d4:
89:82:64:e1:5a:04:df:9d:97:cf:e0:70:a2:25:27:
1b:b4:07:31:f2:4c:53:e3:b5:a2:17:d7:6c:74:ab:
0e:87:77:71:88:00:83:09:94:ec:b7:b9:b4:11:b3:
99:ea:97:4a:e9:26:9a:da:82:e6:73:c1:40:56:a7:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7A:C7:8B:41:FB:90:28:48:DF:BD:EC:C4:BD:FE:86:D2:63:3D:F7
X509v3 Authority Key Identifier:
keyid:67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2e:24:dd:e2:a3:21:a9:5c:b7:fa:3a:6e:88:80:ff:53:ae:
5b:9a:07:61:3e:44:3a:72:28:69:0b:f8:76:0e:2e:f1:c4:af:
b0:fe:c8:a4:9a:43:d3:0e:e5:f4:61:93:27:cd:ab:60:91:8f:
50:1f:a9:12:ba:5c:a7:cf:22:d1:84:a3:23:64:cb:09:a8:93:
b5:97:b8:85:21:64:f7:fd:65:6f:da:b8:c8:9f:47:e3:7b:91:
c1:e0:6e:52:b8:fa:ce:a7:4c:fd:0c:6e:8a:8b:a5:5b:7e:7e:
f9:a3:05:d0:e5:f5:99:20:fd:40:66:dc:c3:83:95:af:94:f8:
05:52:d7:8c:aa:0c:9e:45:92:bb:b2:fc:05:a4:51:3f:60:b0:
c3:85:76:8f:46:d4:1c:23:ce:df:49:a5:b5:dd:30:f2:58:97:
ba:8b:af:38:67:24:f5:15:b7:e3:cb:48:1a:87:d0:9c:c8:35:
f3:19:7b:af:0f:ae:d9:eb:e0:71:af:66:e7:e1:7a:ae:4b:dd:
0c:17:4e:76:de:aa:9b:d8:4d:f4:d7:21:60:c2:0a:bf:41:02:
f6:a4:4d:1e:d0:9c:ce:d0:b6:79:bc:e5:b3:ca:ec:d7:88:2a:
0e:7d:f9:30:5a:3f:2c:84:68:cf:f1:99:3d:0c:65:3e:30:34:
b5:c6:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:09 2025 by rpki-client