Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
File: Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json)
Hash identifier: lyGoMMivUuUYY4GpVPZoLksBQo0dJX/A3m5BUihOCvU=
Subject key identifier: C8:4D:0B:F7:44:3C:7B:FC:C9:42:23:38:86:43:5A:51:23:05:E0:38
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial: 0197B8902DD85D55E1C4B4A6B7DB4CC119FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 22:02:25 +0000
Manifest this update: Sat 28 Jun 2025 22:02:25 +0000
Manifest next update: Sun 29 Jun 2025 22:02:25 +0000
Files and hashes: 1: FKX6i6LzJGQciJp6Hlszc7Ka2XA.roa (hash: hGmrJi+yEKxJpja/Xd3IRoZdFVQbXeFaYaTLWxmyBv0=)
2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: 68iUJ2x3UMyf0+Z/+7JBiHET0txDrqmfpPWuGposodM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:2d:d8:5d:55:e1:c4:b4:a6:b7:db:4c:c1:19:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Validity
Not Before: Jun 28 22:02:25 2025 GMT
Not After : Jun 29 22:02:25 2025 GMT
Subject: CN=c84d0bf7443c7bfcc942233886435a512305e038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:e4:90:b4:70:d9:a2:fb:70:cf:50:73:05:
0a:01:a1:17:3b:d1:1f:5b:56:ac:55:73:05:66:30:
be:a5:93:2d:c9:29:66:42:89:72:c3:93:aa:89:2e:
9a:18:2b:47:67:2a:ad:9d:21:14:11:c4:07:0d:9d:
b1:03:d4:b8:62:75:4e:3b:d9:db:1e:ef:19:53:a2:
d0:52:f2:75:d7:c6:bf:71:09:dc:c8:d9:02:ae:32:
8f:0e:d2:02:53:44:cd:08:e9:78:d0:32:35:16:50:
a3:c8:a3:f3:bc:73:7e:13:80:b4:28:6e:30:9c:4e:
32:e6:6d:5f:33:bc:c0:5e:20:a3:89:42:28:a4:0e:
e7:5e:91:91:da:a7:71:ff:79:14:fe:6b:ce:78:e0:
60:1e:d0:e4:4c:fc:e9:6c:85:52:ba:72:8e:93:08:
d2:a7:73:20:ad:68:d7:97:c5:30:f7:da:c3:55:06:
01:b6:fa:b3:76:b1:3e:c9:dc:87:f6:61:a4:2a:1b:
b0:f3:fa:4a:52:f1:7d:c7:5e:69:7a:86:85:dd:2f:
0a:8f:38:14:bc:a5:7a:64:b0:49:6f:48:81:73:a2:
05:f6:1a:fe:3e:f8:0d:90:33:09:40:71:6e:c0:fb:
87:e3:5a:0a:b6:10:e1:45:0b:72:1f:ea:3b:c8:c1:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4D:0B:F7:44:3C:7B:FC:C9:42:23:38:86:43:5A:51:23:05:E0:38
X509v3 Authority Key Identifier:
keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:25:57:46:19:85:11:1f:b2:2c:7c:13:3e:c2:da:53:2b:cf:
66:74:c5:7e:81:42:5e:8b:c9:10:44:a7:79:b5:7e:10:87:85:
7c:d5:e9:1c:e6:dd:09:e9:63:ef:a4:48:53:d1:af:ee:6b:73:
6c:04:f0:f9:7d:5b:bb:54:65:2b:58:3c:d9:fd:47:61:3a:a2:
e4:29:bd:af:0f:6e:10:38:c1:39:93:97:74:68:b5:3c:d4:b3:
7c:db:24:b3:ae:e4:8a:a4:de:48:22:6c:bf:5b:ab:87:f9:25:
e1:17:62:dd:ca:2a:07:ff:13:c8:8e:f1:37:bc:3f:5a:c5:4d:
8d:1c:e2:ec:32:4c:35:7e:a5:cc:97:ff:55:73:16:af:0e:7d:
ed:dc:4c:0f:25:34:e1:79:06:a3:70:35:14:b4:52:ed:ae:c2:
4a:50:01:4c:72:47:72:42:4a:3d:e5:1c:d0:5b:b6:3e:f4:6f:
fd:92:db:57:4a:9e:ce:82:53:0c:4d:40:27:f1:74:e5:39:a6:
a0:ba:9e:72:bc:a3:ee:5d:c2:d2:1c:eb:3a:2a:7a:ed:47:c2:
01:2e:88:17:82:9b:83:9c:93:a4:81:22:6e:3d:c0:79:6c:4a:
a7:ac:92:7a:15:81:8e:28:59:90:dd:92:3c:dc:9c:c2:5a:50:
9c:01:b1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:10 2025 by rpki-client