Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
File: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft (raw, json)
Hash identifier: eKjrIOs39iyIqdEj508zt3lrNLitAuKRjOIjfa3tKY0=
Subject key identifier: 3D:3E:5F:88:53:EB:55:13:15:70:4D:D8:7F:4C:08:64:6E:8F:32:45
Authority key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
Certificate issuer: /CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Certificate serial: 0197B88F379D31FA9D0B09951A326BFD8A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
Manifest number: 0511
Signing time: Sat 28 Jun 2025 22:01:22 +0000
Manifest this update: Sat 28 Jun 2025 22:01:22 +0000
Manifest next update: Sun 29 Jun 2025 22:01:22 +0000
Files and hashes: 1: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl (hash: qQv/4/6q66eM3JUKuAHDiTnnwukqlqGkyokjbkArH6E=)
2: nK_HCXY32Fzl4tvEIKTBph2J1Ds.roa (hash: Q85T1yXG2eaPvyBQfWAsYo6WtcGYElCI5jZL6LC33r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:37:9d:31:fa:9d:0b:09:95:1a:32:6b:fd:8a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Validity
Not Before: Jun 28 22:01:22 2025 GMT
Not After : Jun 29 22:01:22 2025 GMT
Subject: CN=3d3e5f8853eb551315704dd87f4c08646e8f3245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:f3:0d:84:0f:4c:af:d5:6c:44:cf:2d:0c:
d7:71:ff:2e:3e:ba:31:de:97:37:9a:f0:3b:d4:9b:
58:3e:fa:8e:7f:30:e0:00:53:a9:9c:89:a6:85:ba:
90:47:8b:a7:90:14:72:32:eb:47:f7:45:42:d0:d5:
98:25:9d:d9:e1:40:07:6f:63:92:9d:c2:89:2b:7a:
0c:85:d2:68:92:cf:dd:ff:40:c6:57:47:61:54:22:
97:d0:a1:bc:46:b4:d1:2d:0b:34:87:1a:f6:ac:bd:
26:91:10:d7:d4:8e:71:54:0c:db:2a:bb:65:25:31:
c7:15:4e:58:67:7f:0f:83:16:b5:83:84:0c:19:e5:
48:9d:b7:e2:ac:e8:ac:3b:48:40:92:ea:29:2e:75:
fd:7b:98:b7:14:b3:e5:e8:4c:a5:c4:0f:59:a7:19:
0b:bf:22:37:32:e9:0e:4d:55:ba:71:a4:f7:4a:db:
5c:32:e8:68:39:ec:60:bc:a3:d6:ab:8d:a1:0b:b1:
fc:0a:b1:4b:84:d8:13:23:5b:a8:3c:a9:60:07:0c:
07:ed:c5:b8:07:06:96:02:5f:d8:3f:cf:0e:7d:d0:
03:66:d6:ef:a4:84:24:a5:c1:1d:9f:f2:a8:d1:c0:
8e:86:5f:35:6a:66:8a:74:28:15:b2:82:c2:61:6d:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3E:5F:88:53:EB:55:13:15:70:4D:D8:7F:4C:08:64:6E:8F:32:45
X509v3 Authority Key Identifier:
keyid:67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:71:08:cc:31:83:c7:49:0d:37:36:93:a7:ae:11:63:35:a8:
c1:63:9e:20:68:8a:76:9b:ce:48:94:b3:b8:2b:85:f8:31:77:
6b:c3:ad:ed:e9:1c:29:f4:b3:6c:42:a4:94:0d:d1:b1:52:70:
0f:04:90:a8:98:99:33:b8:f7:72:9c:dc:4d:0c:bc:47:f6:4b:
93:7d:de:7a:17:4b:bf:c5:18:10:65:c2:79:18:2a:bc:23:e5:
5f:1a:e9:b5:48:13:f7:e0:2c:d0:0a:b0:b3:6d:fe:29:b9:94:
fa:a5:35:81:3c:c0:83:cd:5f:54:23:f7:67:62:85:3d:3b:9d:
98:16:91:c5:0f:08:7f:d9:7f:41:91:07:c7:70:1e:d7:20:a3:
58:38:65:87:1e:a2:a8:68:7f:90:64:a1:fe:07:d0:08:b5:7b:
23:a4:d6:9b:3f:24:f0:1e:80:9c:15:94:67:78:c5:1c:f3:a6:
ca:14:08:27:d7:60:88:7e:d5:88:5c:00:80:7b:6c:9a:f1:7f:
cc:9c:f6:58:6a:3a:74:39:5c:3b:f8:1f:e9:7e:d7:4a:3e:90:
0d:3e:1a:f8:d6:73:d6:77:a0:e4:2b:28:0b:19:6e:a4:49:f1:
9c:1d:89:4d:ae:2a:9a:aa:07:84:68:12:70:67:02:93:16:09:
3f:08:7f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:35 2025 by rpki-client