Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: hlte/60AKN+Dz6udZqIfrS7sFlZM3w3Tz0xt9pmbXL8=
Subject key identifier: 3F:5D:48:7E:7C:7A:A3:FE:72:99:31:3C:10:D7:1A:E5:BD:D5:4E:2B
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 0196C2A6C1713DBD236FBD88CE178715246B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 09F8
Signing time: Mon 12 May 2025 04:00:30 +0000
Manifest this update: Mon 12 May 2025 04:00:30 +0000
Manifest next update: Tue 13 May 2025 04:00:30 +0000
Files and hashes: 1: JKNWbouQzoruFwki9fjiu02Ceds.roa (hash: HUJbBXvos0tzAFbMulw/ZH+VVZ/kGp1mQGDZrKa1ES8=)
2: JYmQcVf6BfsYcKxJFKZsXd4f2To.roa (hash: tjmsYQgdvBrGDDiyWAJWajhEM88kj9HYgypYyxWTvaY=)
3: Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa (hash: 9wirUz6B2msilvWvCiwp1E+Ixnrs+bWT4H+o8cEiH+s=)
4: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: Trx7bwI1MetS1NOcsHW2B8HAUd3/qtBHkE09ASVTPoQ=)
5: jKB4bF7QEatig6EKVxlScEN1XC8.roa (hash: YIo6qCbdc07X+f+Ko5OWjfr4p+cI6VEVEj/ToimWQxE=)
6: mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa (hash: GNJXQDfp8FJLl+m4dx8Ma4QwUS4Qqykcf0B6fU00US8=)
7: mw0de6Xv2RzpyGlyY7DWmNuIerM.roa (hash: Ee21P5NIqEuyWMvaOtz32QEEMsKPLFLuA6raTwNAO68=)
8: oNBMbwaOMIQ3gc1brZ79tHvusAk.roa (hash: ysE/JGbhhCWnTVWZQIC1rfv8V4VscJDcwpcwjlUthoY=)
9: w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa (hash: Ut75AQ5RZ+LcXsHl6cibiMpZD/BBFo2+WgUIizJ+v2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:c1:71:3d:bd:23:6f:bd:88:ce:17:87:15:24:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: May 12 04:00:30 2025 GMT
Not After : May 13 04:00:30 2025 GMT
Subject: CN=3f5d487e7c7aa3fe7299313c10d71ae5bdd54e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:2a:ac:50:5e:91:a4:55:09:cf:d7:84:6b:
13:b7:91:2f:2d:dd:2a:85:5a:b5:83:62:d2:b9:fe:
cb:5b:51:66:65:98:c0:6f:73:5b:60:57:e4:11:27:
fa:9e:57:dd:2a:f3:58:ff:18:25:27:07:7c:ad:65:
67:0a:a8:5d:ec:cc:9e:16:59:df:fb:03:8f:82:55:
a0:39:6f:23:c3:2f:d8:57:b1:4a:dd:3c:39:bb:72:
0a:c2:5b:d2:3a:3a:23:d6:06:cb:38:a5:50:47:d2:
7e:94:5e:d8:5a:69:e5:9a:fa:0e:41:a4:33:1b:1b:
90:a0:8d:2c:0d:66:16:5f:83:99:3f:17:63:1f:62:
b2:90:97:e6:30:d3:c5:f6:7c:c0:d2:82:28:30:4a:
19:dc:8d:bb:76:65:a0:9a:c1:e7:3f:42:d8:c1:71:
53:53:29:a2:ef:ad:ea:b2:ca:b2:2e:f0:6a:48:0f:
ac:74:ff:bf:16:67:fb:4e:3b:eb:da:bf:d5:03:6e:
1c:2a:75:37:4b:63:34:46:71:49:37:79:d1:ae:a5:
d3:57:0b:e1:03:32:73:c3:ad:57:a1:76:7d:b9:08:
34:99:aa:02:86:99:6c:2c:d7:34:ae:2b:74:bc:1e:
79:40:8f:e6:1e:f5:04:9a:41:85:3c:78:e9:88:9d:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5D:48:7E:7C:7A:A3:FE:72:99:31:3C:10:D7:1A:E5:BD:D5:4E:2B
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:44:55:d1:09:a0:e5:df:5a:81:92:15:62:4b:e8:a6:92:e5:
93:32:4f:d3:d1:e3:fb:4a:5a:a2:f3:b5:f7:e1:53:43:cf:e9:
3d:36:0c:be:1a:32:6c:3e:3a:d7:15:4a:a4:65:0d:9d:3a:bc:
fe:08:56:94:c8:bf:28:b5:8e:c0:3a:d2:e0:46:94:f1:04:b6:
35:93:3b:37:95:b9:2b:b0:35:9e:dd:be:9f:38:a3:89:42:65:
55:8e:0f:9c:db:a2:18:5f:fc:5b:55:aa:8d:81:10:91:94:11:
bf:b1:f1:04:99:7b:e5:f7:91:32:ab:82:1d:3d:f5:2b:83:ba:
8c:f1:0c:3a:15:0b:b2:41:54:ca:cd:f7:35:a2:0b:0e:79:74:
4d:6f:f2:e2:c8:f7:ef:2b:c9:58:89:3f:cc:42:6b:9e:09:ea:
78:48:83:b8:14:a8:30:bc:2d:75:7b:9b:10:f8:ec:cd:c4:e0:
3e:d6:c5:48:74:4f:cb:87:77:4e:16:58:9e:0c:52:c3:37:6d:
e3:a5:74:61:1f:3a:81:4a:16:18:a0:93:22:03:8b:c6:25:e2:
74:6d:a8:4f:85:b4:83:3d:c1:0c:af:76:91:45:2f:20:ed:0c:
fc:69:20:16:d6:fb:2d:19:a1:32:1a:31:67:36:5a:6e:77:7e:
65:90:57:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:48:55 2025 by rpki-client