Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: YLKJRB/tOyyLpFyh9CtWGMAjX1MhJiFmCBcYSSKZ2EQ=
Subject key identifier: 18:A1:0C:C7:CF:5E:22:33:FF:6B:46:9F:40:F2:71:64:DC:63:DA:60
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 0197B70EA9D5B44DFC29A6200B9D366B45F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (hash: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=)
2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: CSTbWEyYsuqJ3O/lg6u1KDhyZxMnxeAxUxdp4vVN6hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a9:d5:b4:4d:fc:29:a6:20:0b:9d:36:6b:45:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=18a10cc7cf5e2233ff6b469f40f27164dc63da60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:a0:8f:fc:79:b5:09:21:9d:f3:99:db:4c:
34:33:b1:8e:eb:40:2c:ee:73:02:4a:e3:a0:df:36:
16:ee:76:f2:e2:7b:df:53:1b:dc:10:02:00:34:a2:
e1:7d:01:1d:af:e2:30:ad:c1:bb:e4:59:6f:65:e7:
b1:76:7a:3a:d0:85:a8:f3:13:0c:63:65:f2:a9:f6:
d3:2f:de:75:53:0a:c6:ca:d7:4f:c9:58:15:fe:f4:
c0:b5:42:5c:23:95:18:fa:06:3f:a3:82:4d:aa:21:
c5:2e:3c:d1:fe:2a:ad:00:ca:61:5b:ec:c1:94:70:
dc:e4:eb:4a:b6:64:0f:ef:86:11:b6:66:69:1b:d5:
ec:a2:a2:6a:85:bc:10:12:c9:f1:03:dd:28:71:28:
f8:af:40:e2:ee:a5:44:33:d2:bc:90:71:45:ab:12:
fd:7d:e2:b9:48:df:dd:2f:20:94:0c:3c:d4:95:6a:
d9:1e:09:db:29:1c:4d:e3:ec:cb:a9:df:46:9e:6c:
76:49:7f:5b:59:25:ca:49:9e:86:ed:8d:31:53:d9:
88:39:5c:d4:a5:d3:9e:6b:f6:34:c1:a1:ab:50:e0:
72:77:4a:1c:87:93:6c:63:c7:6f:2e:22:fb:bd:cd:
55:7d:7a:67:4d:15:99:00:4d:6b:58:18:c9:14:b8:
32:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A1:0C:C7:CF:5E:22:33:FF:6B:46:9F:40:F2:71:64:DC:63:DA:60
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ec:5e:f2:eb:62:9c:02:a0:7d:d5:0c:53:5d:d4:d1:f4:73:
da:ae:36:df:7d:2a:64:d7:9c:d2:47:4a:e7:9c:e2:0b:e7:e0:
3e:7f:8e:dd:e4:14:e5:52:50:20:fa:2d:83:78:81:72:84:7b:
e4:1e:b1:94:ab:6a:86:c1:ef:50:57:3e:26:5b:29:d9:36:47:
18:0f:c8:fe:50:0e:9b:75:a2:81:95:4d:43:39:cb:8e:79:1e:
7b:b7:ee:fe:eb:35:81:3d:90:62:d3:c5:81:c4:ef:87:bd:00:
5a:ef:b3:aa:70:ff:d5:95:74:55:f3:a2:16:4a:0b:99:2d:90:
6b:95:1c:d7:d2:66:09:27:ae:43:83:90:2b:06:fe:ae:c8:0c:
d0:a7:b4:0c:69:5c:c0:23:5e:32:e8:fc:d7:a3:c3:af:98:c0:
87:00:01:3e:0d:d7:d5:d7:52:78:12:58:12:a8:5a:4d:63:11:
7c:eb:32:38:d9:6b:8d:f4:18:b7:62:1e:ea:0d:c6:9e:fb:d5:
7f:31:c7:c0:40:c5:3f:99:34:7a:10:a5:c2:0a:c5:cb:bb:87:
2b:98:86:4f:0a:05:ac:cc:e3:70:48:25:56:71:37:e2:20:26:
71:41:02:24:0e:12:fd:25:d1:73:28:4f:b7:15:99:5c:71:11:
52:19:4e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:14 2025 by rpki-client