Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier: +BZ9UJ7sICh0ev2U/7AKcsh6hXh79oigwRMyMmsetcQ=
Subject key identifier: 8F:3B:C1:F2:FD:95:E5:99:11:5D:D1:F0:82:6D:50:5D:4F:14:E3:F8
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 0197B74595366A16A79BDAC814CED373F6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 16:01:20 +0000
Manifest this update: Sat 28 Jun 2025 16:01:20 +0000
Manifest next update: Sun 29 Jun 2025 16:01:20 +0000
Files and hashes: 1: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: uMmSOpeTddULaJFQMi4YZvAGpvbPf/NML0hn296ouWI=)
2: Z_jY3GWRnD6yHDyYL47ZMC9cQoU.roa (hash: WEDbZfz2xY2QG+1hs64UqV8JMCBq7ofZo+b0N35NykY=)
3: xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa (hash: lrgPvLXOCgVkDldPssS2AHRsC1SEtuYHBOG2NxYMrqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:95:36:6a:16:a7:9b:da:c8:14:ce:d3:73:f6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Jun 28 16:01:20 2025 GMT
Not After : Jun 29 16:01:20 2025 GMT
Subject: CN=8f3bc1f2fd95e599115dd1f0826d505d4f14e3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:eb:55:2d:8b:42:cb:e6:28:a0:5b:a9:77:9e:
e1:03:99:c1:10:45:e1:91:60:43:96:f4:7d:cf:91:
2f:b1:a3:13:9c:da:11:e6:08:a3:92:17:4f:aa:89:
d6:b5:66:e7:79:a7:61:3e:ce:15:81:aa:b7:09:40:
00:f9:40:fe:c1:c5:a6:76:cf:95:cd:20:e0:d2:6e:
d7:64:d1:c2:0c:0b:13:6d:bb:ad:21:18:e8:4b:ef:
94:d0:8a:8d:cf:3b:ba:31:3b:a1:c1:73:92:4d:86:
9b:25:75:d6:80:54:fb:11:83:73:c7:ce:d5:e7:89:
8b:4b:12:2d:19:7f:69:60:e7:e0:14:5f:91:9a:ec:
7e:41:8c:b0:b6:61:a9:09:a2:aa:ea:29:54:ef:c3:
dd:02:4a:eb:f9:44:41:9a:5d:9d:e2:50:09:75:44:
bc:86:0d:5e:ca:6e:c2:d8:9f:94:32:e9:ed:30:30:
0e:91:b4:a1:2d:39:70:17:21:9c:03:71:f4:67:43:
a6:66:b7:2c:09:87:2b:47:ac:41:cd:0b:70:41:93:
ba:3b:87:5b:6e:56:69:44:a1:c5:8e:34:6d:f6:a6:
dd:16:f9:10:06:0f:07:cc:18:7f:fa:07:22:fe:3c:
d4:6e:37:82:f6:35:76:2d:3d:67:ad:9e:8f:05:95:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3B:C1:F2:FD:95:E5:99:11:5D:D1:F0:82:6D:50:5D:4F:14:E3:F8
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:56:8f:6e:be:49:40:9e:f2:66:5b:9c:b6:6d:d0:9b:7d:d1:
0f:97:c0:17:77:9d:f7:bb:54:12:08:25:8e:62:24:19:74:47:
d2:96:89:dd:bd:e7:f7:04:dd:f9:30:aa:78:39:e7:7d:e6:f4:
f0:cb:70:21:71:a6:21:f2:56:a6:cd:b2:37:ad:03:66:be:18:
2e:23:79:7e:b9:24:8d:36:22:9a:4b:64:48:9c:3f:70:0a:91:
2a:84:2c:32:44:4e:46:8d:9b:0b:fb:94:21:c0:14:2b:5b:bf:
95:63:6a:d8:ce:b5:f7:6a:6a:08:db:f9:13:e0:ec:41:c6:ff:
e1:94:8b:53:08:b9:9d:a4:70:c0:8e:48:a6:b4:f8:58:c6:08:
aa:c8:7d:f5:ad:a0:cf:b5:44:cd:61:13:cf:ea:53:12:85:d6:
32:94:1a:38:d9:a4:9b:e0:11:0a:87:3c:36:06:49:1c:ac:55:
62:79:87:e4:62:ff:42:e8:4b:48:97:9d:10:22:c5:30:e5:ec:
83:9e:74:0f:3a:61:2d:a4:96:41:a0:eb:4b:7f:c3:38:50:67:
76:92:a1:88:62:b0:5e:32:c9:10:18:2f:06:1a:0c:34:fd:86:
64:20:b4:8d:25:ad:78:1a:40:7a:a6:7b:10:24:ad:3b:bf:55:
de:9d:03:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:12 2025 by rpki-client