Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: OBx7xBozCEmlkf8XMF1Eykw/RQjnPmfojhZLeLEo3aA=
Subject key identifier: B9:2B:30:7A:21:74:50:83:03:20:34:F0:5A:D9:84:03:95:30:80:60
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 0197B6D782779AC1120445E789AD7668B0FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 0180
Signing time: Sat 28 Jun 2025 14:01:06 +0000
Manifest this update: Sat 28 Jun 2025 14:01:06 +0000
Manifest next update: Sun 29 Jun 2025 14:01:06 +0000
Files and hashes: 1: MGVqJJOFzu2un2swGTuXTTEGsNg.roa (hash: gTMkvTBOmf7oEcLgyb6M80tZ/0OamavqqMR1gZp8YYk=)
2: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: scmJXlFfoNDMqR6xn8KwS+JUAjvtrlIIbKy2a4+kBZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:82:77:9a:c1:12:04:45:e7:89:ad:76:68:b0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Jun 28 14:01:06 2025 GMT
Not After : Jun 29 14:01:06 2025 GMT
Subject: CN=b92b307a21745083032034f05ad9840395308060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:16:d6:62:8b:18:68:3e:b5:4f:41:66:59:
21:bf:bd:86:0b:23:39:fa:2b:70:62:58:ea:d0:c0:
1a:31:c4:3c:99:8d:e2:f4:cd:29:ee:09:30:e1:50:
07:49:17:42:a3:e0:fd:fa:ef:bd:6b:74:0d:e3:8b:
f4:85:4a:33:6f:d4:08:0f:27:96:82:27:90:f2:e5:
36:b0:1e:e2:96:f7:53:a9:c5:e7:89:80:98:31:ed:
1c:b9:d5:e5:fd:cf:bc:9d:bc:3f:af:53:2c:bc:cd:
80:59:11:be:d3:78:76:22:85:4f:88:9f:91:af:b9:
74:26:95:5d:a0:4f:6d:35:a4:6c:73:2b:af:5a:de:
43:a5:e4:e9:1f:9d:2e:b7:94:14:a3:b2:22:f2:20:
af:1d:85:3d:5b:3d:91:7b:13:98:69:9a:c1:75:4d:
bd:dd:46:e1:89:5e:a6:f3:8f:24:8e:75:ac:79:86:
c5:1b:b2:12:98:14:18:6b:0b:28:95:c4:86:f0:4b:
63:1a:99:64:2e:c8:49:d9:09:f5:2c:ac:79:76:1f:
50:57:e4:0c:74:17:fe:d1:28:ef:68:e8:d9:ad:6b:
4e:6b:76:3f:3e:f7:1e:93:71:47:36:29:81:df:a3:
4c:db:c9:f7:51:1d:47:fb:5f:1a:4d:76:5e:3e:da:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2B:30:7A:21:74:50:83:03:20:34:F0:5A:D9:84:03:95:30:80:60
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:15:40:3b:38:12:ff:0b:59:4b:9d:ba:2d:af:f5:82:33:7b:
37:a5:21:30:28:f2:7d:27:b3:c8:a5:f2:52:97:3a:99:90:a9:
47:04:f3:1f:09:9a:43:05:ab:0e:a0:33:f6:0b:fc:e2:4a:5a:
ea:f6:a9:fb:68:26:65:33:fe:3d:f7:02:65:45:1e:a0:5b:c8:
02:48:75:9e:2f:45:95:94:1e:86:c4:19:9d:e5:3c:a1:3f:4e:
a4:6f:ef:4c:38:34:d6:10:94:60:b9:1f:bf:2d:70:40:5d:b8:
9c:30:24:4d:d4:36:49:c2:32:e5:7a:c0:49:07:2e:bf:32:22:
83:ce:a9:66:85:27:5c:d2:af:2e:85:87:65:89:76:72:7c:40:
49:a0:56:46:cf:6c:c5:1f:88:a2:bc:2e:88:76:31:4c:1f:99:
81:8b:11:00:92:b0:79:05:9e:be:72:8b:94:4c:34:a0:15:d1:
ff:23:a7:64:64:1e:21:07:ae:ca:18:59:fb:4f:72:86:4b:b9:
1d:aa:5e:e7:1e:33:1d:12:6c:e7:ff:ab:67:be:da:a2:55:7a:
44:bd:7a:36:bd:f2:cc:25:d5:98:09:f2:85:55:d8:b6:02:cd:
d5:c5:94:6c:ac:a5:f8:88:33:cd:3d:1c:70:68:af:2e:70:16:
a2:7b:dc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:35 2025 by rpki-client