Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: 9vGyT2eBYAXk76Jaqk8TgtzhdMfvDfpn87+l1Wd0Pv0=
Subject key identifier: 7B:7A:CE:75:26:69:07:BD:24:7C:B0:A8:3F:31:8A:33:CE:50:7E:9B
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 0197B934216C738F0D8D7B90C72A7C696AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 10A8
Signing time: Sun 29 Jun 2025 01:01:30 +0000
Manifest this update: Sun 29 Jun 2025 01:01:30 +0000
Manifest next update: Mon 30 Jun 2025 01:01:30 +0000
Files and hashes: 1: MPC24ig7GybvQGJQS-GC0wxWNWk.roa (hash: qOm3yyWDXF7wdNeDgGEdzc6Ua0rCER7AIaOxZKXE29E=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: FWfH9XibAWhFnRWTD8dydNTtRmWd14NnD+OrDRtpPFc=)
3: hsXOS728ssx8bAD81ls-MhEMYHY.roa (hash: WicCvVpq6yjNVb8B4LAK2/Mh2on49kT2FPzZdWAqLP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:21:6c:73:8f:0d:8d:7b:90:c7:2a:7c:69:6a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Jun 29 01:01:30 2025 GMT
Not After : Jun 30 01:01:30 2025 GMT
Subject: CN=7b7ace75266907bd247cb0a83f318a33ce507e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:1a:51:06:50:b0:69:c8:95:70:47:67:ee:
18:d9:b5:44:41:23:5a:ed:bd:04:1e:4a:ac:e6:ac:
52:eb:d7:c8:62:c9:31:27:3b:71:4c:ef:ed:76:f5:
59:c9:4e:86:24:af:5a:2f:fe:17:ea:41:ae:3b:c1:
e6:9b:c7:37:52:b5:80:a3:a7:99:d7:6e:94:82:11:
24:07:7f:df:45:a1:cb:38:b3:f5:22:86:6d:fc:21:
47:9b:93:85:00:7e:bc:2d:6b:6d:6a:65:7a:42:29:
93:50:80:53:ba:0c:d8:6a:3c:7e:5b:08:4d:12:f9:
76:9b:df:36:69:54:64:68:2e:6f:46:74:fe:f3:16:
f2:52:d3:0c:97:45:3f:92:b1:12:8f:64:67:92:33:
da:78:d8:72:c2:e6:b7:b6:a8:66:51:ed:80:0c:9b:
f0:6a:62:46:0b:c7:92:c7:62:2c:e7:15:23:a7:0e:
ba:35:7f:d9:58:79:14:b8:19:c9:b5:7c:1b:4b:fa:
85:68:6a:d6:d4:41:d4:13:51:5b:52:c6:d4:38:11:
a6:70:e4:d9:89:db:a4:e7:4e:45:66:b1:c7:18:8a:
46:ce:70:7f:38:09:10:c1:3d:53:92:3d:04:7f:bb:
5c:39:69:07:a7:69:92:0a:48:1b:00:42:c3:bf:eb:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7A:CE:75:26:69:07:BD:24:7C:B0:A8:3F:31:8A:33:CE:50:7E:9B
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:91:74:0e:1c:c1:37:63:ae:22:3f:d1:2d:06:43:59:10:45:
9c:79:e6:44:f6:4d:03:eb:1c:07:75:fc:53:be:af:ce:cf:01:
7e:11:c4:76:6b:8f:88:8a:b6:5c:c0:c8:15:8e:48:48:36:c0:
2c:a1:b8:a2:e8:a3:a8:b5:ed:76:9f:b8:30:87:60:c7:02:c2:
18:4f:e1:18:77:c5:e7:3b:44:2d:5f:4b:39:26:d1:d4:a0:94:
6b:f1:23:14:75:13:81:cd:c1:ef:92:78:20:0f:3f:d9:fc:bd:
d1:92:80:83:39:82:13:35:15:80:3c:97:0b:63:29:dd:93:ce:
3d:9e:de:b8:1b:5e:e4:63:4e:2a:a2:0f:38:83:4f:68:10:cf:
27:de:75:f2:0a:01:46:77:66:a5:f6:08:49:51:84:75:6b:d4:
09:63:8f:5d:12:6a:37:93:07:c8:c3:66:7c:34:ce:ed:99:9a:
c6:42:a4:0b:cb:ea:05:af:73:38:c4:eb:c8:d2:97:39:32:26:
95:46:c5:96:70:21:20:9c:d7:b6:83:18:f1:ec:9d:3e:54:be:
f2:9c:f8:b1:82:d4:e3:e4:a2:6a:ea:9d:07:75:76:7d:ab:cd:
71:75:47:a8:e4:28:45:d8:67:6e:04:9a:80:63:c7:b7:89:c7:
e1:e9:e8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:27:29 2025 by rpki-client