Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json)
Hash identifier: +2crp31MmIkA2lnHyQz+bDoKrKt5Q9NOKdLRRLsvoUQ=
Subject key identifier: C2:DF:A8:FF:78:79:98:D2:95:0C:02:DD:02:E6:39:A4:C6:32:C8:93
Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Certificate serial: 0197B77CE57AD570D8E5981A91F118D2771F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
Manifest number: 02C3
Signing time: Sat 28 Jun 2025 17:01:45 +0000
Manifest this update: Sat 28 Jun 2025 17:01:45 +0000
Manifest next update: Sun 29 Jun 2025 17:01:45 +0000
Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: gU7l26PGin/B2a5Sik3nTpeMScfomET2xViuO3DlI1M=)
2: mVbUdqr9oEcPiZysELwHzge0y8g.roa (hash: Y+aQue+b7f/IHLBZfZa5SygpKDtfepbI9i9idjcQ+mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:e5:7a:d5:70:d8:e5:98:1a:91:f1:18:d2:77:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Validity
Not Before: Jun 28 17:01:45 2025 GMT
Not After : Jun 29 17:01:45 2025 GMT
Subject: CN=c2dfa8ff787998d2950c02dd02e639a4c632c893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:18:1a:50:9f:29:ed:90:3b:ed:3a:75:62:
a5:7c:d7:ca:99:53:8e:c0:73:96:c6:dd:81:42:bf:
b1:74:50:51:c8:bc:46:5c:d5:3c:15:28:68:4e:f3:
24:08:a5:8f:6b:d2:c8:f7:31:02:46:d8:97:e7:d1:
7c:c2:06:39:78:d6:66:20:23:d7:54:8b:b6:e3:f2:
cb:7b:d8:c0:40:89:86:5f:b5:2b:01:d2:80:32:98:
63:6a:a1:61:e1:3f:38:fc:df:a1:af:de:99:ca:4b:
dd:cd:f6:7a:8e:ea:4a:38:85:79:5c:0a:f4:32:bf:
0b:aa:60:7b:f2:08:88:e5:d1:73:aa:1f:93:2b:be:
63:97:f6:61:ab:7e:ea:96:e5:a3:7e:84:aa:48:9b:
cf:fe:5b:e9:16:0b:8c:3e:ff:53:b5:8c:a8:60:e7:
c9:76:28:6d:b6:14:6d:8d:55:54:a0:b3:1f:99:f1:
ca:ad:c6:d2:f9:92:55:6e:90:87:42:27:e3:c2:f9:
7c:11:28:06:ab:e7:ca:fb:46:a3:93:6a:89:59:f9:
01:77:43:7f:e7:e4:8e:d2:94:cb:a0:d0:d9:9f:62:
28:c3:ab:df:61:ea:5f:b1:c4:b5:e9:31:77:12:17:
2e:10:86:cb:57:fc:1c:c2:0e:76:b8:1d:14:17:25:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DF:A8:FF:78:79:98:D2:95:0C:02:DD:02:E6:39:A4:C6:32:C8:93
X509v3 Authority Key Identifier:
keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5e:1d:69:6b:c1:da:38:5e:44:18:27:8d:d0:d4:50:8f:fb:
62:29:f1:8a:fc:fd:58:80:fd:31:a5:7d:15:1e:6d:cd:64:a4:
2b:f8:37:80:4b:91:a7:a8:27:8e:5d:ff:37:e1:e3:12:6b:11:
19:20:47:09:9f:1f:b4:a0:8b:e4:1b:4e:42:13:fe:54:83:d0:
32:84:d7:b4:a0:5e:44:f0:40:b3:bf:52:05:ee:2f:34:1a:07:
71:e5:2c:04:21:c3:89:94:35:c7:6e:83:80:63:59:46:1a:51:
08:ff:f0:37:f5:23:38:06:1d:16:8b:35:21:8d:4b:6a:27:3d:
d8:7a:6b:d0:1e:88:04:72:3f:2e:c7:98:60:ea:c9:56:23:ee:
ce:b9:3e:99:84:6e:5e:2b:2c:de:1a:cd:83:ee:5d:24:39:e3:
9d:ef:dc:a9:80:82:ae:c0:73:42:e9:2d:9d:c2:ea:72:96:3c:
a0:4c:29:94:c1:d6:78:74:32:d6:00:50:bc:49:b6:fd:18:d6:
f3:ca:6f:95:e6:a8:d9:75:33:46:5d:e5:14:f8:3b:89:8d:28:
13:aa:9b:c3:6b:53:9d:5d:b9:14:3e:ff:ef:74:ec:62:8f:4a:
fb:e0:ab:cc:3e:54:90:2a:c9:e0:fc:d2:96:af:24:cd:15:4e:
d1:84:29:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:25 2025 by rpki-client