Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: 1v/gugnoCQHU7rMN+czRWIg3rAw7utrbTYMFZXNWSnw=
Subject key identifier: CD:F8:B0:FC:CA:38:1E:60:3A:52:60:96:70:A2:50:34:AD:16:A9:14
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 0197B9A18EB568350EC084A44257DE11865E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 0539
Signing time: Sun 29 Jun 2025 03:01:02 +0000
Manifest this update: Sun 29 Jun 2025 03:01:02 +0000
Manifest next update: Mon 30 Jun 2025 03:01:02 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: EP0R7yQI0rnFTev+5rujNMrvhqQwZLLVUWbRIzTTRvI=)
2: lkL5vhYsimFlGwIzKJdrtVwcZdU.roa (hash: 2H7/6waax/BGz3Tq1LVCIZcHdShd+I6qEgMYBcT4Hpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:8e:b5:68:35:0e:c0:84:a4:42:57:de:11:86:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Jun 29 03:01:02 2025 GMT
Not After : Jun 30 03:01:02 2025 GMT
Subject: CN=cdf8b0fcca381e603a52609670a25034ad16a914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:ab:14:1e:5a:3d:34:6d:94:04:82:71:e5:
a4:e1:04:6b:27:b4:c1:0b:03:30:5f:6b:27:c5:79:
de:17:8d:14:70:bf:bf:67:16:60:73:66:cb:e7:60:
aa:bd:0f:ed:19:89:47:a9:a4:fb:ec:2a:fd:0e:6f:
16:9d:7e:70:e6:97:13:25:58:eb:6a:92:d0:61:db:
f2:d3:ea:a1:58:77:14:f2:f7:92:67:71:92:8c:6e:
a6:96:1e:77:44:cf:39:a1:e0:38:ee:e2:54:b7:df:
6f:0b:48:59:99:7c:ef:59:33:01:fa:28:df:b3:fa:
ae:f6:a5:e2:50:16:2b:13:3b:74:64:a6:0c:1a:13:
a0:ac:78:c3:83:a4:9d:06:88:9f:fc:e4:37:68:29:
ef:0d:00:e1:b0:a9:21:6b:c0:46:e8:6e:00:b8:8f:
4e:1a:df:65:68:6d:00:f7:b4:27:84:d5:f0:a9:bb:
68:10:1d:dc:a2:ff:a2:17:99:77:af:4c:39:74:59:
f3:0a:3b:6a:dd:52:5c:be:8e:74:1d:19:f9:e4:d9:
ce:f0:4c:91:d4:74:59:81:09:33:d8:88:18:a8:71:
c0:16:a9:84:ec:16:5e:3c:c2:1f:86:f6:9f:3e:65:
d9:80:8d:67:f8:6e:af:a6:6e:36:cc:76:35:44:05:
68:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F8:B0:FC:CA:38:1E:60:3A:52:60:96:70:A2:50:34:AD:16:A9:14
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e9:1d:57:43:53:01:6a:d7:8e:69:f8:a0:30:22:82:34:22:
0b:93:df:d4:16:42:51:95:43:f7:22:ab:ee:c4:98:f1:61:95:
e3:05:7f:9e:eb:d6:fe:2a:37:b6:dd:46:8e:0f:ca:8a:c5:8d:
61:36:b6:47:cb:ee:74:59:c0:a6:cd:42:63:be:ec:64:9e:21:
46:c6:d5:d9:93:f8:34:69:77:16:38:da:90:62:84:b4:c0:a0:
6e:10:98:81:cf:5b:b8:97:1a:7a:7b:c2:b4:fd:3f:16:62:71:
dc:32:20:0f:cd:6b:9b:63:da:e7:e3:d5:84:c5:19:55:1c:2f:
ae:a0:db:75:92:e0:83:93:c0:0e:df:d7:7e:c3:40:dd:d5:06:
81:f5:52:78:0e:13:9f:0b:c0:ba:87:9f:3f:4b:f8:e1:69:d3:
59:6c:66:41:1d:c1:42:a2:92:8e:cb:82:2a:d5:d1:c1:19:dd:
62:b1:db:e0:1a:99:6b:5b:d4:cc:77:5e:7a:43:fd:2b:5e:16:
67:03:76:97:74:00:87:15:11:78:01:1d:2b:95:d0:a7:94:b2:
5f:cd:4a:85:26:30:ee:9f:3d:b3:18:9f:8a:61:df:bf:03:ee:
28:2f:1b:38:cf:db:9f:ff:ff:94:7a:14:46:17:f6:17:50:d0:
3d:33:89:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:51 2025 by rpki-client