Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File: Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier: hclUCzyP2jL804jetm+3IN3UdvIFvAZPXJU/NLuv4ak=
Subject key identifier: 02:48:8D:BD:00:FB:7D:34:AD:A9:E2:47:92:41:FC:F0:C8:65:7F:6D
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial: 0197B96AC64A70BEB30F2C4E9BD8EE201CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number: 0BCB
Signing time: Sun 29 Jun 2025 02:01:11 +0000
Manifest this update: Sun 29 Jun 2025 02:01:11 +0000
Manifest next update: Mon 30 Jun 2025 02:01:11 +0000
Files and hashes: 1: IyubcYm7YNGoTHG6Zyl3Cm2IkRw.roa (hash: 4lmGSbybL+9qT7cvm7erjsIQir7v2NPime1p2riEn1k=)
2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: Qk5ORTgu5JzI4GwGsP9JqNrmXwPfBa5sX+X/LtbqGHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:c6:4a:70:be:b3:0f:2c:4e:9b:d8:ee:20:1c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Validity
Not Before: Jun 29 02:01:11 2025 GMT
Not After : Jun 30 02:01:11 2025 GMT
Subject: CN=02488dbd00fb7d34ada9e2479241fcf0c8657f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:55:07:c6:f5:d4:92:10:36:e6:ca:7a:26:
8e:55:8f:a4:95:2b:47:8f:ce:a0:23:7d:b2:2d:06:
da:c1:05:dc:af:a4:40:17:da:6e:a9:df:51:a6:c7:
63:8b:3e:01:9a:c5:af:36:f4:f1:1e:88:51:a4:07:
c4:79:47:d5:a1:f4:8c:28:a0:d6:08:8d:54:90:a8:
f7:9d:75:66:b7:4e:61:b6:ba:49:a0:0b:4b:bc:ff:
6a:bc:4f:88:65:22:7d:97:92:2f:d3:de:70:41:2a:
2a:27:61:05:bf:4b:bf:2b:1d:a5:ab:91:26:e2:a9:
e2:03:19:bc:6e:88:73:a0:45:71:fd:76:d9:76:3f:
95:b5:ee:62:3c:65:2e:43:c0:2e:b5:ee:77:0d:0a:
80:9c:af:0c:f2:bc:8a:84:ef:e8:08:03:91:53:b5:
86:a6:df:5c:37:d5:12:00:33:0b:67:d1:fc:e6:8a:
63:62:f0:4f:03:49:f2:8b:0c:bf:e0:76:a7:1d:0f:
77:3f:9c:3f:1d:99:bd:3d:2d:cf:3e:fe:9f:5c:6e:
9b:3f:d6:67:1d:57:68:e8:c7:c9:07:f9:ba:d9:45:
22:c5:ca:61:6a:5c:b4:8f:81:77:e7:17:b3:f9:02:
4b:51:c2:e1:49:50:5b:f5:05:d1:d5:1e:a1:6a:f7:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:48:8D:BD:00:FB:7D:34:AD:A9:E2:47:92:41:FC:F0:C8:65:7F:6D
X509v3 Authority Key Identifier:
keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f9:59:1b:f7:d5:c5:f6:84:b9:18:c1:2c:3a:be:6f:b9:73:
8c:4e:ed:30:89:f4:68:73:86:d4:1a:1a:7a:e1:34:b4:91:e3:
9a:d7:c1:ac:f1:53:3a:73:f3:58:e6:d0:1e:07:07:a1:4e:ca:
c1:63:10:28:f1:5b:2e:2f:25:9d:c9:36:6e:e0:e2:f4:41:ac:
66:10:c4:79:b3:8a:a6:34:ab:52:1f:8b:5e:69:a5:58:cc:56:
14:02:a4:5a:89:9c:88:b5:5c:ef:df:05:64:b8:76:a2:99:bc:
20:4c:04:33:9a:1c:fe:cc:b8:c7:fc:9e:a7:61:2c:82:60:d2:
dd:c6:50:1b:69:40:be:c1:5c:6f:1b:aa:f4:65:fb:bd:3e:0b:
6d:53:e0:e4:88:1d:db:3f:08:36:8a:8b:21:00:23:f3:9d:c1:
83:f8:a5:f4:13:e5:e6:f4:22:43:f1:f8:d3:67:ef:89:ec:f8:
18:c1:33:af:29:96:68:09:54:73:fb:26:7d:9d:59:8d:be:89:
9d:75:c5:75:c4:36:1e:18:97:2d:dd:79:2a:a4:e8:07:6b:d4:
67:67:ae:db:98:32:95:fa:8f:48:87:d1:0d:a9:54:94:1c:4c:
6a:2c:ff:de:f2:c0:91:b7:89:7e:1d:f7:6d:90:88:d9:ea:a5:
2a:da:fd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:29:13 2025 by rpki-client