Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json)
Hash identifier: 1DZTR716a6jY2SFYPnEQlCzL9I4tTo5rtvwRfppSk4Y=
Subject key identifier: 6B:AB:9B:47:4B:3B:DC:6A:D9:6A:D9:07:10:83:D0:B8:42:86:71:1D
Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13
Certificate serial: 0197B820E681A2D841B20999A17E6408C0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
Manifest number: 13C5
Signing time: Sat 28 Jun 2025 20:00:53 +0000
Manifest this update: Sat 28 Jun 2025 20:00:53 +0000
Manifest next update: Sun 29 Jun 2025 20:00:53 +0000
Files and hashes: 1: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (hash: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=)
2: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: OyKfoRlf75hDVC2Mjy8lCrDnJ7ZcBk69K5K64EWAhX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e6:81:a2:d8:41:b2:09:99:a1:7e:64:08:c0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13
Validity
Not Before: Jun 28 20:00:53 2025 GMT
Not After : Jun 29 20:00:53 2025 GMT
Subject: CN=6bab9b474b3bdc6ad96ad9071083d0b84286711d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:f9:12:4f:9d:21:02:08:02:8f:f2:0c:2e:
cf:a9:f9:61:74:5b:b6:c7:bd:e1:e0:a7:ee:f3:76:
59:53:28:15:cc:26:5a:6a:00:15:26:06:52:bb:6c:
93:48:78:56:95:a1:08:43:ba:c1:f3:be:20:02:99:
c3:2f:f2:49:e8:6b:54:a8:01:24:00:b8:3c:4b:e9:
b3:3a:f3:26:f6:08:6d:8a:93:f8:8e:96:d7:2e:71:
04:be:16:c8:0f:47:ab:3b:89:f5:d6:06:95:b1:03:
77:05:1a:1e:77:4e:50:78:64:59:3f:d7:86:00:3a:
de:51:fe:4c:24:9e:d0:bc:04:c3:52:fd:f3:7d:59:
0c:9d:c1:67:32:31:cd:27:2e:77:f3:05:02:09:fd:
40:5f:4e:66:f5:08:ce:dd:b6:98:d5:be:c5:90:09:
a3:a1:7d:52:04:1d:5a:78:7b:cb:26:d8:b3:d7:64:
26:f1:2c:99:58:f1:17:64:7f:ba:47:9e:69:7d:38:
12:d9:99:1f:2f:9c:b6:57:ee:d6:8e:87:7b:00:d4:
b7:9c:88:08:07:d0:1e:e6:58:65:e9:55:e4:11:16:
92:a6:5a:f1:6a:f4:9c:ac:8d:72:c6:5d:00:a8:ff:
ca:0b:a6:49:3d:02:72:92:d2:ea:48:63:ae:99:0f:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AB:9B:47:4B:3B:DC:6A:D9:6A:D9:07:10:83:D0:B8:42:86:71:1D
X509v3 Authority Key Identifier:
keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7f:ea:1f:79:20:ed:d5:f2:93:c7:0c:78:93:c6:dd:50:82:
a1:72:a4:3f:6e:44:f4:a7:2a:77:64:c2:2a:f3:e5:1c:ab:72:
ad:03:50:ec:80:49:b0:98:d9:a7:20:f3:16:1c:d1:eb:5b:9d:
22:bd:10:b5:d8:8a:e4:b8:c7:d4:3f:b3:f7:6b:f3:80:bb:72:
e2:be:4b:b5:10:d9:ab:44:85:de:92:f8:60:2c:9c:6e:46:b6:
6c:d4:9a:62:4a:61:99:a1:d2:90:d4:88:b5:3d:b7:fe:e4:9e:
c1:97:4a:60:80:e2:17:5c:aa:85:63:18:c1:04:d0:90:73:7c:
0a:07:55:7a:71:06:a3:80:eb:01:58:5f:7d:75:8a:5b:30:1a:
4b:4f:57:d2:17:e6:e7:64:95:f4:6b:15:64:a8:a0:c3:1b:f8:
00:eb:92:22:5e:ab:fe:85:a8:ea:34:4f:02:3f:0e:23:23:5c:
2b:54:d4:02:ce:5f:b7:3f:eb:e3:f0:7b:f6:09:5d:b0:5a:dc:
ce:11:94:1a:0e:8c:22:df:9f:a4:6b:c9:65:af:29:73:48:55:
29:4a:fb:53:76:00:05:7f:5e:fa:6a:70:d0:82:57:a0:d5:06:
d3:92:ac:43:58:51:af:aa:b8:90:01:12:37:eb:f8:79:88:e7:
dc:b9:20:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:07:17 2025 by rpki-client