Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File: Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier: 4GDKScW7Aio1NUE1Z8Y44SZ/tETv+Za/COnbJceGSPU=
Subject key identifier: 38:C9:52:56:48:8C:5C:AF:25:65:AF:A8:AB:F6:81:EC:6B:C1:D8:7D
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer: /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial: 0197B8C59CD06BDA8B46DB16BE4ED1CC0BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number: 06FF
Signing time: Sat 28 Jun 2025 23:00:47 +0000
Manifest this update: Sat 28 Jun 2025 23:00:47 +0000
Manifest next update: Sun 29 Jun 2025 23:00:47 +0000
Files and hashes: 1: 0v4Q3A_w9M1p1YcV4-7Pe389fdU.roa (hash: WhKTFW0tZdeh1NFz5izqlimm3sG/vP+EpF9M2Z10RmY=)
2: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: 3RONm21miYfbYzy2R3To19fTUTosvbvAJXgUyiv6C+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:9c:d0:6b:da:8b:46:db:16:be:4e:d1:cc:0b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
Validity
Not Before: Jun 28 23:00:47 2025 GMT
Not After : Jun 29 23:00:47 2025 GMT
Subject: CN=38c95256488c5caf2565afa8abf681ec6bc1d87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:9c:84:4b:2e:6d:43:ac:26:eb:5a:50:9c:
fa:98:05:b5:22:96:0e:d0:7d:9f:0f:de:9b:9d:b4:
62:f2:db:f9:1c:71:26:c4:3b:9c:16:ab:c6:43:ad:
79:66:5d:8a:15:f3:36:81:c1:16:5a:6c:18:20:0d:
62:85:d9:5d:b3:f7:7a:9c:62:5c:09:83:07:fc:8f:
7c:56:ab:f5:52:93:07:e9:05:2b:cc:04:56:6a:f3:
ce:89:fa:b9:39:93:d3:d3:96:6d:12:6a:89:b3:c6:
16:d1:f8:e8:51:e5:f7:8e:08:a6:b4:73:4a:10:ce:
af:9e:d0:06:6a:26:aa:af:3e:3a:8b:ba:3c:76:e2:
b3:ad:af:60:87:5d:9d:b2:cc:e2:09:b9:f8:26:ce:
4c:ec:77:ba:c0:ad:27:0a:d7:79:ca:4d:e7:82:28:
ac:e3:04:b9:6a:57:0e:04:c8:aa:6a:b8:7f:08:0c:
0b:8b:44:14:9a:e9:c3:98:2d:d5:a4:76:ca:82:88:
47:6d:e3:16:11:4c:b5:d6:cf:8e:bc:bc:92:fb:d5:
6f:32:b7:84:30:61:3a:0e:6a:61:c4:af:1b:53:89:
54:99:a7:b7:11:44:91:ae:ae:af:f4:46:0b:61:64:
0c:ae:c2:9c:80:3d:12:92:30:63:df:a8:6c:56:a3:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C9:52:56:48:8C:5C:AF:25:65:AF:A8:AB:F6:81:EC:6B:C1:D8:7D
X509v3 Authority Key Identifier:
keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b9:b3:f0:f7:ed:40:93:0a:22:37:98:b6:97:15:43:eb:f8:
a8:e1:ec:50:85:48:bc:11:90:fb:57:02:4b:f9:97:b2:0e:b3:
10:36:67:3b:b6:cb:70:d6:f9:37:df:fe:f3:7c:1e:d0:5d:79:
96:37:f9:28:8f:3a:24:bb:e3:4c:90:b4:3e:59:9c:c5:59:29:
1a:b1:b2:a8:2b:37:b4:cf:83:81:b7:8c:60:e7:8d:ee:de:fb:
99:e7:a1:f2:b3:6e:b0:34:4a:7a:0b:09:42:e7:72:08:62:b0:
b6:c0:74:a5:db:c2:7e:7e:56:9b:e2:92:2b:14:01:b4:ab:a6:
f5:cf:a8:50:61:63:05:8d:35:0b:8e:03:c0:9a:59:69:60:86:
ba:e6:df:5a:45:61:20:8b:cf:a4:67:e2:a1:04:e7:eb:34:25:
91:da:f6:e6:e4:18:3a:4b:d4:6f:66:e2:91:4a:b0:bf:8b:d7:
67:70:bb:f0:50:7b:2f:00:1a:2e:ca:5e:23:41:a5:59:c4:47:
57:5e:47:85:e9:15:f6:30:fc:10:51:bc:d9:0a:2a:b7:cb:ac:
59:a7:63:09:ca:d0:8d:1e:89:ea:c9:54:c5:b9:7b:c2:20:a3:
7c:56:e8:ed:e6:23:52:6a:3c:2e:92:d4:28:79:16:a4:5d:f2:
c6:bd:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:07:11 2025 by rpki-client