Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: yAVrfchzvIII6b4cXXkQr+NI9Pad6i7NP8yvsTOIxTA=
Subject key identifier: 49:5A:14:64:07:D6:41:FC:FA:15:4F:59:58:2E:99:49:51:77:54:0A
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 0197B88F7D355E2F52CB7C56A5483BC2B86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 1307
Signing time: Sat 28 Jun 2025 22:01:40 +0000
Manifest this update: Sat 28 Jun 2025 22:01:40 +0000
Manifest next update: Sun 29 Jun 2025 22:01:40 +0000
Files and hashes: 1: B8jfK0t3MW9G5Eyome7g6mcF2h8.roa (hash: XZoaAhHYzmiTEDCu8boCYE9STqMqeaTtF4k8PkA4OmI=)
2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: +ApkIE4anPw7+bnonBs8C7UxzKFLP1epkk24p71c6lI=)
3: oJ3u5HFBLrPnYIQUuDcUffWGRls.roa (hash: TptDcDy6fR/vh2oAnF8zAlj4ilPKnhA2fKGZE60wq70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:7d:35:5e:2f:52:cb:7c:56:a5:48:3b:c2:b8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Jun 28 22:01:40 2025 GMT
Not After : Jun 29 22:01:40 2025 GMT
Subject: CN=495a146407d641fcfa154f59582e99495177540a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:ce:32:bd:cc:42:3a:ed:16:68:b9:b6:51:
f2:a3:00:6b:24:57:f4:24:70:32:81:d4:56:56:1d:
d5:98:b3:66:f5:5c:c9:45:5d:f5:44:43:3b:9d:fd:
c6:27:5e:f3:86:26:17:ae:47:33:2c:ec:ac:86:9e:
71:77:74:ab:0c:c5:6b:38:ee:5f:d1:61:c5:e8:7c:
ba:8e:0a:d9:7f:9f:14:36:29:a4:66:29:e9:ba:cf:
52:69:a1:a7:ff:15:11:6b:de:15:1a:c2:b7:d9:11:
bd:e0:cf:2d:2e:b3:4f:e3:2f:02:eb:3a:77:9b:d3:
c7:a2:7c:8f:53:a8:1c:7c:63:01:29:0c:21:6b:fc:
06:ee:9f:20:49:87:90:3a:77:98:34:ba:d5:b0:12:
bf:39:0a:f2:95:aa:b4:fe:73:ef:c8:75:07:9f:22:
c2:ac:e2:91:8e:fb:29:61:df:85:06:f9:e3:6f:d1:
ec:63:5f:8f:4d:6e:74:aa:59:af:d1:8f:ab:4f:93:
d9:3d:50:f8:75:7f:ec:6a:20:af:db:47:a9:f8:1d:
44:3c:29:2b:df:36:f8:bf:29:3b:cf:5e:c1:60:3d:
89:f4:2e:71:fd:8c:87:e4:39:8d:fa:97:9d:0c:79:
3c:0e:d6:50:93:17:fa:e8:80:29:e8:3c:65:ab:40:
30:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5A:14:64:07:D6:41:FC:FA:15:4F:59:58:2E:99:49:51:77:54:0A
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2d:58:4e:0d:9a:a5:34:b3:ed:96:9b:b3:e8:ce:bc:e2:e1:
fc:5b:36:d7:b2:52:a3:f3:73:f4:62:01:f3:3e:cb:43:9c:d8:
9b:a0:05:7e:21:05:eb:e6:af:0f:fa:6c:d4:2d:c3:ca:c6:a7:
d9:a6:ba:1b:09:ef:0e:f1:6f:eb:96:d0:bc:1c:5e:6f:d0:d8:
ed:7c:81:2e:a4:7f:c0:b9:61:8f:b6:39:28:0a:f3:a4:09:14:
d6:5c:f9:76:21:df:73:59:90:13:fe:49:86:1d:ae:e0:06:cb:
dd:c4:83:2d:c6:17:6f:ea:4e:e5:eb:f7:b6:20:90:96:7e:fc:
3a:0a:b4:03:e1:28:4f:3f:28:56:e0:66:93:f3:e9:51:2c:66:
37:ce:03:72:2d:68:ec:bb:46:6e:a2:8b:15:5b:50:82:72:3e:
2c:dd:2c:e8:7a:ff:a2:0d:26:4c:f7:f6:2e:9b:b9:d1:86:d1:
47:ce:86:81:f8:84:79:d8:74:59:ae:76:fb:c1:67:5b:0b:a1:
dc:e4:e6:dc:f2:57:58:60:27:55:5a:58:e0:e8:a0:db:7f:00:
42:e5:79:07:25:74:2a:c4:9a:e1:c8:a7:f5:95:1b:ac:91:a6:
56:e5:7d:3a:73:49:56:2b:78:86:c1:a2:d0:69:79:01:bb:24:
cb:b6:92:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:29:19 2025 by rpki-client