Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier: vF07wp9jhbzEmfV9mczjVWhmumzAaA/6l07XxVHXMsc=
Subject key identifier: B9:E2:DA:5D:12:7B:FA:A2:5A:2E:C4:02:05:30:2A:A3:E8:9A:4C:52
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial: 0197B77C886D1D95726E5179EF276713D7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number: 04B0
Signing time: Sat 28 Jun 2025 17:01:21 +0000
Manifest this update: Sat 28 Jun 2025 17:01:21 +0000
Manifest next update: Sun 29 Jun 2025 17:01:21 +0000
Files and hashes: 1: CzKe7bcDbHPl7S7VFX1GJ1fjZ-U.roa (hash: YjWNT62+NZ4QheBAVnVeuwY8eccUxnidCuMqn96YN2M=)
2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: VVv3G1v8aB9sJIZyyNiL5CWmY3beLVekxPohds8LAXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:88:6d:1d:95:72:6e:51:79:ef:27:67:13:d7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Validity
Not Before: Jun 28 17:01:21 2025 GMT
Not After : Jun 29 17:01:21 2025 GMT
Subject: CN=b9e2da5d127bfaa25a2ec40205302aa3e89a4c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:eb:16:f9:76:61:e2:2b:d0:0e:86:82:a6:
1e:d0:cb:3f:20:4c:56:ff:02:71:ab:d9:b1:82:7d:
f9:eb:7d:7b:a5:e7:87:c2:f3:ce:be:d5:08:86:d5:
26:97:d6:c9:dc:ad:81:70:08:c5:ef:8a:37:42:08:
4f:e4:db:53:11:c8:e3:bc:8f:4c:58:70:b5:38:b2:
3c:65:e4:51:72:df:6e:ae:8a:1e:ce:7e:4d:3e:2e:
11:05:db:b7:c9:b7:4c:5b:98:be:2c:a3:60:dc:4c:
7b:bd:66:ec:0e:4b:2a:a0:9e:cb:81:1e:a2:b4:30:
9a:65:bf:0a:7c:b7:83:bd:dd:f9:05:12:77:2e:f0:
47:24:68:bf:12:03:8f:24:76:ff:c0:61:0c:e4:4a:
a8:0f:c9:04:3d:ee:86:c9:f6:84:75:88:78:93:a8:
cf:b6:38:5d:a6:51:c9:d7:5f:2d:c2:87:70:82:ab:
0a:ca:0b:33:24:49:4a:1b:28:32:79:16:24:7c:33:
bb:ec:1e:0d:a5:12:96:b9:0d:84:97:06:7a:fb:e7:
e6:17:8c:42:b0:fc:af:2a:ea:6f:cd:14:86:58:e8:
b4:41:08:ed:d6:e2:34:a9:ee:c8:61:f4:2c:ad:24:
9f:62:ae:36:79:d1:3d:69:7c:13:11:20:05:83:45:
41:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E2:DA:5D:12:7B:FA:A2:5A:2E:C4:02:05:30:2A:A3:E8:9A:4C:52
X509v3 Authority Key Identifier:
keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:60:7a:c9:3b:91:92:72:51:3d:df:53:42:02:9d:87:18:26:
65:17:b9:ee:ce:a3:ca:4f:1c:73:8c:e8:dc:7d:a7:78:58:db:
b7:77:4e:5f:0b:2e:11:98:cb:a6:a7:7d:83:22:f3:58:68:89:
26:a1:81:c5:4b:b2:9d:e8:f5:e6:4a:df:10:68:3f:78:16:13:
e3:ef:e9:b2:01:9a:96:d2:f4:d7:a1:f0:24:69:88:66:bb:57:
45:d8:ed:81:7f:08:8b:70:2a:d8:5c:b8:1f:52:64:af:e8:5f:
2b:05:f1:e8:2e:ab:fe:96:63:15:c1:22:4b:02:ca:e7:72:58:
26:31:79:95:3c:09:f4:ec:17:49:a3:89:c3:70:91:6a:e8:96:
e0:c6:3a:5a:e3:c1:e4:b3:67:94:d7:43:78:9c:3c:d2:8e:80:
16:7c:dd:84:a6:20:b3:1a:ec:42:3b:e1:f0:14:99:f5:db:a3:
c1:b2:2d:69:30:af:88:3f:2b:d2:98:34:18:99:17:89:f1:2b:
7c:1b:5f:5a:a8:97:96:97:46:fe:ac:9f:83:c9:09:b0:19:d9:
b7:9d:89:76:3f:5d:38:0b:59:ce:83:ed:eb:95:f2:f4:17:a8:
ba:e0:2b:04:b4:b2:c5:03:4d:a4:92:6a:c6:50:cc:e6:3d:7e:
90:27:af:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:23 2025 by rpki-client