Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json)
Hash identifier: c4nv9xm+KClrnT/DavV8rlYiMJDKclZmAdRAxep7xPI=
Subject key identifier: 6A:AF:78:F4:A7:ED:D0:FC:BF:4D:F5:AD:31:A6:0A:4A:76:7A:50:70
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial: 01988054548292D56BED8E71DE0BC67658F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
Manifest number: 11C1
Signing time: Wed 06 Aug 2025 17:01:06 +0000
Manifest this update: Wed 06 Aug 2025 17:01:06 +0000
Manifest next update: Thu 07 Aug 2025 17:01:06 +0000
Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: PQ5I8yYndtd/1+pyWoeFm6auVShyEkzl9+HUWQwLCpk=)
2: fWdcwSs6zepV4nyngmDbMNEhJgc.roa (hash: xKdKIOHrNEbxshe+Nt7u4EYPgDXnCkWil6RpBaiRPJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:54:82:92:d5:6b:ed:8e:71:de:0b:c6:76:58:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Validity
Not Before: Aug 6 17:01:06 2025 GMT
Not After : Aug 7 17:01:06 2025 GMT
Subject: CN=6aaf78f4a7edd0fcbf4df5ad31a60a4a767a5070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:d3:3f:5d:8d:ed:34:5c:3e:74:a1:b0:c3:
56:75:c7:36:45:83:f5:bd:8d:ac:d4:39:b0:9d:1f:
9b:03:a6:db:b3:62:b3:38:74:05:02:cb:07:ae:dd:
a6:77:e4:90:52:4f:c8:8e:20:a8:30:c7:72:52:af:
da:65:de:39:b8:12:c0:0f:c7:1e:7f:d1:20:1b:48:
99:38:cc:12:72:de:91:22:05:a6:94:64:5c:f0:e9:
b7:91:ec:01:76:09:05:38:6a:5e:c1:a4:49:01:df:
eb:84:2c:b9:7d:17:2a:17:d9:a2:78:70:33:2d:c6:
b6:a9:08:6c:3c:26:fc:77:b4:53:1a:00:2e:c9:63:
69:0a:c1:4d:ca:7d:5b:73:c2:17:34:7a:72:54:45:
5c:54:08:da:bb:2a:ea:53:cf:bc:95:b6:f0:ed:1e:
68:ac:07:36:5f:db:ed:63:31:e4:84:a7:a6:27:68:
18:e7:26:6d:5c:0d:e8:30:18:c1:fe:d3:14:7c:59:
5c:d2:a4:f9:3c:c3:3c:08:e6:10:bc:f9:d3:83:f5:
9a:21:5c:63:bb:6a:aa:a3:f2:88:d4:1f:89:53:07:
7d:2e:ed:bf:b7:ee:23:88:ae:6b:76:b5:1c:a9:2e:
30:58:c7:3b:52:62:83:80:82:a8:dd:5f:03:1f:7d:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AF:78:F4:A7:ED:D0:FC:BF:4D:F5:AD:31:A6:0A:4A:76:7A:50:70
X509v3 Authority Key Identifier:
keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ef:1c:c2:fb:2f:70:2f:b9:34:2d:9e:4a:4b:17:1f:6f:ed:
3a:f7:e7:b5:fb:0c:cb:ac:46:02:e3:ee:14:b5:91:87:ee:9f:
c2:eb:e3:54:7b:60:45:7a:ca:04:bf:22:b9:1e:aa:82:05:ce:
46:74:a1:d1:49:21:1f:c6:fa:0f:4c:5d:9f:fe:96:8e:0c:4a:
fe:a4:b7:84:ca:a0:07:df:25:c1:54:6c:64:6a:e3:9d:b2:46:
e6:33:c6:05:f0:97:64:25:2d:60:d3:49:aa:4e:42:a4:45:6a:
4b:ab:37:a2:44:8b:75:6a:bc:74:44:d9:ac:78:a3:c7:a0:04:
9a:c6:44:ec:2c:e1:c4:23:20:83:bd:99:f3:e8:f4:a5:8f:91:
c9:a1:66:b4:f9:4d:7f:4f:32:69:d5:cc:32:7d:a4:91:7a:92:
bd:a7:a3:35:f5:e3:45:e3:ce:a1:ed:fe:fa:fb:37:36:be:01:
cf:eb:d2:18:08:61:30:dd:9a:0c:5c:89:5d:e6:c9:91:09:b7:
7d:90:7e:22:69:ed:96:db:76:db:1d:7e:3f:ae:3d:8f:58:9e:
66:41:1e:a9:3f:0d:64:75:e7:41:24:b1:ea:09:4f:99:20:d6:
59:f9:f3:93:d5:b7:ab:67:a3:25:76:b5:8e:9c:c1:3a:1b:fb:
63:87:6f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:19:00 2025 by rpki-client