Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json)
Hash identifier: Rc+XXj8H4RBHI7DjwDsNgbDHF78fltNJJKzNLDzBS3A=
Subject key identifier: 3A:1A:07:8D:B9:24:A0:F0:27:1E:5C:8F:E7:65:00:8B:B6:01:10:AE
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial: 0197684E3E2AA2A91DA642C1392CED291442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
Manifest number: 1130
Signing time: Fri 13 Jun 2025 08:00:47 +0000
Manifest this update: Fri 13 Jun 2025 08:00:47 +0000
Manifest next update: Sat 14 Jun 2025 08:00:47 +0000
Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: YOWW7raUO8yp87jpvlnpXXUd/wAPK02/ZBS063o+HEc=)
2: fWdcwSs6zepV4nyngmDbMNEhJgc.roa (hash: xKdKIOHrNEbxshe+Nt7u4EYPgDXnCkWil6RpBaiRPJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:3e:2a:a2:a9:1d:a6:42:c1:39:2c:ed:29:14:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Validity
Not Before: Jun 13 08:00:47 2025 GMT
Not After : Jun 14 08:00:47 2025 GMT
Subject: CN=3a1a078db924a0f0271e5c8fe765008bb60110ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b8:c6:0a:2e:85:e8:4c:ea:45:d2:d7:48:99:
bf:ef:0b:8b:47:40:0a:29:6f:7b:ee:6c:9b:dc:7d:
ea:57:c1:47:86:69:82:b4:da:a5:8f:bc:17:13:39:
08:5f:0d:4b:1b:44:92:54:b4:37:e8:09:25:78:75:
4a:d7:2d:94:12:0a:97:3d:04:8a:14:d3:0e:b5:c7:
1b:f0:13:23:f0:ff:30:6e:14:cc:63:67:d0:33:ea:
da:58:64:b2:7b:a0:47:ac:11:8a:6d:24:e3:b6:0d:
78:e9:07:4f:d3:14:76:14:44:c4:5e:3e:74:ea:c3:
34:4c:91:59:68:b2:e7:4c:73:06:91:2f:ec:6a:89:
d1:28:d4:99:df:63:6f:d7:39:3e:86:b0:f2:ba:bc:
db:aa:55:47:3c:14:17:77:49:c1:6a:90:d4:5f:36:
80:75:00:0d:fc:64:ca:c3:6b:33:b1:1f:70:67:64:
ad:3d:ca:e1:8d:81:ee:11:46:e5:04:fb:6f:7a:86:
61:e6:f7:45:0d:94:8c:72:94:99:85:86:ed:a6:99:
e9:43:1c:88:7c:12:10:d0:b2:ae:73:87:3c:7d:30:
ba:5e:e4:ff:73:65:e4:cc:63:8e:74:6a:f8:13:e4:
23:04:91:5e:75:8d:df:c8:cb:e8:dd:4a:2d:10:56:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1A:07:8D:B9:24:A0:F0:27:1E:5C:8F:E7:65:00:8B:B6:01:10:AE
X509v3 Authority Key Identifier:
keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:07:73:19:01:6b:08:56:ff:23:c4:ad:b1:4b:07:a5:29:8f:
da:2c:68:0a:b6:70:27:b0:1a:48:12:cb:a6:47:a5:d6:90:f6:
55:4f:4b:89:25:64:ec:2a:9d:5d:f6:4c:02:0c:5f:36:d4:dd:
dd:17:53:3a:45:f0:18:01:12:c7:42:19:67:e8:57:09:b8:fb:
33:56:39:19:52:2e:55:63:28:e2:af:a4:55:ac:fb:62:b3:37:
2b:8a:72:b1:78:fb:97:38:59:54:bb:69:04:e6:f2:c3:a6:03:
be:4c:c1:e0:5b:9b:1d:cd:5d:32:a4:ef:9b:ba:d5:5e:24:96:
7c:21:2f:f4:c6:fa:fb:cb:92:96:3a:84:f8:a7:d6:47:20:92:
d3:fc:fe:50:38:a0:67:96:58:20:57:16:41:4e:24:1b:59:5a:
7f:ab:b6:51:ab:a2:59:56:7d:9c:15:47:0b:9a:bf:a4:48:8d:
7d:52:f4:70:2e:26:12:28:30:88:c5:d2:0b:3f:be:c1:80:c6:
07:3d:25:2a:3f:db:e9:21:9b:d2:41:db:12:d8:27:0b:75:d8:
14:e6:a9:49:95:92:c3:4c:d6:0f:27:d9:9d:89:29:50:20:ef:
15:a7:f5:07:f3:8e:4d:b3:4a:27:45:ce:c1:f6:5f:01:ab:ad:
23:74:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:57 2025 by rpki-client