Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: u8qySCpCpBwJju+N5A6lBiLOUd68pgip1Qg2HlqA4oM=
Subject key identifier: 90:D0:BE:23:85:13:BB:14:8F:1C:51:63:0A:0C:9E:41:9A:D0:B6:17
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 01976F99E72DEDCDFC2D96AA7928A053498C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: EF
Signing time: Sat 14 Jun 2025 18:00:46 +0000
Manifest this update: Sat 14 Jun 2025 18:00:46 +0000
Manifest next update: Sun 15 Jun 2025 18:00:46 +0000
Files and hashes: 1: 3AM1kiBUlkIMgJlgAVSsRhHcsVE.roa (hash: JRZBzZPP/Qgtum5bkbDwOE4ahKynlQtqROTLxUhU7PU=)
2: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: ESGB2iv0dMXcr94WuLrcmohwIewPttkOLNVUcHmGUEs=)
3: bXG0GOoD81HOxWPjM9UhIty_ee0.roa (hash: mmMBtet64hPrKMhcTVqesrRFLaGci6KJ3hFnS33cvrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:e7:2d:ed:cd:fc:2d:96:aa:79:28:a0:53:49:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Jun 14 18:00:46 2025 GMT
Not After : Jun 15 18:00:46 2025 GMT
Subject: CN=90d0be238513bb148f1c51630a0c9e419ad0b617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:a7:f8:78:8c:ce:91:60:cc:23:72:2d:54:
bf:b7:2d:cf:e5:20:70:25:ca:68:f8:2f:28:3d:35:
92:74:a9:e9:a6:6c:a0:ab:41:dd:e4:8e:3d:e6:76:
30:14:03:2a:3c:47:3d:f0:76:f9:67:c6:03:d2:6e:
6b:cd:e6:4b:bf:55:0b:34:80:0a:da:59:36:3b:5c:
b0:e5:7d:34:a5:48:5b:67:51:9d:ab:dc:31:9e:e9:
c9:3a:77:8a:83:ff:86:c0:ea:e4:49:f1:8d:bb:af:
5b:d9:d6:ee:84:8a:59:f2:0c:2a:42:ee:22:c4:07:
2c:dd:19:13:f8:d7:3e:bd:0a:cb:aa:1a:c5:f4:85:
bd:0c:e2:0c:fb:33:db:6d:a0:9d:0e:9d:4a:c9:a5:
44:87:7a:f0:05:7b:ba:ac:d7:ad:a9:13:23:38:9a:
51:f9:b6:41:7e:df:5b:37:5b:2e:a3:c1:f9:5d:54:
39:cc:f7:aa:86:ae:14:ed:c8:b0:b3:9b:db:fe:27:
99:2d:2d:a5:89:bc:93:76:23:53:36:d7:c4:1a:3d:
ca:50:2a:cc:9e:9f:cc:c9:f9:d9:c0:fc:a1:0e:95:
94:17:c3:be:af:38:e1:c6:31:39:b5:7c:6b:c5:a2:
d8:89:ae:66:88:bb:a7:b5:c7:ba:0b:22:66:98:c5:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D0:BE:23:85:13:BB:14:8F:1C:51:63:0A:0C:9E:41:9A:D0:B6:17
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:77:af:be:e9:88:3a:60:35:5e:bb:85:80:b8:4e:25:df:fa:
e2:6c:23:fa:12:fa:21:4f:0b:ef:0b:e2:54:dd:f6:92:4b:d7:
ea:ff:a1:c6:06:ac:e6:9f:d1:62:5c:80:fc:69:f0:66:da:66:
3c:e1:6a:f7:3a:52:b8:a2:e5:01:8e:c1:7a:1e:8d:20:2e:a6:
88:c8:91:e5:40:1b:4a:44:80:71:bd:5a:96:fb:5f:31:47:c8:
d2:23:9c:19:35:7f:f2:42:0d:63:c2:80:6b:df:89:86:7e:de:
8e:d6:81:01:73:97:47:5d:86:05:44:60:0f:a5:9c:d3:30:54:
78:bd:3c:d1:12:6d:d5:8d:8c:a7:aa:b7:a2:23:bd:d0:35:40:
9b:af:d9:13:b5:50:42:74:aa:bf:74:1e:a3:29:3c:ee:8e:72:
09:d3:01:f4:e4:22:54:7c:f0:e8:b5:76:ab:86:ae:ed:74:31:
31:1d:4e:d9:64:1a:cd:d5:b4:e0:3d:e3:1a:90:9e:2e:23:8c:
15:07:ca:5b:55:3c:7b:b2:0a:bb:ef:34:a0:21:62:32:50:d5:
ba:4d:d1:26:ed:ad:41:d4:34:e1:8a:33:fb:d6:e0:8d:3a:a1:
f1:89:e8:72:54:dd:f1:11:b2:96:a7:72:9c:66:41:46:43:07:
19:f2:05:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:03:20 2025 by rpki-client