Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json)
Hash identifier: 7Ze4l1ewGLDqEg5LdsCYFdK44YN57ubQGNI+Kmf4ais=
Subject key identifier: 4E:AB:29:44:8D:8C:CE:84:FF:0A:37:25:4E:FD:E6:3F:58:69:19:8B
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial: 01976D06EDECB1B5EFE0286D9EEAC23DF8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
Manifest number: 144F
Signing time: Sat 14 Jun 2025 06:00:59 +0000
Manifest this update: Sat 14 Jun 2025 06:00:59 +0000
Manifest next update: Sun 15 Jun 2025 06:00:59 +0000
Files and hashes: 1: AuI1_5gu81vs3cIDXIzNbaWND-I.roa (hash: lsSEgLcY/ack618oc/9NRlphXCxEIj/Wq+gUEc772OI=)
2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: 5ti6aQc5YB8ud5JIF/zaQgOAgQxoxUXiMVN+o1wEsS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:ed:ec:b1:b5:ef:e0:28:6d:9e:ea:c2:3d:f8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Validity
Not Before: Jun 14 06:00:59 2025 GMT
Not After : Jun 15 06:00:59 2025 GMT
Subject: CN=4eab29448d8cce84ff0a37254efde63f5869198b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:95:64:a0:47:1b:05:da:46:ba:04:30:c3:
bf:ab:ed:ef:cc:8b:43:cc:95:03:c3:ed:ea:74:66:
46:38:f1:b7:fd:9c:d2:8a:b6:a8:2b:2b:60:b0:56:
12:ab:bd:db:c5:9f:4c:4e:8c:6e:3a:84:71:83:a5:
9b:33:1c:1b:07:65:59:0c:9d:9d:61:1e:f2:47:31:
6e:bd:3f:b8:11:95:f8:c6:01:d2:7d:8b:4d:d7:b8:
a0:fe:bd:b7:20:dd:e5:f1:7e:f3:fc:60:09:f6:74:
1b:c8:61:d2:08:d4:0f:42:01:7a:28:71:3a:07:fd:
56:eb:f6:82:15:ee:53:3a:9e:a5:14:5a:0d:91:ef:
01:41:f8:39:94:0a:46:8c:01:a7:ae:db:84:a7:6b:
e2:d2:9c:4f:b5:35:a2:ed:4a:d8:cc:6b:5b:4d:50:
05:1b:54:0c:89:eb:cb:32:55:25:26:38:48:3b:59:
a3:c2:95:ab:c0:21:53:30:e9:37:6f:93:72:2c:60:
c4:75:5e:e5:f1:49:ff:bc:62:fa:41:9d:8e:d6:f7:
9d:b7:2d:0a:d1:f3:41:e9:1f:06:27:7f:55:2f:20:
e6:ef:02:c3:a3:0d:2a:b1:cf:e3:17:02:bc:51:2a:
93:28:c1:21:8b:2b:d5:e3:ad:7d:58:f1:26:5c:9b:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AB:29:44:8D:8C:CE:84:FF:0A:37:25:4E:FD:E6:3F:58:69:19:8B
X509v3 Authority Key Identifier:
keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3f:f2:49:ff:1c:5f:a6:04:74:8c:0a:43:40:43:36:f0:91:
5a:08:34:75:65:a0:e4:22:5f:f4:23:b8:d9:2a:6c:17:5c:81:
c1:19:72:85:86:26:ed:f7:b0:0f:4f:33:24:07:9e:92:bb:66:
45:57:f0:0c:29:0a:c0:b5:4e:cb:41:c6:94:f5:2b:8a:f5:fe:
88:5a:45:44:2a:c8:b0:cd:ce:d4:1b:7c:e5:01:f2:de:c2:f5:
35:38:c5:0b:bd:1a:87:3d:b2:60:be:91:87:fa:db:42:af:2b:
9e:9f:ff:0c:7f:d8:1e:8c:ae:6b:79:f7:1f:fd:eb:ba:4a:68:
92:56:2d:57:f3:41:0c:01:a1:3b:7f:45:ec:34:08:d6:36:02:
e6:0e:12:ca:b4:66:3e:aa:bb:fb:69:1d:1c:2a:64:0b:c4:2d:
5f:ab:70:f3:93:c6:82:4a:e8:8c:be:6d:0f:8e:13:cf:d9:7c:
f9:0e:75:e8:ee:fd:1a:b7:21:85:5b:5b:54:72:9b:04:46:fc:
12:58:f5:59:43:34:41:65:9a:6d:0f:8c:c2:4d:87:59:e7:3f:
1d:58:de:e7:8c:97:7d:5b:22:76:a4:da:8e:d2:19:46:82:81:
46:16:4b:52:d3:8a:a2:46:68:1d:7d:e2:c9:17:10:c9:69:7e:
91:58:02:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:01:41 2025 by rpki-client