Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier: zf+EjOORj3HUc4qCYlSFWGJcFH7xYPqN6PVPJXAT0NY=
Subject key identifier: 8B:28:14:33:50:9E:D7:57:51:64:DE:74:05:39:13:21:BE:16:78:DE
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial: 019779B01C30FD63EBAB8F1F67CD9C583AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number: 1598
Signing time: Mon 16 Jun 2025 17:01:14 +0000
Manifest this update: Mon 16 Jun 2025 17:01:14 +0000
Manifest next update: Tue 17 Jun 2025 17:01:14 +0000
Files and hashes: 1: 1-6mnh_WrGshq4BGNMcahIgl1tdM.roa (hash: cq1xI/14AhL1drVD8g+gpqIgK6YTCibBOfeJtp72SrQ=)
2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: uZAvHi5YePWRnPMn0Wjagqwfo6xK4FjHE3Lmye/ZhXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:b0:1c:30:fd:63:eb:ab:8f:1f:67:cd:9c:58:3a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
Validity
Not Before: Jun 16 17:01:14 2025 GMT
Not After : Jun 17 17:01:14 2025 GMT
Subject: CN=8b281433509ed7575164de7405391321be1678de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:7c:5e:46:fa:2a:35:70:27:e2:bd:aa:a3:
6f:0e:45:61:d4:90:22:55:49:be:08:9a:e6:e7:c7:
4c:44:97:04:4a:7b:af:2e:eb:72:01:0d:d2:aa:77:
3f:03:92:0f:35:69:e0:0e:2e:8d:45:c0:ce:0f:69:
09:a2:39:fb:d7:88:31:90:3c:6d:49:e6:3d:17:33:
87:09:2d:56:fb:b5:89:6e:31:aa:4b:b4:d5:64:67:
b5:0c:3a:d0:5a:a4:ce:34:4e:45:73:fb:d0:7b:4e:
6a:0e:7b:b5:d2:6c:00:ab:33:cb:8c:ec:f7:0f:66:
8e:d3:c1:fc:b9:ce:9a:b7:33:f4:56:ba:c2:a9:51:
04:ad:63:ba:86:67:db:ba:df:58:bb:c1:f7:fa:74:
ec:e8:69:6a:a8:44:ab:9b:cc:9a:1f:1c:f0:46:06:
8b:d4:f1:c4:07:9d:84:d6:7c:1b:22:1d:fd:50:0c:
cb:08:49:80:16:ef:c3:84:c2:49:00:7d:25:2f:4f:
2f:ef:e8:b9:ab:9a:c3:86:23:d0:b7:6e:7c:ec:f0:
a7:f0:7d:fc:39:5e:4e:2c:c7:95:cf:45:ac:cb:7c:
1f:0b:4e:12:86:c2:2d:cc:d0:4f:35:8a:d5:53:b6:
e6:58:46:b5:6c:08:e0:f5:43:b2:f4:75:ed:40:8c:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:28:14:33:50:9E:D7:57:51:64:DE:74:05:39:13:21:BE:16:78:DE
X509v3 Authority Key Identifier:
keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f6:e9:a6:3a:cf:70:03:bb:e5:29:31:c3:02:6f:bc:c3:70:
dc:d6:35:85:c2:5a:ae:3d:e1:b5:64:96:40:5d:24:94:cf:35:
fb:62:04:a1:bf:36:ef:39:04:99:83:ea:7e:3e:50:2d:c2:2a:
23:89:37:ed:ed:89:31:47:34:0e:18:ab:ff:11:63:03:ac:33:
0f:54:66:c9:ee:fc:35:ba:92:e4:f8:a3:1d:c9:21:d8:76:02:
14:9d:31:71:94:3e:e3:8e:ad:3e:a8:88:98:dc:e8:28:f9:f6:
0d:33:3f:3f:5c:47:0c:7f:4f:db:fd:51:4d:41:15:83:22:a0:
4a:1e:47:ad:65:98:a4:fb:6e:ea:9d:f4:5b:12:af:76:7c:a2:
9c:19:7a:bd:cf:79:de:8b:7b:e1:50:eb:bf:3f:68:86:3d:29:
9d:73:a6:a3:1f:e9:c6:16:cd:03:a6:e9:27:c0:e6:95:6f:72:
06:ff:a5:bf:63:d5:a2:ce:46:26:af:18:af:8a:43:11:a6:aa:
07:ca:ee:82:e7:25:27:75:fd:ff:f6:95:b3:bf:3d:36:9c:36:
74:a0:1f:a6:5e:d6:11:87:d8:ef:53:95:a2:12:97:b3:cb:20:
0b:ae:9d:4f:c7:09:88:02:24:c3:1f:cd:97:94:0e:e0:51:32:
67:49:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:08:52 2025 by rpki-client