Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: 4CJeffbbBK0cZwO9sUf04Pn8ItVp61zt8oVItScLRqI=
Subject key identifier: DA:A9:EA:5B:90:DC:A6:F1:89:00:34:E6:D5:F1:14:49:2D:33:89:80
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 019771511A83590BAE492CABAFCC34D749F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 02:00:29 +0000
Manifest this update: Sun 15 Jun 2025 02:00:29 +0000
Manifest next update: Mon 16 Jun 2025 02:00:29 +0000
Files and hashes: 1: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: NYH65vPj2CIJRGt41OqqM+OLoRMS+EyIPXZgJfTDlLg=)
2: yg4sGgC5KBzP9wrpfNuvhuojK2M.roa (hash: e1y06aA1s62UqKwjDXe9gE31sK3hItmKrNoYCjTILV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:1a:83:59:0b:ae:49:2c:ab:af:cc:34:d7:49:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Jun 15 02:00:29 2025 GMT
Not After : Jun 16 02:00:29 2025 GMT
Subject: CN=daa9ea5b90dca6f1890034e6d5f114492d338980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:0d:7e:5b:d2:02:68:ad:60:8b:93:c1:9e:
45:fe:0e:af:45:6a:84:3b:0c:32:b8:71:70:36:ea:
71:ff:d7:ba:a5:1c:7a:22:8e:27:69:9a:86:38:76:
9f:bd:fc:15:47:6a:ad:63:34:01:63:0c:26:77:fd:
87:c3:b9:99:36:19:ce:4a:6c:91:07:af:7f:3c:0b:
f0:2c:18:3d:8f:87:79:88:48:94:ea:46:00:3f:be:
f8:ea:f7:1f:2d:72:f4:ea:8e:74:c6:2c:79:bf:1c:
22:48:9b:3c:53:2d:32:d7:e4:4d:8d:b5:43:c6:50:
4d:fe:ac:28:5b:3b:43:30:95:95:48:de:da:a4:08:
ce:91:e6:dc:37:3e:85:f3:c2:55:55:db:66:2e:00:
0c:82:32:89:fd:e4:93:8c:40:5d:7e:fc:08:b8:97:
51:a8:96:b0:0a:30:dd:bf:cf:06:73:2b:c4:3e:7f:
4e:e1:72:59:45:a2:08:7e:0c:90:dc:6a:90:d5:7e:
16:56:86:86:99:85:97:b8:e7:15:98:92:96:07:d6:
68:21:67:0d:32:46:1b:6b:1a:78:c9:27:4d:22:e9:
19:3e:69:09:79:f5:41:86:2c:b7:28:2c:11:68:a0:
44:db:a4:13:9b:7c:2e:3b:ac:26:c4:b2:09:c7:39:
03:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A9:EA:5B:90:DC:A6:F1:89:00:34:E6:D5:F1:14:49:2D:33:89:80
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:c9:96:f1:55:6c:da:00:cd:1d:ff:cd:28:61:3d:6e:00:88:
96:12:11:03:67:09:82:49:d0:bd:e5:02:b3:ec:b3:8e:62:86:
c8:1c:3b:57:9b:07:83:1f:d7:2b:12:65:9f:24:20:84:6c:32:
c5:82:60:cd:bc:48:15:5e:2d:74:6d:8d:7f:d6:ad:2b:1c:b8:
c7:6c:68:41:d2:5b:b0:58:ec:2e:e9:bb:63:53:e0:45:d1:34:
8c:a1:72:4d:58:a5:ae:8a:2c:c8:1b:32:0b:ec:34:06:d9:e4:
c0:91:b3:a3:7f:36:ce:8e:0d:27:59:d6:7c:af:b5:29:3b:e1:
2f:b1:18:c4:29:3b:e3:3e:27:7b:88:29:c9:89:79:5f:f2:d4:
c5:58:8c:83:a7:86:19:88:04:40:48:e4:31:6e:da:59:d6:0d:
6d:3a:57:26:85:4b:3b:6b:c1:0d:6d:9c:6c:e6:e2:09:56:cd:
ef:bd:41:2a:e7:39:3f:64:2c:cf:fb:4f:cf:ab:a4:21:20:8a:
60:55:9b:a5:52:c3:35:9f:41:00:a0:e3:e4:75:13:cf:da:0e:
d6:5d:a3:c2:9c:b3:16:ff:f3:61:88:9f:96:65:57:0b:2b:16:
16:82:2b:12:93:f8:01:fb:d7:0f:b4:90:e5:aa:6d:75:4a:b4:
b5:ed:0e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:36 2025 by rpki-client