Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: iLfXipXlULTG8oqvUUGUoLZqtFZGLbo1OfL1ywMrGns=
Subject key identifier: 84:4C:35:29:DD:22:BC:7E:7A:2D:CD:56:7B:77:CF:79:3F:67:45:C2
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 01988DD90EA69330976A2DFA740D8804C7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 06A2
Signing time: Sat 09 Aug 2025 08:01:09 +0000
Manifest this update: Sat 09 Aug 2025 08:01:09 +0000
Manifest next update: Sun 10 Aug 2025 08:01:09 +0000
Files and hashes: 1: 59hx8MiVy0L5bbCsrmz6L5yJrmQ.roa (hash: tUrCnGXwIpcsX6KWOsldh7ImOj30jilIGBTNNVRq1UU=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: NdwFgkWkk9SUhJcCYGJrCUNMtzvMAG/aw+8xE87wxpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:0e:a6:93:30:97:6a:2d:fa:74:0d:88:04:c7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Aug 9 08:01:09 2025 GMT
Not After : Aug 10 08:01:09 2025 GMT
Subject: CN=844c3529dd22bc7e7a2dcd567b77cf793f6745c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:21:83:06:8e:08:bd:2f:08:df:74:89:38:
26:8c:b2:4f:e8:c1:2d:99:4a:ce:52:75:74:8f:47:
31:29:ff:7c:c6:81:5c:f3:36:be:1a:f7:f6:71:f8:
0c:b7:b7:bf:d9:19:c1:eb:98:0f:05:9c:eb:77:83:
dd:d0:eb:28:7d:29:3d:13:42:24:8e:6d:10:6d:09:
ee:42:e9:5e:2b:a6:57:a3:07:c6:b1:b3:71:09:79:
60:b2:a9:67:09:85:50:66:17:47:67:87:bf:b3:45:
e2:c7:9b:9d:eb:70:6f:16:a0:68:fe:32:12:2a:7c:
27:13:e1:3f:0a:7a:21:76:ec:1d:0b:0b:2a:a0:be:
5c:0f:6f:86:33:db:21:20:5e:81:3c:fc:0c:a8:e2:
12:f7:64:92:c3:25:8b:54:68:b1:54:cf:a5:ec:bb:
0c:7d:bd:5b:c6:00:1f:72:a8:b5:0a:e1:fa:95:af:
bf:68:c1:34:48:11:7a:6a:cb:a8:63:2a:58:b0:af:
95:e1:82:a3:e6:32:3e:20:27:a0:f9:4a:a4:57:b1:
89:f5:85:dc:eb:d3:a5:61:8d:c8:62:3a:08:b6:f1:
f7:65:1c:81:e8:fe:20:d2:9c:02:17:42:da:3f:bf:
fe:d4:d3:f9:56:6b:f8:95:ef:5f:1a:62:42:14:2e:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4C:35:29:DD:22:BC:7E:7A:2D:CD:56:7B:77:CF:79:3F:67:45:C2
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d2:ea:b6:06:51:f0:8c:85:62:90:ad:a7:ae:d3:cf:ae:ec:
f2:03:b6:91:7d:b8:3c:5d:6c:cf:c0:fb:74:64:a8:ed:f0:c4:
1f:fe:ea:6f:fa:5e:e1:96:f9:98:84:7c:ef:db:64:92:79:be:
07:16:04:e0:a2:f2:f1:a8:89:34:0d:af:5c:6f:fa:18:7f:59:
75:f0:5f:c4:c2:84:34:5f:bf:ea:39:d2:2d:6a:e4:e1:10:67:
69:90:fc:96:a0:8a:55:59:d0:c1:1d:63:02:70:7f:45:08:ba:
a8:45:bd:82:a7:18:1b:08:47:89:a8:a0:e3:3b:a0:bb:6e:5b:
5b:92:d1:57:2d:71:5c:39:a3:76:72:e2:4b:81:b5:c7:2b:80:
13:bd:34:cb:89:3a:8d:b8:31:9d:f5:2f:df:82:39:c4:f1:38:
f8:3d:38:86:4f:ae:ae:d3:e2:73:22:0c:70:67:d1:8b:55:ba:
b3:f6:37:4d:d8:ca:7d:4b:b9:9e:20:7a:c7:60:1c:4b:1b:2e:
74:d4:db:bd:e2:fe:a3:fc:bb:64:b0:b2:56:0e:0b:1d:9b:f8:
6f:76:af:4e:ae:32:9a:47:9c:10:4f:17:52:95:8b:e6:bd:ef:
7d:8d:55:fa:8d:21:1e:bc:b0:45:52:3a:2f:2d:8b:a4:fb:ee:
15:30:19:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:41:31 2025 by rpki-client