Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: HMCSw9MljdT7cQEVe6+Xa/p0AfQH7MGsIBXYt+WtNDI=
Subject key identifier: A1:4E:B2:4C:D8:1F:8E:71:AB:AF:54:46:42:3E:CE:DD:2F:F7:88:3F
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 01976C2ABD044239CA0DC51AB04F87B393C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 060C
Signing time: Sat 14 Jun 2025 02:00:29 +0000
Manifest this update: Sat 14 Jun 2025 02:00:29 +0000
Manifest next update: Sun 15 Jun 2025 02:00:29 +0000
Files and hashes: 1: 59hx8MiVy0L5bbCsrmz6L5yJrmQ.roa (hash: tUrCnGXwIpcsX6KWOsldh7ImOj30jilIGBTNNVRq1UU=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: ty78z+xk2vaDFu/CLU/338LOH0G5aK2CJcgZbsA0S5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:bd:04:42:39:ca:0d:c5:1a:b0:4f:87:b3:93:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Jun 14 02:00:29 2025 GMT
Not After : Jun 15 02:00:29 2025 GMT
Subject: CN=a14eb24cd81f8e71abaf5446423ecedd2ff7883f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:94:9f:e2:9e:2f:b5:f8:d5:e3:28:d3:5d:
23:32:19:e5:3d:29:2f:15:fb:2a:53:07:c8:13:d9:
fd:2d:fd:b3:69:f0:a3:07:f1:e5:b8:37:15:03:00:
a5:27:fc:d9:c0:ea:03:af:4c:fc:19:26:c0:c1:af:
17:48:9c:83:00:cb:e1:2c:b4:a9:57:ba:13:cd:66:
4e:14:5a:b2:5b:e3:21:44:e6:6c:d3:02:e9:e8:cb:
e2:d9:22:5a:48:56:f0:cd:34:79:6e:6a:28:56:b0:
1b:70:c7:c3:1c:6d:38:aa:dc:11:ba:3d:38:66:7c:
52:2f:63:cc:b2:ee:24:ea:42:92:35:73:0e:68:3b:
67:82:14:58:45:7a:ee:62:4e:fa:3d:1f:70:a4:51:
96:30:c9:64:16:97:32:b8:79:41:f4:30:61:28:f2:
74:e1:fb:a0:0a:fa:37:2f:14:e9:34:02:2b:1f:8d:
d1:66:f7:23:ad:12:c3:a5:b4:41:e4:fd:2f:bf:b0:
93:bf:52:9e:92:af:78:2b:a3:61:38:b2:cc:8a:f0:
28:67:37:05:a9:80:eb:86:04:83:2c:ea:0c:33:9f:
8c:cf:f7:0f:ac:d8:08:e8:10:e1:62:4d:9a:bc:a4:
fe:19:4c:b1:d5:c8:b7:0d:ca:04:e5:2a:3b:5e:e8:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4E:B2:4C:D8:1F:8E:71:AB:AF:54:46:42:3E:CE:DD:2F:F7:88:3F
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:89:2d:eb:12:e8:79:0d:a9:36:b9:1e:d9:f1:c4:fd:ec:07:
6a:19:04:5e:a6:47:e9:8b:12:30:32:69:df:d5:97:f5:20:0d:
e8:9a:9b:3c:7b:4f:4b:6e:7d:f5:00:87:51:b8:75:d3:0f:95:
33:b4:69:b4:2a:be:85:df:8d:b8:3b:65:cf:34:5f:7f:d3:08:
0c:01:59:b0:d2:73:6e:3a:fb:40:7d:02:43:e2:4e:88:a9:84:
9e:19:b1:87:08:a7:ec:93:dc:f3:b0:c0:b6:04:8a:bc:f9:2c:
de:e7:63:39:ac:46:00:c8:e2:cf:97:74:1a:7b:38:ed:21:20:
fb:1e:ba:eb:77:1e:f6:7c:fd:20:08:dd:4f:13:9d:30:72:1c:
ad:1b:e3:a8:19:64:b7:6c:25:ba:29:93:83:01:2b:92:3f:59:
ac:d5:e3:0a:a8:f0:d7:01:ae:8b:50:26:83:21:2f:6f:a8:6e:
aa:70:2b:a8:c2:0c:b6:3d:22:1f:7d:33:ad:2e:9b:33:cc:2d:
9a:16:03:34:9e:9d:e4:f5:01:91:5c:7c:5d:9a:06:d2:53:36:
33:2f:76:31:3a:04:c9:00:39:be:14:51:75:cc:76:ac:a9:0d:
45:b2:b9:4a:b7:3f:65:cf:2c:86:70:7a:41:f5:e8:67:c9:9f:
70:c1:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:46 2025 by rpki-client