Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier: aDgFjN3j6RqS5kvTU0JvMWLQNLzQ29Z6uWzIxraLYoM=
Subject key identifier: 65:39:B5:63:12:32:29:15:D2:A7:35:C8:B9:EB:6F:EA:B0:B6:2A:AB
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer: /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial: 01976B85D59F971FE0B17E9692FE56E84FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 23:00:22 +0000
Manifest this update: Fri 13 Jun 2025 23:00:22 +0000
Manifest next update: Sat 14 Jun 2025 23:00:22 +0000
Files and hashes: 1: CHPWlUWLkhhN8KqcQvdgSIi7nSQ.roa (hash: oTR4o/Lu/P2pP/jqKMJRfshRV5ap+zULnMucNhK6ij0=)
2: D4kPuzxI99LO9za1uzpIOKYzyZk.roa (hash: c+Ehw1XN1UBVbiuLbeIY9bu5RDnn9bT1POuqZJ3ek+g=)
3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: +yDuMTC/6EXShedVMcPJq0Ce5hB8v0ad5Wvni4KfsHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:85:d5:9f:97:1f:e0:b1:7e:96:92:fe:56:e8:4f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Validity
Not Before: Jun 13 23:00:22 2025 GMT
Not After : Jun 14 23:00:22 2025 GMT
Subject: CN=6539b56312322915d2a735c8b9eb6feab0b62aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:b7:99:49:36:55:03:db:4a:b4:b8:48:e3:
6e:f7:f0:d2:6e:0c:b6:18:f5:fa:f5:9c:1a:7f:ed:
c5:69:d1:1f:59:bf:09:e9:28:bc:16:bc:56:25:fc:
5f:c5:c7:e5:a4:d3:4e:52:74:0b:86:c6:41:b7:02:
ba:f0:52:a8:3c:81:22:74:b6:7c:d6:08:e7:52:1f:
cf:a7:53:e5:ca:83:1c:20:67:e4:b9:7f:d4:89:f2:
87:16:ea:33:b8:54:b0:36:05:3b:7b:19:68:9c:f9:
23:15:8d:95:07:6e:74:7b:74:8a:c1:bd:09:8e:6a:
70:31:ac:84:63:db:e3:2a:94:16:a9:cd:cb:e0:c6:
3a:1d:f2:9a:9c:3b:60:fc:75:8e:62:79:9b:6c:e0:
09:13:66:14:2d:87:8b:a4:03:f4:9f:67:08:2c:cf:
85:2b:0c:38:d2:e3:ac:31:a0:21:21:be:26:58:20:
d7:45:ac:f1:64:ea:9a:76:77:64:0e:37:3d:31:e7:
30:06:8c:d8:4a:97:9c:ac:8d:0c:b4:71:d0:b6:0c:
cf:e5:ce:51:f5:2b:66:3d:8e:7a:72:64:73:8b:ef:
ab:1b:a2:d6:c3:03:a0:b1:69:1a:4b:65:b5:44:28:
bc:b3:a8:71:19:35:20:f0:1d:3f:3d:98:35:2c:ad:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:39:B5:63:12:32:29:15:D2:A7:35:C8:B9:EB:6F:EA:B0:B6:2A:AB
X509v3 Authority Key Identifier:
keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:28:99:1e:9d:fe:34:d2:3c:ea:20:8c:7c:ec:d5:82:41:1d:
a0:4b:2e:e1:ae:94:38:78:95:ee:1c:6d:fc:53:fe:b6:c1:29:
e0:fa:29:02:eb:70:71:44:84:43:8a:89:ce:a3:91:ce:57:07:
98:4c:3c:e6:a2:9f:db:eb:73:27:92:c2:73:92:58:63:f2:fb:
d6:83:fd:3f:66:76:9e:65:f8:e7:7b:c0:6f:73:05:35:8d:6b:
31:ca:cf:c2:75:da:8b:f1:e6:ff:f0:07:a0:de:be:27:4c:6d:
ad:8a:f2:14:e9:c6:e2:e5:16:a2:50:bb:4c:56:8d:05:a2:c5:
1c:f5:44:38:75:ce:e5:3e:53:02:a7:a2:27:7e:4a:42:5c:e7:
14:e1:71:10:49:1f:f3:45:74:43:9e:8f:c4:47:74:ad:a6:10:
59:b1:92:7e:e6:ad:4b:bc:b2:93:18:c9:55:d1:b9:cb:6f:c9:
4f:79:42:9e:eb:ee:88:e1:04:88:40:08:c6:8b:b1:94:1c:54:
03:5f:c7:ce:11:55:93:67:bb:66:a1:53:f0:64:87:76:3e:7c:
4b:16:0c:55:e7:73:2a:86:61:45:0d:33:88:22:a3:0b:f4:89:
8c:db:7c:68:72:57:85:08:b4:75:32:d1:88:30:2a:34:0e:d1:
a3:d8:5f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:43 2025 by rpki-client