Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
File: ZgwymWrhJGGJciLi2cwJOTCSfd0.mft (raw, json)
Hash identifier: 2Ny3Ue8k5ENt2iPcfiOk6Y9Zx2eAdDXR6gO7LNvClsA=
Subject key identifier: 7B:EC:50:82:99:A7:56:A2:7E:78:FE:0D:E1:C7:0A:D5:98:15:34:E0
Authority key identifier: 66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
Certificate issuer: /CN=660c32996ae12461897222e2d9cc093930927ddd
Certificate serial: 019768BC10B7D1E3437C06CB141AC0091B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 10:00:44 +0000
Manifest this update: Fri 13 Jun 2025 10:00:44 +0000
Manifest next update: Sat 14 Jun 2025 10:00:44 +0000
Files and hashes: 1: ZgwymWrhJGGJciLi2cwJOTCSfd0.crl (hash: iuekRBmGvbmPxKoBB7JI+gpN3cZ7n21NWG6xZPsH/zk=)
2: eTKPP1Wu3aoon8pt_QrTkfCfijI.roa (hash: 40MqBGQjbWUX+1wVm2enGIIcrfvo/5OK7+JG7rETf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:10:b7:d1:e3:43:7c:06:cb:14:1a:c0:09:1b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660c32996ae12461897222e2d9cc093930927ddd
Validity
Not Before: Jun 13 10:00:44 2025 GMT
Not After : Jun 14 10:00:44 2025 GMT
Subject: CN=7bec508299a756a27e78fe0de1c70ad5981534e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:6a:85:d6:b5:a7:1b:fe:57:d4:60:85:53:
af:9e:1e:28:14:48:4f:cf:31:2f:10:53:0a:1f:d3:
06:4d:ce:63:04:79:30:64:8b:35:f7:f4:68:80:4e:
88:2b:f0:73:a4:9c:1b:f9:78:ad:7e:b0:e9:0b:01:
24:b4:a1:f7:c0:0b:6b:36:cd:79:c4:53:23:8a:d1:
ee:54:be:9d:59:e0:c7:e6:d6:59:39:b0:34:97:7c:
6b:11:ab:45:10:ca:4c:ba:44:25:5d:99:62:4a:54:
95:ae:30:33:6a:0a:f8:21:a7:04:6c:9c:4a:20:08:
d2:69:22:38:06:c9:6c:ac:b6:d9:92:10:71:73:b7:
af:0c:e1:e3:5f:ab:f2:9f:53:6d:d2:ed:df:e9:82:
6b:b2:06:5d:24:ef:b2:88:cc:1a:28:32:ae:1a:01:
78:a6:d9:77:0d:17:e1:5a:74:e1:b9:03:3b:25:c4:
9d:1d:87:f5:52:37:bf:79:c2:d7:4f:b3:52:c7:7b:
1c:a5:7e:dc:82:35:3b:19:eb:af:2d:57:8b:4f:d3:
3e:04:0a:89:b1:26:5d:26:83:bb:ce:a6:05:2f:31:
db:86:31:9c:81:77:ce:7c:e7:98:f5:64:2b:ae:5c:
01:f6:c9:f5:36:aa:5b:15:ec:a4:c8:5f:d0:66:15:
5d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EC:50:82:99:A7:56:A2:7E:78:FE:0D:E1:C7:0A:D5:98:15:34:E0
X509v3 Authority Key Identifier:
keyid:66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:39:ed:bc:33:b5:0f:38:e4:ae:9e:7c:07:39:1e:b6:07:cc:
27:fb:ea:2f:49:6a:17:85:88:6b:2f:d2:3e:81:51:d2:5b:28:
4f:f7:d0:c5:1f:da:6e:d5:b1:e7:b4:0a:6b:2f:8b:cf:df:be:
66:4b:09:01:ef:54:8f:4e:50:07:e7:54:82:15:7b:88:9a:ee:
34:2f:14:cd:a1:09:5e:ed:09:05:78:92:64:b5:40:06:a2:41:
b0:20:aa:73:2d:80:e1:44:b4:cb:31:40:60:b3:5b:08:b6:3e:
1e:c4:82:10:b4:6c:33:81:08:89:e8:dd:75:f7:45:3a:e8:a7:
7e:7a:b6:1f:f6:39:c7:ce:03:29:75:d6:3b:35:24:4e:1b:0a:
ff:e7:5b:bc:94:d4:08:98:e3:3f:25:dc:34:51:d3:55:cd:0d:
fd:c9:5b:56:03:cc:9e:0d:e3:dd:84:29:27:7f:26:cf:a9:01:
a2:05:1e:9c:b0:48:94:4e:bc:c0:d8:3d:bb:b1:40:d2:c2:a2:
95:41:54:e9:58:66:fc:50:eb:c3:e3:05:d7:5f:84:ae:88:3f:
f9:80:21:b6:e1:14:65:49:42:c6:79:b3:52:91:dc:da:17:34:
4b:73:c3:7d:45:78:92:19:6c:8b:36:2d:eb:f3:2e:59:2c:e3:
d3:b6:ba:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:24 2025 by rpki-client