Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
File: ZLMdzWu1MIApxCcyMFFPcmsbhro.mft (raw, json)
Hash identifier: nluerYHEI9Z7RA27/xl/mmWsNPdcDddZJdA+BiKaNVY=
Subject key identifier: 75:D9:3E:67:BF:C4:15:76:6F:E6:95:40:56:C0:39:5D:8F:45:8A:88
Authority key identifier: 64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
Certificate issuer: /CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Certificate serial: 01976F9A0AE0A2EDDC473B3E5C5E896DF5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
Manifest number: 14A6
Signing time: Sat 14 Jun 2025 18:00:55 +0000
Manifest this update: Sat 14 Jun 2025 18:00:55 +0000
Manifest next update: Sun 15 Jun 2025 18:00:55 +0000
Files and hashes: 1: ZLMdzWu1MIApxCcyMFFPcmsbhro.crl (hash: l71r4QA6U4ywNl6JeqKoIqHx61i/vhIGHxievgkloB8=)
2: hgdnPYifylvEbRhPG5rcZMHgm-E.roa (hash: kVaA/BoHtOWfVS1UNUVlSYGZdZvXh/V05GtETEpyoE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:0a:e0:a2:ed:dc:47:3b:3e:5c:5e:89:6d:f5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Validity
Not Before: Jun 14 18:00:55 2025 GMT
Not After : Jun 15 18:00:55 2025 GMT
Subject: CN=75d93e67bfc415766fe6954056c0395d8f458a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:18:ac:e9:85:1d:a1:35:01:0a:4c:05:e6:
24:33:d2:81:80:ed:27:56:19:36:cf:52:05:15:8a:
f2:08:04:db:e0:b9:3f:1a:5d:4d:5c:da:e6:09:e2:
56:49:bb:07:f2:c3:9a:36:43:cd:94:65:44:d9:48:
cb:a7:ae:92:b1:b0:8a:e1:bf:2a:b2:5c:e3:07:2f:
b0:f7:65:45:6e:6e:25:7b:2f:e9:ed:fb:ac:dd:e2:
68:13:d9:84:2f:96:4f:75:2b:21:56:40:c9:b4:b4:
55:e8:90:e3:d3:eb:aa:ea:ce:11:ec:be:4f:89:56:
c4:06:fb:58:d1:f4:b9:e3:a7:9e:3b:46:3b:1a:05:
d3:da:0c:c4:af:b2:c9:cd:20:82:29:4e:2c:ca:a5:
fa:95:53:8a:44:4f:14:38:93:f7:96:2b:41:05:a5:
74:17:ec:7d:90:99:1b:6a:99:2a:4a:7e:4e:2f:7b:
03:dc:d1:08:74:19:a7:20:ac:d0:7f:05:f7:e7:f6:
f1:11:4c:d7:2c:75:e9:aa:ca:e2:04:98:bc:3e:c3:
2d:07:34:fb:df:ee:c4:4d:b7:2b:5d:77:7f:8f:02:
f1:93:b9:bd:30:7b:45:c8:c2:07:93:c1:bf:0f:02:
81:40:6f:7d:e4:f1:cb:75:a2:2c:15:b2:99:f3:55:
ca:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D9:3E:67:BF:C4:15:76:6F:E6:95:40:56:C0:39:5D:8F:45:8A:88
X509v3 Authority Key Identifier:
keyid:64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:82:85:1a:27:86:db:0d:f3:73:51:e2:26:78:42:14:a1:03:
d2:b4:22:09:76:42:ec:88:dc:b1:14:ee:fd:08:cd:93:42:45:
f8:32:44:ce:4e:04:0b:a5:48:bf:20:99:9d:9b:a1:b3:e1:54:
68:13:25:37:90:9c:f6:aa:6b:23:97:e9:71:7d:db:3b:9c:94:
ea:b8:2d:a4:0a:48:8d:a5:36:36:05:be:67:76:63:e6:e3:64:
31:60:49:08:72:09:9e:13:84:9a:1b:bb:44:c1:bf:14:23:72:
6f:9a:f7:b8:27:95:a9:ff:42:3c:1a:0b:8a:a7:bd:7c:35:2e:
34:3d:9c:93:e0:6a:81:a8:d7:31:bd:86:3c:e5:3c:d5:8a:d8:
d1:3e:cf:7e:d9:22:ed:95:50:6e:87:59:30:ef:dd:ee:8d:6a:
51:44:bb:81:40:51:27:1f:d4:50:11:0e:70:0b:3a:69:ba:14:
1a:a0:d5:d1:2e:8a:0d:b4:ff:8b:f5:1a:9e:70:08:bd:f1:89:
28:7c:29:80:87:7f:4a:cb:b7:ed:dd:d2:63:88:61:b0:f5:f9:
8c:ca:44:cf:49:f5:c8:f0:e6:6c:12:6c:7c:ae:6a:b2:d2:ad:
87:40:1c:11:e4:57:b5:d3:23:57:b1:c8:81:c5:8c:6a:d4:be:
35:17:d2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:52:22 2025 by rpki-client