Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
File: ZGASnCIfekeBKIWmSDixLuaxXtU.mft (raw, json)
Hash identifier: 7S7P6ZxSOZtIoJKTqPLhZMD+3cMFSlpohMSuME3M/7k=
Subject key identifier: B6:9A:EE:AB:2B:16:DD:D4:6B:31:FC:4F:1E:0A:9D:AC:76:DC:0F:1C
Authority key identifier: 64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
Certificate issuer: /CN=6460129c221f7a47812885a64838b12ee6b15ed5
Certificate serial: 019774F6FEDA9814281551769904CB07DAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
Manifest number: 0BAD
Signing time: Sun 15 Jun 2025 19:00:33 +0000
Manifest this update: Sun 15 Jun 2025 19:00:33 +0000
Manifest next update: Mon 16 Jun 2025 19:00:33 +0000
Files and hashes: 1: JmllacFYtWc-oOoWU-KiBC-dzBI.roa (hash: ofZ7OlX/Buue/GMQQmZdmktJZ/jzN3/Huw6iGY9j4no=)
2: ZGASnCIfekeBKIWmSDixLuaxXtU.crl (hash: xWFLOZbmSGQlJjVD3sg+Wm1OuodwyJMCja8zptzDWG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f6:fe:da:98:14:28:15:51:76:99:04:cb:07:da:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6460129c221f7a47812885a64838b12ee6b15ed5
Validity
Not Before: Jun 15 19:00:33 2025 GMT
Not After : Jun 16 19:00:33 2025 GMT
Subject: CN=b69aeeab2b16ddd46b31fc4f1e0a9dac76dc0f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:84:93:6f:30:58:ec:d0:bd:1f:95:e1:28:
d9:03:46:20:9e:90:6c:aa:65:40:05:bf:d2:1d:4d:
55:6f:3c:ce:f2:d0:ee:f5:4f:b3:cd:6a:f8:72:8f:
7a:7c:2e:03:d5:a8:e6:a2:d8:bc:a7:1b:31:63:71:
0e:3b:db:0a:4f:97:41:5c:0e:b1:1a:68:e8:dc:77:
15:fc:cf:68:94:21:9c:de:ca:1d:14:2b:2d:0b:92:
f4:88:2a:d8:c0:b8:75:be:76:da:e9:fe:89:21:5e:
62:d3:c5:5b:e2:99:ee:fb:7d:4a:d1:ab:9b:da:75:
bd:35:34:4f:c0:a2:76:48:48:90:74:5b:fa:f9:41:
76:70:46:3a:d6:81:d6:6f:09:73:57:12:ff:ad:6a:
b9:cb:74:33:42:48:8d:07:8a:9c:c0:fe:3e:3c:19:
af:26:04:b7:b9:a3:d2:f9:f8:1b:71:b3:49:62:3f:
fe:d7:64:f2:84:ae:b3:f2:42:7e:cd:be:92:ec:74:
ff:18:10:61:bd:0f:6e:0b:97:bc:ef:d6:e4:73:b8:
1f:9e:8c:70:37:36:59:28:39:66:b9:60:57:cb:e6:
b7:f1:28:51:4f:39:38:3c:9f:05:7f:19:b1:8b:c8:
15:8f:d5:21:1b:2f:04:a6:12:83:1e:65:21:d2:6f:
42:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9A:EE:AB:2B:16:DD:D4:6B:31:FC:4F:1E:0A:9D:AC:76:DC:0F:1C
X509v3 Authority Key Identifier:
keyid:64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c9:d9:27:5b:8f:5c:e3:4a:c5:25:0d:ad:e4:af:26:65:5d:
19:e7:f2:5c:6f:9c:09:2b:2b:e7:1b:5f:b1:57:c0:88:16:be:
cb:e4:7a:50:9f:b4:f5:59:81:a6:23:57:40:5a:ff:c6:74:63:
08:3c:7c:cb:b2:1f:bb:0d:fb:01:cd:2c:e5:ca:5c:06:3b:bd:
c9:db:a0:a6:8b:65:7f:68:ea:cc:9a:30:49:5f:a1:01:02:3c:
ce:47:ac:b4:2b:d7:70:a6:a2:53:8d:f8:e2:ff:5f:13:ff:fd:
6a:82:d1:18:de:e7:47:06:93:8e:51:e3:90:f7:5c:70:96:2b:
9c:14:a3:fe:3b:b1:04:ac:18:05:0a:5e:6b:7c:91:34:0f:15:
0f:12:87:30:0b:f7:8a:ba:e8:48:b3:a9:be:72:ed:b7:06:fb:
66:ba:6a:56:ef:76:15:85:0a:82:d5:95:e5:8b:50:51:23:7b:
35:76:03:6a:7b:7a:29:9f:b2:f8:ea:f6:3e:cf:08:97:4c:dc:
b2:9a:2d:34:32:da:e8:02:c9:b2:6c:ea:2f:5c:45:17:7e:73:
bb:93:8c:e3:53:dc:3f:aa:72:07:0d:cc:e5:1a:61:c8:8d:68:
4b:f1:c1:2c:f6:0e:40:ca:ca:90:23:94:ae:89:d6:30:6d:82:
6f:9d:5b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:42:54 2025 by rpki-client