Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
File: ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json)
Hash identifier: tY8Sn7RVDEBXvhBjNXGjdSYH+3oNNxquX1JuIWdpOWY=
Subject key identifier: C7:00:88:23:96:55:E2:13:B9:4B:9B:22:07:3D:10:6B:60:EF:8B:FF
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial: 01976D3DD3C759D3A791C64A3361334A7947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
Manifest number: 0AE2
Signing time: Sat 14 Jun 2025 07:00:57 +0000
Manifest this update: Sat 14 Jun 2025 07:00:57 +0000
Manifest next update: Sun 15 Jun 2025 07:00:57 +0000
Files and hashes: 1: LsPOYMRIkwCviikK1SggYlQsE6c.roa (hash: C4ntpCFi4UgQNTh+MTX375uysoH85gdlFAEV6hZ2Gtw=)
2: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: gxyyXUQ99Nqrc0gY5++KvUe34L07/c6NWoh84Zj/Apc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:d3:c7:59:d3:a7:91:c6:4a:33:61:33:4a:79:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Validity
Not Before: Jun 14 07:00:57 2025 GMT
Not After : Jun 15 07:00:57 2025 GMT
Subject: CN=c70088239655e213b94b9b22073d106b60ef8bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:7c:c7:d5:09:d1:a6:9e:0b:cb:82:d8:a9:
40:e9:50:b7:cb:63:5a:7d:a8:92:38:f0:1b:1e:91:
60:44:9c:67:4f:32:6b:51:0c:0d:f8:07:e9:16:45:
37:16:52:12:f2:97:36:33:a0:19:32:3b:6f:e1:ac:
6c:cd:17:5b:55:ed:20:b6:8d:ec:98:8b:b3:99:3c:
c3:ff:fc:13:2f:fb:6e:39:a1:6d:fe:d3:a2:bb:7a:
a0:76:95:3f:70:98:a6:6c:ad:fe:75:7b:7f:51:05:
02:23:0f:04:f3:4d:89:42:95:3e:2b:65:a3:5b:d0:
1c:e9:2f:79:a1:2d:7f:79:b9:af:73:96:00:9f:67:
0f:69:35:81:85:00:f2:e5:4b:37:9d:fe:7c:94:e5:
15:7a:68:ae:2c:f4:fc:48:84:09:07:02:5c:9d:df:
5c:b0:24:cc:3d:b5:4d:f8:97:cb:d0:b9:a7:9e:11:
bd:b0:4d:e4:cc:41:d5:aa:e4:12:94:bd:35:57:14:
b9:16:c9:e5:c6:02:e8:67:94:ba:68:11:46:0d:52:
25:43:88:de:8a:14:bc:1d:0d:86:85:d9:43:d7:64:
af:fd:36:35:0a:f3:02:26:8b:51:b9:92:67:7e:d3:
6d:8b:71:cb:04:30:6b:08:80:70:c7:a5:fc:bb:f8:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:00:88:23:96:55:E2:13:B9:4B:9B:22:07:3D:10:6B:60:EF:8B:FF
X509v3 Authority Key Identifier:
keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0d:06:ac:77:7e:ee:82:bc:cc:21:99:cb:8b:ac:03:12:5b:
10:7e:18:00:7f:d8:c3:28:8a:70:83:fa:95:2b:b2:5f:a3:da:
86:13:6e:4a:00:5d:9e:a9:81:4a:d7:b4:b3:f5:74:0f:d4:6e:
ad:ac:4e:09:53:c7:20:8e:66:49:e6:fd:2d:33:23:41:d0:ab:
01:62:cb:8b:c8:63:85:01:34:c0:73:97:33:14:7c:5c:b6:4f:
cd:50:87:22:52:b1:22:ef:58:af:5f:eb:89:6d:a2:79:1e:6b:
04:88:d8:4e:df:f1:2c:a9:be:14:56:e6:33:f5:7d:92:ea:ec:
95:ee:70:e0:a3:43:e0:3d:08:01:fb:f9:ca:0d:cd:6f:12:5c:
96:8c:56:14:81:2f:30:96:b7:de:fc:5f:ba:a7:7b:8b:9f:96:
9d:dd:ef:9c:bb:2b:ac:dd:d0:b8:1b:e9:24:d0:69:23:32:bf:
96:5f:db:14:36:0a:e3:63:92:75:bd:ad:98:5f:97:d8:f4:d4:
be:42:7e:17:f1:81:2a:80:43:4e:e7:c5:6d:4c:95:30:85:79:
8d:ea:8f:34:0b:3f:a4:de:e5:b7:cc:57:3f:85:3c:53:f6:6b:
db:78:77:f9:d2:ec:34:e1:1b:49:a3:dc:4b:22:01:05:a3:9f:
f9:bc:14:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:51 2025 by rpki-client