Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
File: zbY--iaaFBF1Thzaq4SPsG-ghBE.mft (raw, json)
Hash identifier: 2TC/CorPVRs9OsKXdBTKSfJAQ0xCfnR4v53UiXBTue0=
Subject key identifier: 31:38:97:12:39:DB:E9:82:BB:37:EA:AD:23:53:2C:CC:15:AD:C7:34
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial: 01977187E7B3B2821A0ACE4CF1E77A9B362F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
Manifest number: 0CC7
Signing time: Sun 15 Jun 2025 03:00:21 +0000
Manifest this update: Sun 15 Jun 2025 03:00:21 +0000
Manifest next update: Mon 16 Jun 2025 03:00:21 +0000
Files and hashes: 1: c0UDF77YneOEpDbpE_XbzKIY8Uk.roa (hash: foV69gLO281sdub8JnH51RHuvFTq6y1JtigYK6aR0Ho=)
2: zbY--iaaFBF1Thzaq4SPsG-ghBE.crl (hash: m7TVB45JysheHaUgoCdCOunuF+VBU52oiofL4srasKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:87:e7:b3:b2:82:1a:0a:ce:4c:f1:e7:7a:9b:36:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Validity
Not Before: Jun 15 03:00:21 2025 GMT
Not After : Jun 16 03:00:21 2025 GMT
Subject: CN=3138971239dbe982bb37eaad23532ccc15adc734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:c1:74:bd:7b:bb:05:02:b8:f4:9f:72:d1:
21:5d:b0:f9:e6:3b:78:8b:7a:0a:78:fc:ea:e8:83:
3d:24:18:5c:3b:5c:01:ab:ed:19:b4:7e:54:30:7d:
89:52:a7:1a:2f:42:a1:13:ca:28:51:fd:02:ad:42:
0a:dc:95:86:5e:91:d3:ea:65:ea:ca:f5:0c:cb:65:
f1:96:ab:1c:82:57:c8:11:dc:77:5d:95:77:65:7d:
7d:bc:2e:fe:01:b2:29:b3:6a:7b:3e:d8:15:a5:d5:
13:6b:da:85:7f:93:e0:0f:d7:e9:88:08:82:ee:49:
19:c5:cb:89:3b:6c:28:70:59:8b:5d:cf:b4:44:7d:
42:52:31:9e:39:52:d4:8c:b0:56:65:2c:51:ca:88:
9e:e7:08:cf:36:f5:a3:66:dd:c5:6d:1e:89:6d:78:
68:18:be:3f:6d:ce:4e:0b:fc:03:5f:c1:0f:f9:00:
08:94:ca:38:a7:bb:63:79:aa:f5:b3:15:ee:e1:45:
c8:22:80:65:88:33:9f:bc:6e:57:ad:f8:85:ee:58:
53:12:78:84:a3:5c:28:ba:d0:0c:d9:e0:18:45:bd:
f2:61:83:5b:d1:b1:01:ee:25:f7:50:7c:ed:fe:d6:
7e:40:13:53:83:c4:ae:f7:d5:be:cb:92:9f:ad:41:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:38:97:12:39:DB:E9:82:BB:37:EA:AD:23:53:2C:CC:15:AD:C7:34
X509v3 Authority Key Identifier:
keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cf:da:65:37:d3:69:84:1f:03:07:bf:c5:75:43:45:6e:c5:
5e:08:ed:ed:a7:a7:f1:a4:ee:4a:5b:48:b3:33:21:b1:03:53:
b3:37:22:52:38:91:fc:4d:98:81:ac:a7:8a:a9:7f:2b:3b:fd:
7c:3c:d3:e1:7f:a5:2d:f9:8a:a0:94:5b:7a:ab:15:7e:9a:32:
e6:1e:20:8b:1b:d9:ea:56:25:a2:12:2a:e9:6c:5e:b4:d5:31:
0e:11:b3:dd:2d:5e:53:b0:99:6b:8c:f4:78:74:ac:a7:3c:c4:
21:b7:31:a0:06:87:ef:d8:f6:a6:dc:f5:a8:b3:4f:2f:b2:6f:
01:7c:a6:c7:9d:67:f3:0f:9d:14:39:c1:e9:88:d8:d9:85:83:
30:df:8c:01:e2:f1:46:da:54:6b:60:74:3c:3d:33:2b:3b:c6:
ea:94:e1:ad:b7:b0:c9:a3:06:7a:c0:d5:4b:ea:49:01:99:1f:
33:76:6f:00:1d:78:ce:98:7d:e3:31:d9:ea:b6:f9:7e:cf:4b:
71:d9:b6:ee:8d:66:26:15:a6:27:9f:97:29:df:5b:f4:6c:3e:
d7:9e:c4:8a:7a:59:65:40:cb:d2:b9:37:5c:e7:6d:6b:85:e4:
b0:58:34:40:ac:ff:3a:2d:55:63:fa:26:2e:62:e1:c3:54:9c:
8f:cf:5f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:29:59 2025 by rpki-client