Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier: 3aP8fn99my/xrOmGKPso4aHkwVzZPlgVNbX5FqVjM6Q=
Subject key identifier: B2:15:27:53:DC:FC:B9:A8:DA:93:66:3E:8C:E2:DD:ED:65:00:A2:64
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 0197789CFA20992E2E099CA66029A9D7F40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number: 1302
Signing time: Mon 16 Jun 2025 12:00:42 +0000
Manifest this update: Mon 16 Jun 2025 12:00:42 +0000
Manifest next update: Tue 17 Jun 2025 12:00:42 +0000
Files and hashes: 1: 37BH2BbkewJajf7AdygbF5Ybmow.roa (hash: MUXiTIQEk3N6SMfHkWKTmXV6HOZLx5S5G+E0pT81UGY=)
2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: ouWRkVbJRvkajBHUWmoH69IhVR0DyBVo3PU5Vg76Ru4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9c:fa:20:99:2e:2e:09:9c:a6:60:29:a9:d7:f4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: Jun 16 12:00:42 2025 GMT
Not After : Jun 17 12:00:42 2025 GMT
Subject: CN=b2152753dcfcb9a8da93663e8ce2dded6500a264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:a4:5a:82:28:1b:ac:a8:24:c7:81:de:fd:
f7:cd:07:6d:82:5e:5b:2b:1d:31:b8:7f:ff:94:c6:
bc:37:1f:8c:33:e5:fd:c0:f3:8e:b2:af:81:c8:2b:
1f:81:7d:27:e0:df:45:c4:5d:3a:bc:4d:79:fc:a2:
99:0f:4d:22:d0:d9:32:a3:92:ea:22:58:79:06:8f:
67:f7:0f:03:be:1e:00:35:58:1d:ee:f4:8a:0b:d9:
08:f1:3d:91:33:c1:7e:f3:bb:07:91:65:fd:3f:3c:
30:f2:78:e0:cc:ad:84:21:81:37:f7:7a:37:0b:03:
e5:80:03:08:1a:97:5e:e2:6c:02:c7:8f:98:ac:32:
27:a5:73:4f:36:44:13:f3:43:9a:5b:42:31:73:be:
b6:03:2a:98:78:95:e8:f7:63:1e:cf:36:00:7a:43:
69:65:1f:af:8a:33:fe:5b:9b:19:61:2c:35:24:94:
3d:52:38:d2:f8:2b:f4:0a:f4:67:ee:35:ac:ed:6b:
49:9b:69:e6:03:4d:fa:67:ce:75:d7:e9:53:6d:41:
c9:89:80:d3:b5:d7:53:0b:ee:8d:13:3c:80:5b:cb:
df:53:41:d2:5d:a9:b0:00:22:f5:88:7e:0b:67:22:
a0:87:f5:87:2c:fb:2e:0d:18:b1:ac:90:6f:a6:81:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:15:27:53:DC:FC:B9:A8:DA:93:66:3E:8C:E2:DD:ED:65:00:A2:64
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f6:4d:8f:a8:6e:df:4c:d7:0e:15:20:1c:67:c8:c1:46:be:
ca:02:86:1c:41:6d:2b:9c:31:64:d1:6d:a6:06:eb:5f:b2:5b:
64:77:c0:83:bb:17:11:7e:d1:d6:2c:c2:b0:7c:ab:b0:7c:9f:
b8:a3:79:09:04:37:e0:a7:d7:82:d0:95:52:1a:ce:de:b7:6c:
19:8f:dc:b4:f8:e7:9b:6f:50:d0:19:9b:96:41:77:6f:a8:99:
0a:cb:cc:cb:36:b5:7a:12:62:9b:8e:67:24:b6:1b:98:7f:cb:
f3:67:54:6f:81:fe:83:ed:1d:6e:8a:db:89:a2:c1:c3:ce:f1:
9f:58:b1:3d:14:f9:a9:e6:52:41:47:a4:de:1d:b9:f0:64:f8:
17:73:e0:90:c5:43:cb:9b:f2:96:87:bb:62:55:0d:28:8c:2f:
ca:f6:a1:93:79:46:2b:24:bf:4a:9e:1b:05:e5:0c:65:52:ef:
9f:1d:ea:64:66:19:29:0e:72:e8:38:0c:11:93:64:fa:40:42:
26:3e:2f:40:00:81:3f:ad:b7:b7:ca:a8:29:56:63:f4:56:ae:
de:58:2c:cb:c9:bd:d7:07:f5:aa:ca:eb:12:db:99:fa:0e:0a:
8c:2b:67:91:61:b3:0b:d0:b1:3d:45:ce:47:dd:e4:08:8b:18:
e0:65:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:03:37 2025 by rpki-client