Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: fQUsn3yXtlUp44bpMKFeJCDwo+ahQsMp7QMKTerMOxM=
Subject key identifier: 61:43:9F:D9:94:AB:32:A3:29:42:01:9B:B6:6B:4F:0E:89:53:A6:17
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 019778D3CC836A032E936D41B24C11BF773C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 1527
Signing time: Mon 16 Jun 2025 13:00:35 +0000
Manifest this update: Mon 16 Jun 2025 13:00:35 +0000
Manifest next update: Tue 17 Jun 2025 13:00:35 +0000
Files and hashes: 1: 4Oh7XZMGUvgYsZH7CZdGUoLIrDw.roa (hash: h4FhAkel555dNYUyqzqCdfQBJmgL5LydnG571p+4BQM=)
2: NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa (hash: EZzv8aq1wUrfRrM9fo8iLug2Yq9YGVoqZENURQoeQj4=)
3: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: CZMccL4DGH5DNaELwuTXx3+kd+WljKSLCNZVo8nx5yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:cc:83:6a:03:2e:93:6d:41:b2:4c:11:bf:77:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Jun 16 13:00:35 2025 GMT
Not After : Jun 17 13:00:35 2025 GMT
Subject: CN=61439fd994ab32a32942019bb66b4f0e8953a617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:fe:ba:6b:32:42:d7:fa:2f:e6:9d:53:49:
ac:6a:e5:2f:f0:0c:6e:59:b9:2e:2b:a6:32:d5:97:
ad:c3:b1:30:cd:e4:f5:c9:f4:9e:b3:cd:0e:4f:57:
54:c2:65:da:07:b1:e3:70:6d:fa:2f:a4:d7:5a:ce:
57:dd:3d:0f:a5:8e:03:03:0e:be:5c:8b:49:5d:eb:
f6:97:5c:c1:6e:0f:34:22:b2:e0:90:c7:e5:77:c1:
dc:b2:9e:75:97:f2:1d:fe:af:8a:e4:8d:b9:18:0d:
eb:b6:39:ac:40:df:5a:5b:b4:7e:18:1e:29:69:5f:
ff:17:d5:f0:f7:3e:1a:67:6d:fe:5c:15:29:7b:9c:
cb:f0:c7:f8:e4:e9:8f:ae:05:e3:a9:83:a2:24:da:
3f:86:0a:33:db:a6:9c:05:b4:5e:22:22:fa:f7:47:
02:5b:a5:48:f5:b7:56:27:e1:9f:78:80:d1:b5:eb:
ff:27:df:e6:c0:dc:f3:a8:2f:7c:82:c0:97:0c:4f:
29:3b:1b:78:7a:28:24:fd:b3:fe:10:99:76:b1:25:
e4:5a:42:43:7e:1b:e1:87:a2:59:7a:4e:97:d5:72:
71:48:23:e0:61:a3:e8:b9:93:a5:12:24:15:44:67:
95:85:7d:1d:3d:88:6c:a9:ad:42:37:7e:bc:12:fd:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:43:9F:D9:94:AB:32:A3:29:42:01:9B:B6:6B:4F:0E:89:53:A6:17
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cd:fd:c3:f9:20:68:53:17:7e:53:92:79:36:75:66:15:c2:
e2:e7:ce:19:12:1b:16:2c:1c:e8:29:52:03:06:86:ba:14:61:
25:7c:b8:4f:e0:ec:04:ef:59:81:52:66:73:4b:87:10:58:cf:
cd:e0:b2:1d:d3:53:d6:10:ce:3d:ea:9d:d5:34:38:1e:d5:e3:
5a:01:f4:18:53:22:34:2b:8b:27:92:83:88:2c:1c:69:de:96:
d7:fb:f6:2c:37:2a:1d:9e:32:8f:ee:64:98:d1:31:85:7b:ac:
44:ee:61:7c:fd:d7:c6:4b:7e:fa:8e:c0:49:c9:05:9f:47:d7:
59:85:be:9d:89:03:95:0e:9d:b1:a5:ea:10:f6:c7:6a:82:98:
14:06:89:46:2b:49:b7:9b:18:ee:7b:b3:63:aa:b8:fe:f0:e2:
52:aa:66:6f:19:80:4c:5a:d4:b7:ad:2c:3e:68:9a:d7:42:48:
09:0b:74:03:41:d7:37:9d:e7:2c:8b:1d:fe:19:46:be:67:34:
bf:3c:da:9e:28:6c:3f:72:0f:1f:16:48:eb:fa:06:7b:59:cd:
d5:bd:aa:7e:ac:b4:03:59:44:b9:63:6f:b1:0d:7d:b2:93:07:
b0:86:84:8a:f1:50:23:70:6f:a3:80:4c:bf:09:b6:76:23:96:
77:6f:74:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:37:46 2025 by rpki-client