Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: Bkg86uzBorL9QkHeyCybiiZ9Q+vWxjJmVxlv0mk49GM=
Subject key identifier: 81:5E:8C:5D:64:87:26:40:DD:FA:F5:9F:E5:8E:0E:0F:BF:8B:A1:72
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 01988356989C5BD711A6C825335CF7130136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 15B1
Signing time: Thu 07 Aug 2025 07:02:27 +0000
Manifest this update: Thu 07 Aug 2025 07:02:27 +0000
Manifest next update: Fri 08 Aug 2025 07:02:27 +0000
Files and hashes: 1: 4Oh7XZMGUvgYsZH7CZdGUoLIrDw.roa (hash: h4FhAkel555dNYUyqzqCdfQBJmgL5LydnG571p+4BQM=)
2: NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa (hash: EZzv8aq1wUrfRrM9fo8iLug2Yq9YGVoqZENURQoeQj4=)
3: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: vtbvwbANqax4WWAPPjiSn1iyVl2AwPO4JyeX4VcxZFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:98:9c:5b:d7:11:a6:c8:25:33:5c:f7:13:01:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Aug 7 07:02:27 2025 GMT
Not After : Aug 8 07:02:27 2025 GMT
Subject: CN=815e8c5d64872640ddfaf59fe58e0e0fbf8ba172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:97:fd:06:e9:09:ba:b0:12:c4:a4:d6:c4:
60:58:8a:9e:e8:2a:92:ab:98:23:de:31:28:f8:91:
a9:8a:3e:98:e9:28:b2:ce:0e:18:7e:1e:6b:5d:bf:
b4:b9:ef:42:ed:73:8d:ee:ee:89:f7:16:63:e1:d8:
4f:fe:87:d2:e5:53:1f:9a:27:c3:10:1b:f1:4d:c6:
cf:7b:63:f0:10:8e:ca:f4:02:63:7d:b7:50:3c:07:
4f:17:7d:d1:73:cc:b4:b5:25:f2:2f:4f:65:9f:83:
8e:12:9e:cc:b7:af:8e:11:d6:10:3d:2c:e0:e5:46:
56:0f:f6:bf:88:11:54:de:36:94:2a:2e:a4:d0:1c:
15:35:e0:db:ff:0b:87:72:1f:c6:71:fb:60:3a:cb:
a6:d8:9c:f5:3f:64:da:10:d4:7a:df:51:d5:d3:c0:
96:27:4d:f5:2e:6c:96:c2:fe:23:99:59:1e:f0:4b:
72:69:5d:8b:4f:a7:d1:1d:bc:8a:2e:88:8c:e0:ca:
a1:16:f5:36:fa:fd:3e:d5:27:20:8b:7e:0d:69:5b:
a6:08:9a:f9:3d:a4:f9:e8:86:1d:7b:73:1f:8f:ad:
ac:05:17:48:65:93:83:b7:1c:a9:1a:c1:81:2d:a2:
62:3a:24:44:de:a0:f0:34:37:12:ca:3a:dc:aa:12:
11:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5E:8C:5D:64:87:26:40:DD:FA:F5:9F:E5:8E:0E:0F:BF:8B:A1:72
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c9:cf:6e:28:60:af:21:5c:20:9d:0b:12:fb:46:c6:e7:81:
78:b3:b3:7b:23:2f:10:cb:32:24:1f:25:5b:d0:e5:79:d7:99:
cb:36:99:8a:2b:72:82:4f:4b:f0:fe:b1:28:c7:78:58:80:80:
b1:d3:89:d4:bf:f0:63:e3:fc:c7:fc:8a:97:03:69:07:4b:45:
c9:ae:c3:a7:98:82:fe:24:3b:ab:04:c0:90:db:54:2a:ed:a2:
4b:15:4d:71:e1:bb:ed:81:99:f5:ff:ba:c0:24:c9:d8:16:7c:
05:4a:12:bd:cc:46:0d:c9:58:14:75:00:62:ba:a8:85:d9:47:
41:0f:4d:06:22:d0:fd:06:a1:e5:9f:84:80:7b:73:b9:7b:f5:
d2:b5:5f:a4:03:db:5c:70:c2:4d:d2:ff:c7:d7:4c:0d:8b:97:
f7:57:76:20:c0:03:4c:5c:39:f5:1a:46:03:8f:69:64:d3:97:
e9:9f:70:3f:35:c6:ca:68:be:43:10:99:17:23:59:5a:97:08:
07:ec:5b:8a:a3:af:64:b8:97:0d:32:c8:f1:80:66:be:d4:60:
92:97:f5:b8:4c:d9:ad:49:3c:22:a7:92:13:4c:a5:1c:cc:1b:
ef:b2:d7:36:c6:b2:76:7c:2c:9d:f5:4c:e5:a5:c7:68:f3:09:
af:5f:8e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:26:06 2025 by rpki-client