Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
File: ZW5AemuZwPBSkyzHd_8N6bOhl04.mft (raw, json)
Hash identifier: awVejG4SXxVjM3+hpg69lC82bsmHG+764xAgl1KcB10=
Subject key identifier: 4D:A2:91:9B:99:66:C9:62:F3:59:38:27:F4:E4:46:1B:F7:AA:84:2D
Authority key identifier: 65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
Certificate issuer: /CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Certificate serial: 01976A0624E2EAC17B75DD838A1ACFCB33BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 16:01:16 +0000
Manifest this update: Fri 13 Jun 2025 16:01:16 +0000
Manifest next update: Sat 14 Jun 2025 16:01:16 +0000
Files and hashes: 1: ZW5AemuZwPBSkyzHd_8N6bOhl04.crl (hash: Qz0EJCRDs9E5NCeuTOKDyMco9z19dSPlM5KyggqJYLI=)
2: aaI39-DbGwiYxab88qud3MKXp8I.roa (hash: hXf3Ze4XBluhbrN2BpmWvri4Oj4OkdW717jPTVFXetQ=)
3: iGABUqcXXN7aOyjtrZCgc7fQPto.roa (hash: GEJ0Of7uNCnr4mLuQTqHOBw0HqR8tQuPsFCRYfeeMcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:24:e2:ea:c1:7b:75:dd:83:8a:1a:cf:cb:33:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Validity
Not Before: Jun 13 16:01:16 2025 GMT
Not After : Jun 14 16:01:16 2025 GMT
Subject: CN=4da2919b9966c962f3593827f4e4461bf7aa842d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:9d:2e:f1:bb:c4:78:25:fd:fc:e8:f1:d8:
d1:8c:95:1d:19:37:cc:db:7e:55:21:e5:d5:26:50:
a0:6d:19:8d:44:dd:29:f6:6f:51:15:49:34:27:fb:
01:6c:89:2e:a1:a5:a4:a4:0a:51:91:f2:40:7b:66:
63:27:7c:f9:c8:f8:e3:7e:f7:d9:07:57:fd:9c:4a:
7e:3e:de:59:c0:2a:f2:98:be:88:bb:6f:8a:0a:e9:
b3:75:7d:e3:8e:b0:a7:b7:83:d0:90:f3:f9:5e:5e:
83:61:83:05:62:9e:0f:21:3b:36:66:1e:49:94:27:
6d:fa:90:ce:75:6a:d7:a9:e4:22:ac:ff:1d:11:ca:
cf:02:ca:07:cb:b3:59:7b:2a:b4:c9:66:ed:92:e3:
c1:93:4b:fa:1b:8e:b9:d1:6a:86:b1:7d:32:38:0e:
8d:8f:ce:f9:e8:75:62:e4:cb:1e:33:e4:bd:54:ed:
11:e2:a0:d6:43:f7:d9:90:de:63:42:7d:cf:be:cc:
15:3b:f3:49:1c:28:4f:90:37:6d:ce:11:53:8b:b3:
a1:81:40:89:85:da:e4:84:ac:c1:e1:dd:05:a1:c8:
eb:01:57:76:13:fe:b6:28:2f:ec:65:a3:ff:52:b1:
c6:22:44:25:90:ca:81:78:ac:15:38:7a:97:95:b1:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A2:91:9B:99:66:C9:62:F3:59:38:27:F4:E4:46:1B:F7:AA:84:2D
X509v3 Authority Key Identifier:
keyid:65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:18:29:54:06:ea:28:63:59:32:77:f6:fc:12:7d:a3:31:09:
7a:0b:17:a8:27:10:b7:6c:d6:d1:5b:1e:40:47:9f:42:82:48:
28:54:1e:c6:ca:fc:e9:b8:7f:85:3c:f8:37:de:bb:2e:88:3b:
f2:c2:ec:b3:e2:01:1c:0f:d1:4d:78:b2:8f:01:36:b1:54:3e:
77:f7:4e:78:59:6b:de:67:16:f5:19:9b:c3:7e:01:aa:58:87:
53:d4:81:5b:a2:9d:15:b4:ed:02:3a:c7:db:4f:a6:41:ac:65:
46:76:c9:14:41:c6:98:61:85:ac:f8:a8:d9:ba:48:c6:bc:26:
bc:33:3b:9b:5c:c4:15:c8:9a:74:87:d1:19:0e:52:45:ac:43:
e3:a7:5f:7f:85:3b:0b:c9:67:c8:4f:00:72:91:3d:b7:f5:ea:
f6:b3:b8:df:4e:07:7f:e0:ff:f5:8b:86:c7:59:8e:59:ca:67:
cf:c8:be:cc:85:bd:f9:58:07:96:aa:32:99:4a:48:78:c5:c3:
3e:f6:8d:99:27:a9:7c:17:96:be:f7:01:e9:bc:ca:3e:a8:c1:
4a:4f:66:16:55:c2:f4:64:b5:6d:d3:a1:14:4e:5a:67:01:7d:
cc:aa:03:46:11:c0:6a:9a:a9:fb:ed:ad:e7:0d:04:e7:a9:14:
5a:cd:8c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:20 2025 by rpki-client