Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File: ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier: +GgKjbK6GlEWZUWYzqp/ATuSDkscZJK2cYHl3QuyJ0I=
Subject key identifier: 7B:B2:50:43:48:67:2E:42:FC:E9:53:EB:3B:43:2B:80:A4:2A:73:44
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 019770E3B4044C16F81B88F93658D5B83ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number: 1596
Signing time: Sun 15 Jun 2025 00:01:00 +0000
Manifest this update: Sun 15 Jun 2025 00:01:00 +0000
Manifest next update: Mon 16 Jun 2025 00:01:00 +0000
Files and hashes: 1: 02kstygB_1Q-T4WpJF1fDwmJj7Y.roa (hash: 1yQLO6zXVi4jG2bubLFyNc7MiwNkUFoEG9KeznEMEp4=)
2: 4-SKabrWOl-7KlndWPRuCU9aEhs.roa (hash: lMaT7o02aVJAelpgq3JP3XJEHgIKnGWGn47SBUcvn5g=)
3: 7Sa61R-MOh-0ZN995AyZU8ZyFSg.roa (hash: vYukMa63xBh0wU8yyQa7I0WK1kHPXukHl42Dhw+i7vg=)
4: K7WRjV9MYHng8NfZhIiH2_A3Swg.roa (hash: 7+t8vrSKIkcQUgESVH88zqe5BbNV7ixlCqPd3RDBnyQ=)
5: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: ocXF2fG1AFdGceYVd0TywTbQ3gMBqEU7RpDXyd/MD78=)
6: iJ0N88iATNc7UiUGXoHztFV1r-M.roa (hash: l8fJQFt0ipvnCwRF0O4nNX66/X32E1fs26DRKw04Vb0=)
7: qGjMBqPIGRJHE7hen5oLYlZvunI.roa (hash: tYN0YvNDzfdVUoqabm5wEwnZWZKNLJ2LiXHf0iUoR6A=)
8: ukKrQsbJYmMnCmIVGPhPmqzzI-Y.roa (hash: YP54ZYRp6pI7NTnVUT51wnLKoj40S7g2X/Zv7SQymBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:b4:04:4c:16:f8:1b:88:f9:36:58:d5:b8:3a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jun 15 00:01:00 2025 GMT
Not After : Jun 16 00:01:00 2025 GMT
Subject: CN=7bb2504348672e42fce953eb3b432b80a42a7344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:66:80:bc:08:0a:1d:96:66:da:69:18:8a:5e:
37:42:e1:a3:65:a4:80:a5:55:90:62:c7:43:93:d5:
2e:6b:76:9d:dd:e0:a9:65:c7:aa:5b:cb:39:f8:83:
0c:48:e8:4f:46:a5:2b:70:2b:71:72:35:50:6c:c5:
3e:2c:60:74:7e:b7:c4:69:f5:3e:dd:0e:8a:ed:24:
18:f3:8e:c9:22:b4:d5:99:82:aa:53:4d:49:68:a1:
b7:55:78:92:2f:27:55:17:36:d4:d3:38:df:1b:66:
e6:6b:df:18:02:f9:6a:dd:3b:21:bc:6a:d6:49:7f:
bf:0c:10:4d:9c:90:da:43:f0:57:ed:f1:8e:9b:bc:
c1:47:76:2b:b1:2b:f5:82:41:68:5d:eb:72:3f:2e:
c0:6b:ad:0d:3c:d1:55:ac:b3:0a:58:c0:e8:39:8c:
51:ec:f1:3f:19:ce:0d:48:0a:07:a4:4a:63:2b:e4:
17:f1:25:c1:01:e3:f4:80:51:21:61:ca:74:f4:1f:
e1:eb:4f:aa:f4:c7:ed:63:df:74:7a:9a:0d:2c:30:
15:a3:ae:da:55:88:78:00:a7:6f:1a:55:fd:77:d1:
73:19:7a:ed:67:5f:c3:62:8d:1e:a5:67:e9:d4:8f:
9b:b9:3d:0a:c2:92:75:14:b6:61:85:a0:58:73:43:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B2:50:43:48:67:2E:42:FC:E9:53:EB:3B:43:2B:80:A4:2A:73:44
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:59:c2:1e:47:3c:c1:dd:ae:2d:35:b4:ba:4c:46:9c:7a:95:
d8:e9:56:ec:c7:c8:fa:46:80:b3:82:4d:38:a0:2e:d1:ef:15:
02:0d:15:53:53:6c:e5:f5:aa:ec:15:d4:1a:8c:ea:21:25:63:
48:9e:da:93:99:c1:0e:7a:2c:fc:31:6d:13:25:4d:5a:2b:59:
ee:51:fe:9d:54:fa:93:be:e5:39:9b:33:6f:f5:58:bc:ad:fc:
36:13:ad:2c:7c:f6:32:81:e6:e2:8c:dd:20:97:31:bb:5b:95:
23:f9:60:66:27:e5:01:b5:47:ac:e2:53:fa:85:8a:32:03:bb:
63:22:c8:98:49:3d:9c:a2:e1:b5:0e:5b:e0:b6:d0:39:e8:cd:
77:6d:5e:f9:57:d1:c2:32:2b:23:8c:05:2a:c6:f3:ee:ce:af:
b8:1e:d2:f7:34:26:e3:e3:12:89:95:c5:0a:1e:9f:49:8f:cf:
58:57:7f:b6:47:e3:05:ed:6d:52:ca:cb:89:2d:86:3d:b7:2f:
2f:01:e0:b9:ac:ef:34:5a:cf:60:8d:cb:b9:3b:0e:20:a4:9e:
a5:4d:26:38:de:13:37:06:a7:64:b5:5e:b8:ab:63:c9:bc:92:
8e:5d:d3:62:e2:7b:17:00:bb:1d:e5:f0:9b:23:dc:0a:61:aa:
8f:4f:34:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:12:09 2025 by rpki-client