Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
File: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft (raw, json)
Hash identifier: 35HZDHzCFhtIxqiUe1XEkG4Eimdf31vpHbgNHgORH4Q=
Subject key identifier: 67:B2:4E:3E:C4:B3:87:17:E7:F7:1B:0E:81:D5:0B:76:88:03:27:14
Authority key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
Certificate issuer: /CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Certificate serial: 0197711AC42F2537147645ACEC18E6ECF0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
Manifest number: 14D1
Signing time: Sun 15 Jun 2025 01:01:08 +0000
Manifest this update: Sun 15 Jun 2025 01:01:08 +0000
Manifest next update: Mon 16 Jun 2025 01:01:08 +0000
Files and hashes: 1: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl (hash: 1mYY0KATp1O9AaY5EGDn1BlwDWtHascwaQEJbtgztJE=)
2: _4Ndkg3UKi9vHxY0SVHFR9i7YHI.roa (hash: gVwQ/KDnz7z975mDXEiOOePjhBe/QBZrgXsjy6HuzNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:c4:2f:25:37:14:76:45:ac:ec:18:e6:ec:f0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Validity
Not Before: Jun 15 01:01:08 2025 GMT
Not After : Jun 16 01:01:08 2025 GMT
Subject: CN=67b24e3ec4b38717e7f71b0e81d50b7688032714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:33:96:dd:fa:0b:49:fe:89:53:fd:73:20:f5:
cc:e6:85:60:4f:2d:d7:74:76:3c:1c:f3:67:d4:60:
72:44:2d:39:b9:e3:9a:15:72:26:14:2e:6e:f2:e1:
7f:93:fc:28:0b:5f:e5:fb:b1:7f:bf:b1:4b:e0:f6:
24:20:08:da:61:72:2a:41:4a:c4:b8:4d:cd:e1:12:
24:4e:9f:a8:c9:60:d9:76:ac:30:47:15:c4:ec:e4:
c6:c8:58:ef:72:94:d9:aa:fc:ad:ac:b2:8f:84:7f:
03:c1:d4:d1:36:ec:f2:2e:00:82:9e:be:f9:04:9a:
b0:2c:9d:44:82:39:87:be:54:f9:e4:b5:ac:23:92:
df:0d:2f:ce:28:97:60:74:90:64:b1:1c:4f:1c:c4:
b2:b3:0c:50:85:8d:76:ab:9f:8f:be:e3:89:b2:65:
59:52:fd:36:fe:ae:07:a6:35:f3:5e:8f:d3:24:11:
3a:90:16:0c:06:ff:e8:3f:b1:7c:f2:8d:dd:11:f8:
92:f1:ea:d4:0a:b1:cd:d4:96:d6:6a:4d:4b:00:46:
cf:95:ea:d4:ac:f7:74:18:24:78:61:bc:fc:1a:af:
bf:c8:0b:6e:fc:b0:56:e4:ad:ac:ad:4b:5c:f4:73:
da:a4:87:ad:94:d1:e2:2c:c1:85:74:2e:fe:c1:d1:
71:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B2:4E:3E:C4:B3:87:17:E7:F7:1B:0E:81:D5:0B:76:88:03:27:14
X509v3 Authority Key Identifier:
keyid:65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3d:95:b6:e7:67:4c:a9:43:99:62:52:1e:01:ca:fd:85:15:
c1:83:21:ea:7a:d8:62:6f:e0:7c:86:70:2f:33:3f:46:33:f8:
07:79:b1:e2:64:c5:bd:7b:3f:67:62:69:60:74:33:10:f6:a6:
3e:87:c1:79:a7:a6:c6:f7:2b:fd:92:26:2a:09:3c:dc:45:4d:
7c:73:97:e6:c4:22:de:72:76:61:bd:ba:2c:96:80:df:a9:ce:
50:9e:67:91:30:5c:86:45:2e:35:ee:3d:20:dd:f4:09:47:6e:
b1:96:e4:6a:a4:38:1f:33:b8:43:ee:d3:46:7b:cd:8e:0a:9b:
ce:e5:ec:a8:e3:02:10:98:5e:79:4e:9d:f0:28:e2:ae:ea:ee:
06:37:03:7d:22:a7:58:42:52:87:2d:c7:ac:36:c8:52:9e:9b:
f0:c4:04:01:18:ef:c8:b9:d7:0f:66:88:f1:23:95:3d:69:5a:
e0:f9:8c:d4:88:03:e2:85:a5:55:c4:3a:05:ba:68:54:f7:27:
d4:05:66:f2:ce:ab:61:3c:96:09:39:2e:14:22:6b:2e:c7:9b:
37:c4:f3:29:aa:33:e0:09:95:69:0b:af:6e:11:0a:af:c5:9d:
c5:47:16:67:05:1d:26:81:5c:25:ff:9b:a1:25:06:f5:a4:99:
ea:0d:9c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:45 2025 by rpki-client