Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
File: Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json)
Hash identifier: mT6Gz7cGE8D45ULQiy957WJainyPJxZUdg3V+47ALQM=
Subject key identifier: 2A:8F:DC:8B:19:B9:24:E9:11:96:C8:37:C5:8C:B6:30:27:28:40:BA
Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
Certificate issuer: /CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Certificate serial: 01976A05CCF5DDCD454B926924E2E99052DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
Manifest number: 0485
Signing time: Fri 13 Jun 2025 16:00:54 +0000
Manifest this update: Fri 13 Jun 2025 16:00:54 +0000
Manifest next update: Sat 14 Jun 2025 16:00:54 +0000
Files and hashes: 1: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: hOc1aqs4LL3HHhsa3qBLcQJIz8tl3vIlMldmWqP78cY=)
2: qV1VADgnM-UwMyvnzX700wlOQrY.roa (hash: fchq7gmgdQ6iV6UqjjJyNU6Y7myn1bicxh9WArTx5O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:cc:f5:dd:cd:45:4b:92:69:24:e2:e9:90:52:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Validity
Not Before: Jun 13 16:00:54 2025 GMT
Not After : Jun 14 16:00:54 2025 GMT
Subject: CN=2a8fdc8b19b924e91196c837c58cb630272840ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d7:71:53:fc:86:25:75:ba:f8:03:69:ee:16:
c9:dc:43:44:9f:6b:cc:f6:45:c2:f0:8f:ff:f0:9e:
5d:a3:e8:56:11:66:d1:4e:ae:e5:e0:da:d4:13:a9:
70:24:10:fc:53:af:39:d2:f2:9f:22:56:8a:5e:a8:
ac:95:f8:bb:34:69:db:36:05:ba:37:15:27:83:7e:
69:cb:50:da:af:c6:c3:fe:6a:cd:27:a4:78:c4:d5:
4c:79:1b:92:90:a8:1b:fd:b9:61:45:8d:36:67:4c:
a5:1c:60:87:55:75:06:1e:9e:8c:0a:fd:81:22:75:
44:e9:3c:75:ab:e4:f0:c3:8a:99:32:4f:f9:d4:50:
e0:d9:fc:73:92:96:87:28:10:87:56:f0:e0:03:d6:
96:dd:1a:ea:d2:04:9e:ba:8a:ac:8f:3d:a2:1b:95:
e8:81:4f:9f:88:9f:32:23:74:e9:ab:fe:a0:3a:e0:
f2:71:5a:78:9b:54:a7:58:a1:1f:e8:9b:ee:4f:a9:
39:72:b1:62:6d:56:46:5d:b0:c8:3e:8e:2f:e9:2e:
72:11:f3:2d:c5:f7:a7:b8:d5:d1:7a:50:56:15:25:
8f:73:1d:1a:59:c6:17:e0:0f:05:d5:b5:e3:bc:f9:
df:dd:6a:e9:80:0a:95:81:b2:50:a3:29:b5:4f:e6:
78:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8F:DC:8B:19:B9:24:E9:11:96:C8:37:C5:8C:B6:30:27:28:40:BA
X509v3 Authority Key Identifier:
keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2d:6a:34:98:27:34:fe:9c:bc:b0:c8:7b:79:51:cb:80:e4:
41:21:e9:99:f7:c5:31:35:69:c8:8e:a7:3b:f4:53:24:44:9d:
b9:df:3a:8d:b9:d0:3c:0e:16:1d:d7:c5:22:f0:29:0d:94:00:
e4:dc:24:66:a0:ef:e4:5b:f0:2c:1b:52:da:27:47:ba:30:c5:
ed:9e:cb:cd:f1:80:f3:c2:5d:d3:04:86:b0:ea:70:5d:40:18:
46:5a:48:9e:01:af:65:4c:1f:8d:ad:37:49:ec:28:5f:6e:09:
e3:c8:f9:6f:27:98:d8:4e:7d:ac:ef:4e:71:30:81:86:28:7b:
7d:0b:4c:29:ec:fe:22:98:fb:7d:c0:95:55:40:37:b1:5b:e7:
45:6e:4a:6f:46:17:ec:29:5a:88:d1:c2:38:cf:46:cf:4a:ab:
ad:a0:02:33:4d:df:56:36:9a:a9:9a:42:05:0a:41:57:58:d9:
1a:15:ee:f0:64:7f:3d:58:23:b3:82:d8:8b:cc:28:3d:a4:00:
87:e1:1b:55:ed:58:fb:2c:a9:48:1a:1e:df:6c:30:3f:4e:46:
f4:8b:4f:fa:aa:77:6c:5d:9f:35:a9:0d:ce:6b:a7:b5:2c:fa:
36:04:0a:e3:12:ab:76:a9:b4:cb:f9:3b:3b:52:3c:2f:04:14:
f9:12:00:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:01 2025 by rpki-client