Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
File: ZrB43tN1kjDKLho76QZjjRMGuQg.mft (raw, json)
Hash identifier: bfTibsylyftjlU+ztg9l7ABW0al6anyJL5j+GihM1fk=
Subject key identifier: 24:27:C4:42:D3:23:8B:6F:F3:2B:7B:13:34:9B:DE:3A:33:91:66:9B
Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908
Certificate serial: 01976C6243FBB4A9F7F0C19B4871562EDCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
Manifest number: 08D5
Signing time: Sat 14 Jun 2025 03:01:08 +0000
Manifest this update: Sat 14 Jun 2025 03:01:08 +0000
Manifest next update: Sun 15 Jun 2025 03:01:08 +0000
Files and hashes: 1: ZrB43tN1kjDKLho76QZjjRMGuQg.crl (hash: wbTFevYGuLNI4GG0d8tX/vi1R5yn1V7u185qW5oloVc=)
2: mHxy9rJdZpH5hrd46ZQbudzuLF8.roa (hash: xwokQPLLEdy+DbSgYqJ8Dht6nsu849d5eiNxGGm9TUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:43:fb:b4:a9:f7:f0:c1:9b:48:71:56:2e:dc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908
Validity
Not Before: Jun 14 03:01:08 2025 GMT
Not After : Jun 15 03:01:08 2025 GMT
Subject: CN=2427c442d3238b6ff32b7b13349bde3a3391669b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e0:ab:7b:7a:7e:62:72:c8:3c:fa:72:01:c2:
05:e9:28:fb:cc:97:a8:c1:e6:cc:c8:22:b4:94:cd:
30:5e:45:fe:c3:2d:8a:0c:5b:ff:db:68:5a:1d:b1:
5a:e7:9a:18:2d:da:e6:f0:f1:a3:9e:ae:ab:17:45:
4d:80:4f:69:f9:0e:26:e7:3e:3a:3f:60:9a:a2:94:
c9:97:97:89:2b:e8:f8:59:03:59:55:ec:65:ba:fb:
0d:25:dc:e4:cb:11:84:ee:3d:5d:9f:52:1c:46:e5:
21:70:7e:43:6a:d6:0e:c4:d0:dc:b9:43:34:65:96:
3f:ea:b8:2b:03:c2:5c:71:d0:77:55:ed:ee:07:82:
28:a4:52:57:f7:d7:65:2e:df:ec:98:79:24:6f:b6:
00:b8:03:24:7b:ec:cd:38:86:aa:0e:04:fa:88:5e:
23:17:14:58:95:cc:97:9e:e9:02:01:85:c3:71:71:
9d:ca:68:f7:bf:dd:c3:94:3c:21:4a:a9:e0:53:b5:
8a:b5:c5:62:70:f9:d9:05:e7:b0:30:65:cc:67:d8:
93:5a:7f:1b:95:ad:43:e2:23:3b:d2:8d:b2:89:5d:
a0:ee:eb:7d:2b:ea:11:4d:5e:f1:09:e5:f2:de:6f:
93:e6:a6:f6:dd:f0:99:54:5e:37:98:4e:af:2a:55:
67:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:27:C4:42:D3:23:8B:6F:F3:2B:7B:13:34:9B:DE:3A:33:91:66:9B
X509v3 Authority Key Identifier:
keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d4:06:e6:d3:af:23:0e:85:78:eb:8a:1d:ad:d2:23:c1:5e:
e5:dd:48:5a:c3:67:80:09:e5:4e:b9:df:25:31:db:01:be:72:
f7:4e:01:22:19:e9:5f:ac:c9:a7:bf:69:f7:04:40:4c:99:d6:
e4:96:a3:b5:96:82:52:9c:a9:be:e9:42:ab:20:96:2a:f5:de:
3c:d1:1d:69:6d:db:70:81:bb:29:ed:87:c8:5c:03:ac:b8:cc:
91:c7:18:6f:fb:80:6c:e7:ab:c4:0e:aa:b8:4e:fc:ce:fe:58:
43:15:17:63:91:f8:68:1e:84:e8:bc:b3:3b:37:31:3d:f8:a9:
82:b0:d7:31:57:4f:3f:c1:f9:d4:60:32:55:06:0c:c3:04:a6:
a7:00:34:a3:fb:2d:27:30:21:d6:ab:57:3e:68:fa:6a:0d:7c:
7e:14:44:99:44:e8:74:91:02:a7:ba:0e:84:2a:65:d0:24:e0:
9f:83:14:73:c7:27:a0:db:e0:58:62:d2:ae:f6:87:7f:f4:38:
f2:d9:25:05:4f:f7:29:94:a5:7e:5c:28:02:a2:c1:9d:4c:84:
89:80:2e:b2:4b:d1:1c:d9:03:ad:6a:d4:ad:89:ba:93:12:c3:
b2:ef:f1:8d:7a:15:ee:34:f5:54:94:62:eb:24:d3:2c:25:df:
36:ea:66:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:30:07 2025 by rpki-client