Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: YbXuKT1FJn2OBUhSqHU2Lk6EIGWISWgZa7s7a9hKrvs=
Subject key identifier: 78:F5:27:51:A6:D7:46:1F:0E:FA:0C:A7:CE:A9:C3:F7:F6:62:4B:2B
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 0197684E96331FB9FB04ADB03163EFACB6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 0E56
Signing time: Fri 13 Jun 2025 08:01:10 +0000
Manifest this update: Fri 13 Jun 2025 08:01:10 +0000
Manifest next update: Sat 14 Jun 2025 08:01:10 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: FFTiJKJd/eulw9E6F19PrW2QVJdrFBpyopFYcaFFPiI=)
2: v7McWGmC6x_jve8hO4dvjOUzDnU.roa (hash: pEIX+2zdNDbAjQYiraeVFcmiQz+0WDogJaC+EZR5c2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:96:33:1f:b9:fb:04:ad:b0:31:63:ef:ac:b6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Jun 13 08:01:10 2025 GMT
Not After : Jun 14 08:01:10 2025 GMT
Subject: CN=78f52751a6d7461f0efa0ca7cea9c3f7f6624b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:98:45:43:4d:ac:cb:c6:51:90:5f:69:ea:b9:
cf:43:ff:4e:39:77:a3:2c:96:54:4e:ee:fb:e4:63:
16:cb:b8:29:dd:ea:d3:8d:c2:5b:10:2f:1e:74:e7:
c8:8b:fc:0f:5a:9a:2e:37:c5:3b:02:78:99:60:b1:
6c:cc:3b:47:5d:b0:dc:81:42:eb:04:c6:5b:73:29:
cd:4f:c3:43:ff:6e:8f:31:d9:77:1f:5e:41:01:19:
5a:01:3f:a5:18:29:21:84:48:98:4c:37:0d:78:18:
b9:96:22:96:1b:6a:e2:b5:54:49:51:9e:75:7b:75:
b8:a9:a6:e1:a8:46:36:a1:30:fc:83:d5:d1:3a:65:
fc:9a:c7:e5:6b:5c:85:07:48:38:fe:07:c2:d3:da:
44:38:f8:2c:e4:28:9e:26:ec:7e:1e:9d:2f:85:1b:
6b:59:49:33:07:18:cf:ea:83:a8:9e:23:85:32:e5:
73:5a:e7:8e:46:c6:a9:51:2a:a0:49:70:97:57:b0:
c0:19:7f:66:89:59:c1:36:9a:a1:8d:1a:7d:18:20:
27:e2:b7:c3:27:1a:8d:c0:0d:1b:00:2d:94:00:7d:
2d:9e:b0:68:a0:2e:a7:cb:85:bd:e3:29:0e:e6:b1:
94:3d:84:c6:bc:cb:11:65:4c:99:ac:fa:5e:75:65:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F5:27:51:A6:D7:46:1F:0E:FA:0C:A7:CE:A9:C3:F7:F6:62:4B:2B
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:00:57:d6:db:31:2a:98:ac:60:fa:b6:ee:44:f2:8f:6a:6a:
97:72:7b:88:84:09:22:f3:7d:f2:e2:48:4c:97:94:02:95:42:
e3:34:7a:64:09:74:1f:1b:14:07:43:28:1e:df:8f:15:f7:40:
fa:9a:e6:56:7a:1e:73:ea:d9:cc:65:41:f9:36:49:4a:ae:db:
2c:14:96:f3:94:84:73:4f:65:a8:5e:ac:43:7a:23:8f:b4:96:
63:e2:18:59:a3:13:84:b4:e6:7b:29:96:f9:00:8e:cf:f3:41:
36:2a:71:3d:f2:ee:4c:88:7e:97:dc:e1:31:ac:df:67:f0:38:
66:0a:30:49:62:32:de:df:de:f6:87:2e:42:24:6a:3c:38:49:
16:38:50:98:81:b0:0d:d7:27:12:66:90:3c:6f:64:ae:36:ec:
74:ad:b8:df:51:a8:e9:53:3c:71:42:34:e6:e3:f9:ba:dc:dc:
e7:6d:c7:76:1b:ce:3c:ee:e0:31:c4:83:19:da:33:ab:e1:8d:
13:a4:01:bf:54:9b:e6:b2:70:3f:51:e0:d7:36:46:71:e5:eb:
24:7f:08:2c:0c:ad:27:f6:44:09:a5:98:50:04:37:cf:41:88:
fe:11:4f:8e:b9:c2:d2:cc:f4:ef:8c:67:63:21:69:e8:4e:41:
1c:5f:5e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:13 2025 by rpki-client