Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: 89/wS00n6X/y2z7Jl/pRHCrTdBuKfUg4V5AHmBmB5dA=
Subject key identifier: D1:D6:74:9D:87:10:3C:C0:11:2C:52:7E:48:C3:9F:EE:D3:49:9F:38
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 01978847573269A94C725ABE6AD26433EC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 15A4
Signing time: Thu 19 Jun 2025 13:01:06 +0000
Manifest this update: Thu 19 Jun 2025 13:01:06 +0000
Manifest next update: Fri 20 Jun 2025 13:01:06 +0000
Files and hashes: 1: 4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa (hash: 188bZwTUrt3prH8kliJVWf+ZzLbMtaC8U5VcRX/YSdk=)
2: 6To_-SlMxz3YG0ptLY8TCmc3uqU.roa (hash: uJB/UZHKN4C9IojJMtedYn8sR+djAWZ0k/CyzWBoJ6E=)
3: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: z4OtTn4klstKcau/Oiqwq57Hr9Tpv+tuduN/iWE1JG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:47:57:32:69:a9:4c:72:5a:be:6a:d2:64:33:ec:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Jun 19 13:01:06 2025 GMT
Not After : Jun 20 13:01:06 2025 GMT
Subject: CN=d1d6749d87103cc0112c527e48c39feed3499f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:97:f7:81:ab:25:40:d9:b9:ab:cf:6f:69:35:
a0:48:06:ef:fc:cd:aa:29:81:a6:17:1f:96:57:6b:
9a:f9:89:c9:a0:17:36:a4:41:58:52:30:86:74:d3:
c0:46:a4:4e:bb:ac:b1:f6:97:8b:24:7d:79:13:c4:
f6:b1:79:a7:a1:62:17:03:29:f2:26:8e:58:16:7f:
75:73:10:b2:9d:97:6c:6d:4b:a0:32:98:7b:36:94:
24:c5:30:49:8d:93:cc:c7:6c:9a:03:8f:7c:30:e3:
bd:02:e7:a9:17:b1:71:a4:27:33:8b:b5:0e:7e:eb:
25:d4:4e:2a:f9:ee:8f:5c:2f:66:38:39:75:ef:76:
2c:8c:48:bc:6b:8f:b0:ed:ec:9e:17:21:90:65:57:
78:2d:2c:50:25:03:e5:80:7f:8a:e2:02:60:5e:4e:
4c:d9:a5:52:03:44:4b:5c:79:ad:9c:41:83:b4:41:
bd:7f:0c:f1:f8:60:13:3d:e8:0d:6a:3e:1d:52:b9:
3a:65:cd:ec:c3:b1:47:a5:80:ac:e8:94:4e:84:0b:
06:c8:d8:34:c3:cd:6a:82:1e:a9:d7:19:c3:78:33:
d9:b8:2e:db:c4:3c:f5:b0:ee:82:20:e4:96:bd:4f:
ea:5a:27:dd:4b:e7:a0:64:b8:37:f6:7d:2c:c2:1e:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D6:74:9D:87:10:3C:C0:11:2C:52:7E:48:C3:9F:EE:D3:49:9F:38
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e5:5b:74:a3:4d:c5:12:1c:ce:d6:81:3c:96:b0:b4:f0:c9:
5f:c8:5d:5c:06:c9:7f:d7:f6:8b:08:d6:60:c7:cb:58:f3:e9:
9a:99:ab:c8:f5:5e:66:4e:82:e4:08:c9:47:12:61:16:b1:15:
02:1f:93:46:d8:f8:02:07:62:39:7f:28:f8:94:5d:e0:da:e5:
b4:ec:e2:78:ec:f5:d9:8e:2e:93:8a:70:69:4e:cc:48:20:b6:
7a:c5:57:ce:98:78:98:f3:4e:54:da:38:4d:7f:b5:74:ab:49:
bc:26:ca:54:32:e3:50:65:3f:42:63:6f:9f:5c:80:7b:62:a4:
8b:09:b1:6b:8a:e6:d7:dc:44:51:75:42:c6:3e:20:a5:6e:d2:
28:62:c6:cb:4b:49:93:cf:b1:eb:6c:14:a6:cc:77:31:b7:60:
7c:92:cb:86:5d:1f:10:a6:71:b7:76:e8:ea:74:01:43:dc:46:
54:a8:3e:7b:59:7d:db:cf:e1:7b:9e:ee:7c:f2:ce:25:62:0c:
80:76:4d:4c:88:12:a7:e4:07:13:0b:22:5f:4f:62:79:ac:cc:
70:de:d8:b7:4d:91:2f:60:43:44:d2:cc:46:d5:d5:9a:66:6e:
0b:2a:d9:a9:97:0a:22:ac:83:73:f3:a1:d8:b1:31:90:20:18:
45:0e:9b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:47:19 2025 by rpki-client