Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File: ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier: 72qrw3lAQmXNnaj/oM+L7LWEzrjlJBUt+s+kNwWNv08=
Subject key identifier: 6F:59:BF:A7:95:B6:62:5B:1A:20:6E:AF:2E:29:C8:07:C6:DC:96:74
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial: 019873E2195EE1CCC16080EAAA591874606F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:00:54 +0000
Manifest this update: Mon 04 Aug 2025 07:00:54 +0000
Manifest next update: Tue 05 Aug 2025 07:00:54 +0000
Files and hashes: 1: 4D_rZ45BYofG_PKX7NdD5oQoUdM.roa (hash: 8wujCBX6hI1Ut+YVGttUi2MlgiyCoDf/nLWfLC5wQhA=)
2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: tWv7J/yeCoYb03SxU7BNPX01RofVADEpFty6K0qxU1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:19:5e:e1:cc:c1:60:80:ea:aa:59:18:74:60:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Validity
Not Before: Aug 4 07:00:54 2025 GMT
Not After : Aug 5 07:00:54 2025 GMT
Subject: CN=6f59bfa795b6625b1a206eaf2e29c807c6dc9674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:1b:93:30:03:57:3d:33:cb:0f:84:c7:08:
eb:36:22:0f:a6:79:44:e2:4a:35:fd:0d:f7:18:e4:
dc:0e:06:cd:6c:eb:48:68:e2:f9:22:d1:97:2f:f1:
f5:01:07:49:5f:37:30:17:3e:17:66:96:50:a6:1e:
ef:96:23:06:01:72:89:56:d1:4f:dd:7e:de:99:87:
d8:9b:ba:97:47:38:39:c1:67:e1:66:b9:30:9f:19:
dd:63:1b:1a:78:8d:b2:8f:9c:cd:e6:30:77:30:b7:
97:36:29:26:a7:9e:bd:fc:16:22:1e:48:32:74:58:
28:fb:76:8b:00:6a:34:46:9e:7a:c6:40:b6:cf:e6:
22:70:54:68:0d:45:23:0a:ad:dc:7c:ed:4e:5a:6e:
1c:e5:60:9c:aa:0d:37:b1:9d:52:0e:fd:fb:8e:ad:
b1:63:ae:83:9b:0c:45:08:b1:fa:39:de:01:01:93:
bf:0d:e5:c4:1d:1e:cf:70:3c:7c:d1:81:62:ce:91:
07:74:ac:fa:5a:fd:13:68:88:1f:06:61:12:a8:17:
c3:70:8a:89:53:52:b4:64:5a:61:c2:bc:aa:c5:51:
14:83:03:96:5c:c7:b3:a9:08:4e:a3:f2:a7:ef:2d:
f7:ec:aa:73:b3:8e:04:18:b5:f6:02:63:f3:00:40:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:59:BF:A7:95:B6:62:5B:1A:20:6E:AF:2E:29:C8:07:C6:DC:96:74
X509v3 Authority Key Identifier:
keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1b:c9:48:99:63:57:1c:5d:b9:d7:16:bd:e5:47:2c:b9:4d:
58:01:e8:99:f4:99:e3:9a:94:a2:ac:b3:dd:fb:04:fb:4f:b0:
ed:7d:68:fa:86:51:a5:99:ae:bd:1a:cc:53:f2:ac:1e:db:75:
08:ec:50:43:4d:4e:3a:ff:ba:d1:54:76:59:3e:cc:fb:b8:60:
15:b6:7a:b3:51:6c:e5:4f:e7:38:04:b8:d1:26:6c:88:53:0a:
e1:f2:16:0c:d7:61:c5:83:ac:a6:d7:48:79:cc:03:99:6b:8b:
a4:30:f7:e7:83:24:0f:f4:4a:26:c7:fd:80:4d:05:7d:11:16:
68:52:8e:77:98:f4:2b:91:34:9d:de:2f:29:41:9c:3f:30:fa:
ff:11:65:24:bb:9d:9e:a5:47:01:0c:5a:b0:78:a0:c0:38:79:
f6:12:63:f5:50:83:a1:f8:a8:a8:04:3a:a1:28:d1:97:fb:e8:
7a:a1:9b:3a:fd:30:e3:98:fc:df:9a:16:ca:a8:27:f2:78:0a:
30:df:01:fb:5d:f9:7d:77:62:72:b3:6a:73:c2:54:3c:a3:72:
24:b3:35:dd:e8:8a:ad:16:4e:ec:4f:46:08:f3:c1:bf:a8:5e:
8d:f6:65:d1:f6:35:a6:1e:02:1a:bb:c4:d8:5b:d0:4d:83:ec:
ab:05:86:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:13 2025 by rpki-client