Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier: IYyQr19CJYFCxqhwRM6em24zu5sXV3hcddZVvM8/IVY=
Subject key identifier: 9D:B9:09:DE:8D:98:55:57:D3:5C:F3:57:A4:28:9D:2D:83:C5:DC:76
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 019776E55A8C68AF77A8390624ACA1254155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number: 1294
Signing time: Mon 16 Jun 2025 04:00:31 +0000
Manifest this update: Mon 16 Jun 2025 04:00:31 +0000
Manifest next update: Tue 17 Jun 2025 04:00:31 +0000
Files and hashes: 1: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: XnvkwIr9ECi+/5gccZOn2jRZTMg/6CPx5HfY2CQDm20=)
2: _3NEeq6GOXOiLdZdEWjfBKtdhh8.roa (hash: pTgzQ3b72uIy4BLhpeJN6uHM+SJH/WDu+3JWOoF47hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:5a:8c:68:af:77:a8:39:06:24:ac:a1:25:41:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Jun 16 04:00:31 2025 GMT
Not After : Jun 17 04:00:31 2025 GMT
Subject: CN=9db909de8d985557d35cf357a4289d2d83c5dc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:29:b4:23:cb:3a:a6:9c:bb:94:71:9e:49:
33:60:28:c8:83:f0:be:fc:dd:fa:f4:f4:98:a8:15:
00:71:b6:3f:95:b9:56:de:63:d1:59:43:b9:ff:06:
2f:af:54:e0:e7:cb:9a:27:cd:38:69:04:6c:fa:f6:
e0:21:a9:f9:c9:a4:f0:3f:86:74:08:6c:4f:27:bc:
68:74:3a:29:d9:ae:e4:8c:10:4a:44:5e:e8:25:27:
4e:33:58:3a:12:1f:bf:6e:0b:e5:20:7b:35:90:35:
ba:7a:5e:09:73:55:83:0c:5d:bc:7b:d9:19:4b:fa:
21:d0:a7:3e:0b:e1:b1:c1:08:d5:d1:a6:e8:9d:d2:
f4:b2:c8:f0:9b:15:98:ee:f8:e4:20:21:12:10:3d:
0e:e0:70:59:24:c2:e7:28:02:b3:4e:cc:27:88:9e:
4e:ec:5e:00:ee:12:1e:6f:4a:eb:78:6a:04:2b:40:
83:a9:3f:08:24:42:26:d1:61:93:46:37:2c:2e:82:
c2:b8:31:43:4e:da:46:4b:80:8f:f0:85:b2:8e:e3:
e1:26:28:f2:7e:da:2b:22:04:93:c4:cc:09:f1:7e:
46:e3:1b:27:a1:c7:3b:e7:4a:70:56:ef:30:21:89:
c0:50:e3:57:03:72:cd:7f:c2:7f:dd:e3:c5:e7:cc:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B9:09:DE:8D:98:55:57:D3:5C:F3:57:A4:28:9D:2D:83:C5:DC:76
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:58:a6:7b:81:5d:b4:5f:b7:2f:45:a8:77:fa:78:04:9b:f8:
fc:3e:d9:e7:c4:86:d1:f5:18:2a:2c:f2:47:92:e1:ff:93:af:
1b:a3:39:9f:c9:ab:62:1a:16:d3:75:c0:25:5a:6d:77:7c:f7:
ae:0d:85:3c:d1:fb:51:50:17:e8:37:10:e6:96:b2:3a:fe:7a:
b7:6a:ef:6d:e2:f6:fb:ec:ac:fd:46:6e:97:7b:53:18:e6:6a:
f3:cb:15:fc:29:9b:20:c2:14:e8:73:2f:e1:3d:7a:e7:b1:9f:
64:6f:7a:66:87:ff:25:51:5b:f9:e3:9c:7f:33:67:ae:ff:11:
b2:67:83:c1:6b:4e:16:07:ac:b6:06:76:c7:07:4a:fe:b9:c5:
d8:8b:22:9e:03:d7:23:8d:99:f1:40:11:2c:db:1f:e4:4b:c6:
eb:34:c2:02:d6:42:6a:a4:eb:f3:b7:64:de:37:1e:f1:45:51:
a7:83:28:65:60:31:bb:0c:0b:19:43:ce:98:e0:1a:69:12:eb:
c4:5d:d5:f2:89:11:67:f8:66:9e:d1:97:7b:80:26:52:9a:32:
54:93:04:e1:a4:c5:69:ed:41:c4:6f:76:1b:56:f3:0a:71:b7:
aa:d1:b6:16:55:3c:f7:b2:fa:fc:44:64:41:76:8d:61:ad:8b:
51:7b:da:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:30:53 2025 by rpki-client