Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: 6kExGe6+h10L+fMCR99tATBJdQKAhw81UPxrPKBLxCs=
Subject key identifier: 07:E9:D8:1D:69:40:ED:09:CC:55:CE:D8:A5:66:E9:BB:51:6C:FB:B4
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 01976E1998AF2D6CA26148323676289DB379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 11:01:00 +0000
Manifest this update: Sat 14 Jun 2025 11:01:00 +0000
Manifest next update: Sun 15 Jun 2025 11:01:00 +0000
Files and hashes: 1: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: isnpQpimTYsn2leCOwiv3L7P5A4sQmAf99oE8GkttHI=)
2: y6XKa07TTPMFsjvwx8e568cVXPU.roa (hash: C/iy2HFJBUXxZmfuDRQqFLZ88BpL9CevYMYDHGoS6P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:98:af:2d:6c:a2:61:48:32:36:76:28:9d:b3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Jun 14 11:01:00 2025 GMT
Not After : Jun 15 11:01:00 2025 GMT
Subject: CN=07e9d81d6940ed09cc55ced8a566e9bb516cfbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:d2:f4:d6:5b:98:f3:d5:a7:bc:6e:aa:22:
0c:c3:41:62:05:81:13:41:7f:35:1c:a1:9b:41:c4:
71:fc:c3:d6:54:1f:6c:05:2f:c6:67:89:01:e4:99:
00:fd:84:47:15:bd:39:ac:16:da:bb:0e:43:71:0b:
39:26:8e:13:6a:c1:4a:62:a4:41:a6:d0:3f:db:69:
cb:6a:a5:74:f6:05:16:3c:f3:f6:33:79:46:5e:85:
cc:e5:39:5e:c1:ee:aa:d7:db:68:fe:8c:a7:ca:2d:
ec:26:16:60:d4:5b:a9:c4:93:8c:67:7a:11:b1:93:
e6:3f:ee:fc:1c:d7:08:bc:5b:9e:65:95:24:47:ca:
95:67:54:bf:33:17:7a:d7:f5:59:25:6c:6b:26:9c:
03:fe:82:28:4c:2a:47:de:55:a1:b6:d7:a1:2c:7d:
c8:bd:51:79:d1:74:60:c8:00:f9:7e:2b:96:4d:13:
30:9f:98:50:45:9c:73:6e:5b:f2:52:11:13:ae:5f:
8f:ad:4a:de:f2:05:3d:47:f6:1e:7c:fb:1a:4a:16:
51:ad:8a:04:93:63:4e:e8:51:34:ac:b6:fd:47:16:
b8:e3:0b:37:07:78:6f:eb:49:37:18:3f:3c:30:b7:
74:4d:4b:aa:a5:18:81:5a:06:f3:5c:c9:a8:b2:2b:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E9:D8:1D:69:40:ED:09:CC:55:CE:D8:A5:66:E9:BB:51:6C:FB:B4
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:79:a8:cf:f2:d9:3a:2b:c7:18:c4:ae:88:0a:7d:21:c6:ef:
59:db:79:68:80:b9:15:9a:fe:d8:04:a2:73:d8:06:a6:76:97:
e8:50:7f:54:52:03:87:d9:f1:34:35:eb:6b:80:84:ea:17:67:
0e:84:ec:64:ab:45:c8:18:d2:fd:4b:af:9f:ca:13:2f:1d:23:
8f:69:58:f3:4e:7f:6e:0c:a7:a3:40:97:45:7e:3f:f1:af:d9:
74:25:d5:07:fa:9f:0c:66:97:a1:27:d1:05:3e:61:fa:92:05:
1d:df:6d:87:fd:96:00:9e:7e:dc:18:d5:94:78:d6:44:5c:e4:
9a:5a:45:93:fd:f1:d4:a6:fc:73:8a:cb:63:f5:fc:ff:76:1f:
3b:1c:55:d5:0d:4e:95:f2:16:c9:92:8f:4d:5b:80:61:c9:39:
f2:eb:94:eb:05:5c:f9:ea:8f:aa:43:a7:60:6f:2b:16:1d:d2:
e7:48:aa:ee:8a:65:90:82:93:ad:c0:8f:d9:5e:8d:33:58:dc:
73:77:ba:01:9a:d4:f2:f8:4d:f4:b1:d7:d0:7b:db:df:33:af:
42:0c:42:f7:14:cf:4d:e9:9e:51:fe:fe:8f:d4:a3:fd:eb:9e:
d8:68:89:69:19:07:ec:8d:e4:e1:72:1f:46:9d:94:21:8b:6b:
ee:ac:65:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:56:02 2025 by rpki-client