Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: CRfkEb52+1eF5n3bl6WYxIRmJ8rKFY87Agl+B1QyCtI=
Subject key identifier: AE:36:95:19:47:52:9D:8D:E2:24:38:A3:BB:34:CD:01:D7:19:EC:32
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 01976A05ECFE074CAE890D5BE2233640F269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 02D1
Signing time: Fri 13 Jun 2025 16:01:02 +0000
Manifest this update: Fri 13 Jun 2025 16:01:02 +0000
Manifest next update: Sat 14 Jun 2025 16:01:02 +0000
Files and hashes: 1: JBec802FdcKabjY28XiR5H1LtHE.roa (hash: K48XffcS0X6Fp6KuIpuhXGlT+fph47E9cUUhQv9Lq8o=)
2: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: eVQzLwro3UuijDeziKSQWg12bktqGVCLZ7J/mKc1aPI=)
3: sH_MU-dLONCSS2liGOTF8yFjBic.roa (hash: bC4qlhF2mIa5vONZeQi20o6xvZPm50Q6MktLj7FF2Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:ec:fe:07:4c:ae:89:0d:5b:e2:23:36:40:f2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Jun 13 16:01:02 2025 GMT
Not After : Jun 14 16:01:02 2025 GMT
Subject: CN=ae36951947529d8de22438a3bb34cd01d719ec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:1e:3e:15:0d:05:d1:dc:41:87:79:87:81:
be:2c:fe:5a:4d:84:b0:43:b5:f3:03:3c:1c:f2:90:
63:f1:d1:a0:21:18:b6:a1:40:96:69:ef:66:cc:75:
d7:c9:06:3f:fd:81:16:2e:4a:0e:74:04:b0:6a:50:
72:90:2e:8c:42:5f:b1:c8:7f:78:9d:41:6d:a8:83:
9f:3e:0b:e0:1b:1e:90:a1:36:11:80:76:e4:6f:b0:
4d:a9:32:39:0e:68:95:85:f0:24:db:f2:b9:71:58:
4a:1b:be:c2:ab:03:48:10:97:b2:2b:b0:2e:bc:b6:
9d:63:4c:a2:5f:29:6e:64:af:9c:49:2e:89:94:f9:
9f:c7:47:5e:b3:7d:cc:18:c8:9a:ea:88:b9:b5:d2:
f9:45:fb:c3:84:03:a7:53:87:ff:f8:72:a4:62:78:
1f:29:4c:aa:1a:5d:e4:1a:c0:39:bf:40:b2:ae:5b:
aa:e0:9f:85:93:90:60:ce:26:69:e0:cc:63:21:16:
8a:f3:5c:c7:00:1e:2f:73:a5:c5:a0:db:9f:4f:58:
3a:97:d3:1f:9f:da:df:ea:69:2b:a7:73:8e:b0:18:
b8:26:c4:84:b4:e0:90:68:44:19:15:90:7e:b2:fa:
20:3c:4e:34:b3:7e:05:9c:9c:5c:e5:d5:24:6f:3f:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:36:95:19:47:52:9D:8D:E2:24:38:A3:BB:34:CD:01:D7:19:EC:32
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:82:af:6e:3f:38:8a:50:b5:b4:7e:9f:9d:5e:8f:6e:62:19:
e3:54:d5:fa:12:fd:be:ef:ad:7c:f4:5f:19:3e:d2:a0:ac:7c:
9d:8a:19:c7:ff:a0:38:f6:8b:5a:8f:23:9e:7b:25:23:16:23:
e5:d6:23:ab:04:a4:2a:f1:cf:de:f4:1e:15:44:cc:9b:d6:e6:
d5:6b:2f:36:17:59:45:c7:a4:45:14:85:d4:08:2c:65:d4:e3:
25:46:f2:27:c0:ac:9f:07:13:a0:70:e2:6e:bf:1b:2b:c3:c0:
dd:cc:a7:60:ad:fe:8c:fa:58:59:91:7a:a0:78:b8:24:e9:c2:
4e:ed:1a:ee:53:28:ed:61:ea:af:96:d0:5f:f6:7f:11:cc:9a:
96:88:54:f3:8a:0e:b9:de:38:01:6c:b2:ea:df:af:ea:9d:ea:
61:cc:52:0d:ee:5e:39:68:97:18:59:92:cc:79:f3:71:40:f9:
97:ee:41:ba:c4:03:53:55:60:30:24:d5:11:7a:37:f9:9f:8a:
41:b6:99:68:a2:b9:a5:49:f0:9a:6a:73:fc:6b:19:b5:b6:b1:
fa:e1:af:82:09:10:5f:b6:cb:e7:3a:ec:a0:ad:22:c0:50:84:
e3:32:62:cc:7c:05:67:6f:64:f6:40:b9:8a:1d:30:d4:12:a8:
7d:91:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:43 2025 by rpki-client