Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
File: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft (raw, json)
Hash identifier: R34o6La+ulCz3QVaoaBRzrYsmgzzgGz//FOXE4ad0Qs=
Subject key identifier: DA:EB:FA:99:B8:FA:0B:0B:D2:90:34:2D:1B:58:6A:DC:DD:79:F6:18
Authority key identifier: 64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
Certificate issuer: /CN=64a7a6cd583814d393bee2635b545574cc75620c
Certificate serial: 01976D3E7FE360F492CCC4D8CBC64858BE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
Manifest number: 11C1
Signing time: Sat 14 Jun 2025 07:01:41 +0000
Manifest this update: Sat 14 Jun 2025 07:01:41 +0000
Manifest next update: Sun 15 Jun 2025 07:01:41 +0000
Files and hashes: 1: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl (hash: vE+2vCXyv3sJUiBF5WsPXoP7JVrN3Laz0K1I5oR0t7Q=)
2: rJRxxRneTTHrBiouHAwe-Vj2hOM.roa (hash: pnxg6ZPXerYJRTKN22NAobx2yMJvSslv4M+/PffiHGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:7f:e3:60:f4:92:cc:c4:d8:cb:c6:48:58:be:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7a6cd583814d393bee2635b545574cc75620c
Validity
Not Before: Jun 14 07:01:41 2025 GMT
Not After : Jun 15 07:01:41 2025 GMT
Subject: CN=daebfa99b8fa0b0bd290342d1b586adcdd79f618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:ad:99:ca:0a:06:8f:d1:5a:1e:73:ba:50:
d4:e1:de:ae:0e:aa:0c:ac:24:6d:d5:6e:38:7c:13:
22:35:b7:94:c1:0a:39:5a:6e:3e:cb:da:0e:db:10:
0f:a9:59:6d:16:d9:21:11:a7:fc:ff:d3:ef:f0:87:
f7:02:2d:92:26:b0:4c:96:97:36:db:da:a3:00:83:
fe:6e:79:f0:8c:fe:46:74:95:4b:20:30:88:2e:24:
a3:34:34:0a:bc:b6:fc:29:b2:cd:9d:80:f6:e2:45:
90:a7:d6:95:dd:a9:20:38:68:16:8a:52:41:53:cb:
37:67:b7:87:32:3a:d3:f9:d9:46:a2:a5:eb:5c:54:
37:a7:dd:a6:07:c6:17:99:73:93:5d:c8:b0:97:f0:
8c:9e:fd:5b:2c:d7:28:70:15:a8:62:2b:ae:de:7d:
d9:e2:fc:f8:ea:56:8c:0d:b2:ca:0b:f5:2d:05:23:
0f:34:31:37:53:52:cd:6c:5a:97:5c:3d:2f:4d:2a:
88:d6:6e:4d:33:d1:48:14:c3:c2:88:26:22:80:06:
27:59:63:28:37:59:fe:3f:03:60:57:31:95:6f:4e:
1e:97:d4:be:72:1f:94:40:3f:1d:47:89:9a:e0:cb:
b8:92:1e:c7:6e:cb:75:00:db:e4:fd:00:d2:4e:ee:
29:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EB:FA:99:B8:FA:0B:0B:D2:90:34:2D:1B:58:6A:DC:DD:79:F6:18
X509v3 Authority Key Identifier:
keyid:64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2a:e1:14:15:42:e8:f6:98:cf:6c:21:4d:bb:fc:c8:60:df:
9a:3e:b8:eb:11:ba:ac:15:78:d6:66:9c:f6:72:60:9a:58:32:
e8:d7:31:6c:b9:67:2e:a6:ff:44:c9:f6:d2:f8:7a:59:a0:06:
a5:ae:3e:ea:f6:98:e2:00:72:9e:77:ad:6e:e0:ed:5d:bd:bf:
8a:3c:a9:a3:8c:bf:40:b6:31:c2:fa:45:9d:22:b4:e7:e6:3c:
1c:38:d4:e1:2b:24:24:ea:c6:d9:12:84:f0:9e:4c:48:3a:be:
32:e1:4c:6c:46:3f:4d:d1:bf:92:98:82:ec:1c:38:55:25:4a:
05:a2:cf:a8:43:d0:9f:ab:1f:62:2e:23:58:63:e9:f1:ef:f3:
ba:94:58:42:33:51:67:62:3e:8f:ea:11:52:36:93:f9:b0:4a:
b9:58:f8:f9:a8:ac:e0:d5:b6:0f:b0:39:60:6d:b5:e5:de:b7:
0d:6f:b2:b5:f6:69:77:f5:37:34:ef:5a:f1:05:65:66:07:c1:
d0:d7:2c:16:d7:11:4c:c1:31:a1:1f:49:c3:f7:c9:74:cc:d0:
72:f3:4f:93:68:28:87:32:73:3b:a2:35:ba:f3:fa:4d:dd:41:
ba:c2:c3:de:b0:b4:c6:eb:cd:69:41:5c:12:e6:85:ff:2a:f9:
80:00:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:18:13 2025 by rpki-client