Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: 7uoSg/cP546sc9Pg0T0clX3eHvz6h0y5fxDa8cEiWG0=
Subject key identifier: 04:D1:3A:19:80:CD:27:E3:42:5C:14:FD:03:6D:1B:11:6B:9B:11:E8
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 0197B5FBAC006B3A5A7C77B44EC5B2DBB34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 10:00:58 +0000
Manifest this update: Sat 28 Jun 2025 10:00:58 +0000
Manifest next update: Sun 29 Jun 2025 10:00:58 +0000
Files and hashes: 1: EGFdZlaTjbOVYClf_Y2avAhZpcQ.roa (hash: x3O5tXnddOP1tRMR1naKV9GJx9HqGBOVan7EV3M3azI=)
2: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: TtZmSL4YKdF6fCJ9Qv+8LSzVXQf/LvBu0a1AkZitETQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:ac:00:6b:3a:5a:7c:77:b4:4e:c5:b2:db:b3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Jun 28 10:00:58 2025 GMT
Not After : Jun 29 10:00:58 2025 GMT
Subject: CN=04d13a1980cd27e3425c14fd036d1b116b9b11e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:e2:73:95:b2:03:88:ef:0e:b5:c9:11:01:
e5:02:73:57:c0:6e:3e:e2:4e:c5:d2:03:1f:35:ce:
a4:e3:81:71:37:b3:0f:38:f5:97:d5:93:35:db:7a:
6b:09:f4:70:73:f4:90:ba:2a:ff:90:cb:14:08:24:
74:01:a8:91:51:9e:28:b9:55:2f:9e:c6:ae:7b:f1:
19:aa:6d:35:af:09:aa:5b:64:3f:9d:a8:51:f1:64:
6b:37:cf:2c:04:49:77:fd:db:8d:a1:27:5a:2e:48:
1a:15:d5:c5:51:d7:81:83:4f:1f:d9:13:22:37:c9:
e1:8a:de:30:c9:08:98:e6:09:90:87:39:63:08:85:
85:b5:5c:a7:19:2f:ca:e4:a7:c6:08:25:40:6c:3f:
3a:45:ad:5c:de:61:6a:42:0d:82:f1:cf:6f:e7:1f:
56:00:2b:02:b1:4d:59:56:21:ea:61:f2:43:49:1c:
17:cc:e6:55:3c:01:9e:a9:70:60:2d:85:3a:5d:13:
40:12:e6:88:16:84:a1:b9:da:f4:ac:59:40:a5:c5:
1f:67:3c:38:fe:c9:2a:b9:31:f4:08:6a:d8:42:5b:
b1:6e:0f:09:79:9c:37:d6:ed:d9:2e:60:38:56:c9:
69:3f:a5:9f:b5:e6:7b:a4:fb:36:e8:a4:b1:f4:cf:
f5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D1:3A:19:80:CD:27:E3:42:5C:14:FD:03:6D:1B:11:6B:9B:11:E8
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:96:46:30:50:e6:f4:34:2a:da:d4:25:0b:d9:99:85:f9:56:
ea:19:cd:a8:34:55:e5:09:62:11:69:63:7d:59:f8:50:38:85:
e8:24:6d:e7:80:c8:ad:ce:e4:c2:f0:9b:56:b4:a3:94:24:06:
44:d7:95:c7:8a:9e:07:c5:f5:43:8f:74:8f:e7:ab:c9:dc:c8:
3b:a7:3f:2b:15:d4:8e:bb:3e:2d:53:1c:b5:48:86:d0:58:de:
73:e2:28:e6:1d:b4:8e:2c:8d:c7:85:48:c4:31:3b:7d:ab:2a:
e5:c1:3e:99:40:4a:e4:61:f2:a9:81:df:9c:ac:93:f7:c6:4c:
2e:55:19:84:b9:e8:1a:2d:12:50:20:e3:31:b8:dd:d2:3e:74:
cc:e2:3b:e7:66:2a:52:69:da:c1:d7:21:9f:57:f9:e7:4c:e2:
f3:da:2b:e5:03:2c:fa:4f:39:b3:57:65:53:24:0c:e5:d9:a1:
ad:66:57:1c:14:48:0d:fa:62:28:78:85:da:86:49:33:fe:06:
0f:b6:1d:8c:56:29:df:03:e4:fa:0a:03:e5:75:ed:03:dd:fe:
9c:97:46:12:5a:61:4a:17:80:fd:6b:c5:76:f9:55:cc:8d:fd:
a1:f0:c5:92:75:26:f8:c4:a0:24:2e:eb:6a:3d:8a:4b:4e:86:
fd:fb:36:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:25 2025 by rpki-client