Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: q3UjQfBRX+qiBJLHMjm+hotVqC4tUE+emSJU1wtgkPo=
Subject key identifier: 68:06:31:85:27:2C:84:28:27:A6:65:EE:81:AD:BA:29:EB:80:B0:03
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 0197BEC81035B34EF3AFD02EBF34280E8CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 09CD
Signing time: Mon 30 Jun 2025 03:01:11 +0000
Manifest this update: Mon 30 Jun 2025 03:01:11 +0000
Manifest next update: Tue 01 Jul 2025 03:01:11 +0000
Files and hashes: 1: BcdGko0r03EyM3V22SJp6LUI_jg.roa (hash: 98Brzs1QQHJfWLy5qsyBt5iEFr39Rl2gjaUb1gsQClI=)
2: KnbUd5nAcObJx-mFANUZ-3dv9ZE.roa (hash: J1B+8yhPspHeU/Bm8kDFuArgnyqhlnkM76APcA7nLcw=)
3: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: OXSoAP2NyNa+00SmXHBY9/FgJUjSSI0LGN4jBl9MwWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:c8:10:35:b3:4e:f3:af:d0:2e:bf:34:28:0e:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Jun 30 03:01:11 2025 GMT
Not After : Jul 1 03:01:11 2025 GMT
Subject: CN=68063185272c842827a665ee81adba29eb80b003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:a6:ae:b7:fa:67:69:d8:f2:e4:b4:22:6d:
72:bb:b6:89:3e:68:8d:e5:c1:47:d5:45:b2:44:46:
06:b2:6d:cb:f8:23:39:7d:ab:12:45:99:13:58:00:
5f:a5:0f:3a:36:6b:57:21:19:01:15:d0:c4:ef:dc:
e8:8e:22:a5:98:91:26:9b:93:50:f5:1a:d4:1f:6e:
75:d6:ae:91:36:ac:2a:a8:41:62:84:69:35:29:53:
9b:c9:ba:2f:97:ed:d0:6d:0a:8b:9d:f1:00:27:c3:
c3:71:34:89:ec:6e:98:6a:e1:76:b4:29:af:17:5e:
b3:60:84:e6:4d:e3:43:d1:20:c3:8b:18:88:21:88:
f9:0d:d4:5c:f1:7a:eb:b6:b7:26:32:0c:0a:c0:85:
d2:9c:9d:56:5d:be:04:2c:bd:96:0a:de:e9:3e:12:
2f:cc:dc:9e:bc:c9:48:1a:3b:74:15:3f:61:3f:2c:
79:40:2e:6b:e0:26:c2:08:7a:bb:eb:ad:d3:ca:f5:
8c:c3:3b:11:85:70:57:2f:12:6e:f8:8c:25:ad:b9:
52:f0:d2:44:50:80:ad:18:85:12:60:e7:49:5a:18:
26:ca:32:5c:3f:5a:eb:0e:1b:9c:c9:47:9f:3f:15:
58:e1:05:72:7b:52:f8:b5:ec:4f:e9:42:6e:a0:3b:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:06:31:85:27:2C:84:28:27:A6:65:EE:81:AD:BA:29:EB:80:B0:03
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:71:31:a0:7b:ca:c1:b6:95:87:a2:c3:f5:ca:60:59:9a:ef:
8a:64:1b:8f:78:15:82:90:9f:b2:59:be:cc:9b:db:58:12:da:
d1:10:eb:38:d1:b0:ca:d2:ba:ad:16:94:fd:77:b3:d4:09:6d:
78:c7:e1:de:e2:19:ab:13:41:00:a0:bb:e1:76:a4:f2:bf:06:
fa:15:06:7f:3e:2e:58:19:a2:5c:07:8d:81:c9:e6:d2:9e:ce:
a5:34:bb:ce:18:3f:70:89:87:48:e7:97:20:61:42:d7:66:e5:
b1:ca:08:9a:05:04:c6:33:7a:81:17:7c:73:12:e9:95:ef:09:
e4:28:7f:81:5c:7a:16:25:a0:31:0a:e9:e2:58:89:7f:cb:24:
5e:9a:5b:53:5a:63:b8:ee:f6:dc:15:e7:7b:fd:a7:4f:65:17:
4b:a1:29:11:da:d5:49:c3:ef:a1:b2:9e:f5:d0:b0:4f:b9:9b:
8f:9b:c2:43:5b:8b:61:e4:b0:e7:4c:a9:49:e5:dd:c5:33:55:
8e:95:50:a4:99:7b:c8:67:02:78:18:01:74:b3:ec:ae:d3:69:
00:f6:5d:6a:dc:37:45:98:43:e6:4b:f7:90:5f:81:a2:9c:c0:
18:58:d8:51:5b:ec:a0:70:e1:fa:3f:b1:90:0d:d2:f2:e8:73:
0d:67:2a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:23:18 2025 by rpki-client