Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
File: ZKDbECcDCCx8pVSrtbInYAGNVj8.mft (raw, json)
Hash identifier: DoJu0+YeWlkdLXSG6XBcJWL59uFlc8C2GAFjmgqngtY=
Subject key identifier: EB:16:6D:49:C3:AF:C3:E4:57:CF:6E:98:15:A0:BA:75:7F:80:9B:B1
Authority key identifier: 64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
Certificate issuer: /CN=64a0db102703082c7ca554abb5b22760018d563f
Certificate serial: 0197B6D76739D87504E9A19958E9AD8EFF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:00:59 +0000
Manifest this update: Sat 28 Jun 2025 14:00:59 +0000
Manifest next update: Sun 29 Jun 2025 14:00:59 +0000
Files and hashes: 1: ZKDbECcDCCx8pVSrtbInYAGNVj8.crl (hash: k/kVY9r1heVyIfXC184u1Y9UeL0wuZAd4UjCZYdNCJM=)
2: tClIzpB8AXYvJfeCisA8HxpOd74.roa (hash: sXbqNinLjTETFbK42QOaktsLVCyYHDlotZvPtCRaxBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:67:39:d8:75:04:e9:a1:99:58:e9:ad:8e:ff:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a0db102703082c7ca554abb5b22760018d563f
Validity
Not Before: Jun 28 14:00:59 2025 GMT
Not After : Jun 29 14:00:59 2025 GMT
Subject: CN=eb166d49c3afc3e457cf6e9815a0ba757f809bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:de:22:f1:01:1f:38:77:84:cc:3e:9b:1c:
d2:9b:84:28:39:32:12:5b:85:60:ed:ed:08:85:22:
0c:28:cd:df:de:07:29:c5:f3:42:a7:84:43:5b:84:
21:f7:bf:1d:e5:32:d4:cc:9b:18:c3:f2:cf:87:72:
00:09:aa:7f:43:5d:89:9d:7f:e9:ea:fd:09:b4:f1:
f8:e9:28:0c:d8:26:c3:4f:b6:76:02:16:46:b9:bd:
7e:36:11:d7:0d:53:af:98:bf:4f:b3:f1:7a:3f:83:
98:77:6c:32:b1:82:f0:26:e6:29:2f:f6:19:dd:3b:
68:6c:ec:f0:4f:f8:45:06:68:9a:a4:26:f0:42:a2:
ff:3f:a8:7e:15:01:1e:6c:45:15:91:45:c1:99:3f:
26:4f:72:93:d9:84:4f:e3:39:63:9d:bd:b8:42:17:
27:dc:12:20:e0:54:b1:f0:6f:6e:47:06:f1:cd:54:
fd:f5:45:14:cf:bf:ea:43:b5:08:81:69:fc:b6:c7:
a8:42:01:25:eb:a4:64:1e:c8:37:c8:ee:b3:d3:ff:
18:f3:c7:8e:a1:95:13:ce:f5:30:aa:df:c9:b5:82:
82:b8:82:81:46:6d:db:c9:44:d6:23:f6:2d:16:fd:
54:39:19:9a:54:84:b2:03:34:cd:a5:16:89:8d:fa:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:16:6D:49:C3:AF:C3:E4:57:CF:6E:98:15:A0:BA:75:7F:80:9B:B1
X509v3 Authority Key Identifier:
keyid:64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4d:1b:50:fa:4a:50:25:b8:bf:6d:13:92:df:d9:98:79:d7:
73:00:b8:1b:9a:dc:46:18:1e:1a:1b:b5:34:f1:cd:5c:97:a7:
9b:c1:99:14:1e:ac:28:19:6e:38:23:03:44:95:85:d6:db:bd:
ba:d2:ff:9d:e2:69:5b:4f:cb:30:9c:02:45:fa:a1:7b:d5:ab:
09:3e:c9:4c:6b:92:97:5a:4c:1d:78:b3:b5:22:82:83:e2:1f:
4c:b3:b8:c3:4e:ec:c7:b7:5d:55:32:24:ed:9b:b2:f9:b3:3c:
1c:88:dd:d9:82:95:80:c6:78:bc:9d:3d:8c:08:bc:ee:6c:2a:
76:33:2a:44:c0:04:ae:df:c1:c2:07:64:21:84:1b:f0:81:61:
b7:c7:da:a4:26:1c:47:70:9c:b0:1e:88:f0:57:7a:79:60:49:
c5:6b:8a:50:cb:52:09:8b:34:60:70:74:89:db:f5:cd:67:95:
db:16:63:64:73:ec:2a:e3:c4:82:89:26:7a:9e:5e:66:3a:6d:
3f:93:b2:5e:24:fa:1a:76:36:5d:e4:c0:98:5e:c3:bb:60:47:
ad:c6:00:ff:6d:41:0c:56:6b:8d:79:e2:c9:a2:40:70:8c:7a:
5a:e9:b7:e3:a6:a8:34:bb:60:11:95:ac:8d:25:7b:ae:52:64:
be:25:15:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:07 2025 by rpki-client