Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier: PJ8+JfE4PXossHlo+MWkL4kB7NXJsG1A26K9XQlmjRA=
Subject key identifier: 07:10:D0:8B:06:EE:49:84:EE:AF:03:41:0B:48:12:BB:D7:18:77:3F
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 0197B82109077AA5BD91325BBAA1E2E86BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 20:01:01 +0000
Manifest this update: Sat 28 Jun 2025 20:01:01 +0000
Manifest next update: Sun 29 Jun 2025 20:01:01 +0000
Files and hashes: 1: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: de19QbtK6E94ZlhAhL+cAigdRZ8HHA7FGArig8P0UdI=)
2: d98mF8VuRmp24iJGNGtsA82Qm3k.roa (hash: St6m9PVExFvayS/533ff6DbQIFfqWRPHTLli6ct6T54=)
3: pxA2emkj1Wi4hN6RLcWYaRGwohw.roa (hash: uZbURZqzj+fL5lJVe1ufQh9sUQe5T2Re+0qL38WwpV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:09:07:7a:a5:bd:91:32:5b:ba:a1:e2:e8:6b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Jun 28 20:01:01 2025 GMT
Not After : Jun 29 20:01:01 2025 GMT
Subject: CN=0710d08b06ee4984eeaf03410b4812bbd718773f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ad:31:e0:a0:ae:c7:97:ff:4e:24:9d:91:0f:
8e:17:7b:a0:01:33:3b:55:4d:87:5a:54:16:b2:a3:
5f:20:ff:f7:e0:5c:d7:0d:11:fd:17:14:73:27:9f:
de:35:b7:05:80:86:1f:b5:58:9a:f1:57:fc:ce:1f:
7a:da:7b:56:05:4b:ef:64:91:85:d6:3f:6b:0d:2b:
48:83:69:41:f7:bb:05:25:11:a5:71:29:57:3b:03:
3d:5d:2f:5f:db:d6:c1:6e:ae:94:43:d0:f8:7d:2b:
ae:f6:c6:c7:d7:81:84:f1:e3:0f:c7:49:c5:9d:79:
c2:d6:f6:b5:76:02:5d:78:21:1e:7e:c9:d9:ec:27:
f9:cb:b5:da:02:00:a9:f6:9a:f1:ce:a6:2b:f8:00:
5a:de:7c:8e:41:c4:b5:c1:38:12:df:5d:91:2e:79:
62:ff:17:1d:d4:d2:13:db:be:a0:d2:b0:a2:55:3d:
90:5d:ec:9a:aa:86:b2:8e:72:f7:d0:f8:ec:ee:52:
1a:b9:e7:3f:47:48:3c:8f:91:4e:f5:4f:d6:15:2e:
90:4d:41:ee:42:14:15:c6:25:f1:81:cc:0e:cd:08:
86:40:02:72:74:06:6e:08:5f:62:65:12:93:a9:d0:
3d:d7:4f:90:48:dd:4c:2e:b6:12:60:bf:52:29:c9:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:10:D0:8B:06:EE:49:84:EE:AF:03:41:0B:48:12:BB:D7:18:77:3F
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:79:e8:19:d6:b7:ac:56:0e:74:40:0d:c0:40:ef:1d:b7:6c:
4e:3c:03:29:0f:1b:4b:e7:d7:c6:ad:58:b1:35:60:5f:d9:7d:
7d:9c:d5:e5:e1:a2:13:fc:30:74:c8:68:ab:a0:3f:ef:85:25:
8d:d4:d7:7f:22:9b:50:3c:6e:4f:9b:c7:f2:8b:cb:4c:77:0a:
c2:40:31:87:33:81:b9:ac:e5:8d:3a:f6:c9:29:19:a3:b8:4a:
2f:b0:46:e5:ff:2b:f4:ad:62:62:0c:77:99:73:06:bf:e4:37:
a9:1b:25:6b:e8:62:51:29:f4:15:14:59:3a:21:ee:4d:62:bc:
be:92:01:74:f4:60:f5:86:69:72:b4:c0:7c:05:a3:85:bb:1a:
34:4f:34:ba:71:c9:db:0f:18:71:db:3a:b8:d3:d8:f4:ea:43:
af:0d:c4:fa:39:49:3c:99:39:7f:92:a1:d6:c2:29:42:0d:9e:
ec:19:73:00:ff:c0:1c:7a:76:d9:b0:22:f8:4a:da:fe:c7:dd:
e7:e8:a9:4b:36:90:20:a6:1f:dd:a3:0a:14:55:a8:92:c1:30:
86:24:35:a9:23:ec:7c:79:3e:30:c4:73:11:b8:82:df:10:f0:
b4:19:6d:e2:13:61:b2:40:25:5d:7e:2f:76:73:34:a7:c7:b2:
d6:4e:08:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:00 2025 by rpki-client