Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: SCgoTzZ+HPtEyTBk6Nw3FqmA589e5Jnhnn5obh7r1mo=
Subject key identifier: 30:96:56:2F:2F:3E:72:03:30:EB:42:F0:87:AF:84:B9:6F:92:85:BF
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 0197B70EFBF332690ADA0B4FD1E72D670084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: 0114
Signing time: Sat 28 Jun 2025 15:01:41 +0000
Manifest this update: Sat 28 Jun 2025 15:01:41 +0000
Manifest next update: Sun 29 Jun 2025 15:01:41 +0000
Files and hashes: 1: 3AM1kiBUlkIMgJlgAVSsRhHcsVE.roa (hash: JRZBzZPP/Qgtum5bkbDwOE4ahKynlQtqROTLxUhU7PU=)
2: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: k2R3PRQieUlw2Xbf2/Z2eMhB/vgAjZPdrrUSDyb0zyw=)
3: bXG0GOoD81HOxWPjM9UhIty_ee0.roa (hash: mmMBtet64hPrKMhcTVqesrRFLaGci6KJ3hFnS33cvrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fb:f3:32:69:0a:da:0b:4f:d1:e7:2d:67:00:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Jun 28 15:01:41 2025 GMT
Not After : Jun 29 15:01:41 2025 GMT
Subject: CN=3096562f2f3e720330eb42f087af84b96f9285bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f6:0f:b7:26:92:61:79:ec:2c:3b:91:ab:54:
6a:97:b1:e4:8f:c8:1c:89:80:2a:88:42:b2:f1:d4:
38:67:c9:4d:46:d0:19:85:19:9c:40:fa:0a:d5:18:
aa:67:67:f7:63:8f:88:01:26:71:26:e2:01:06:ff:
70:0e:31:f2:d9:48:70:9c:ff:ab:9f:1e:aa:f7:db:
00:ec:0f:d9:39:bf:26:bd:f1:eb:53:7c:74:07:c5:
6c:9a:e6:49:c3:d0:a8:6f:e4:b8:a7:6c:a3:4c:97:
18:5c:ec:b5:68:5c:9a:c8:7d:1e:b3:c3:87:3f:cd:
3c:c8:c8:2a:d9:ea:6f:18:a4:c3:c5:a4:51:4d:ec:
f5:77:16:77:a5:b7:96:55:f1:dd:31:49:7a:08:ad:
bc:1a:e5:76:6a:8a:09:08:b0:0a:de:4f:17:10:d4:
d8:d5:16:02:0c:97:d1:d8:2e:ea:33:ba:c9:9d:62:
60:2a:15:5f:00:e2:06:05:e9:e4:dd:63:a2:16:27:
96:81:fb:07:af:25:36:50:40:80:29:33:50:e1:f6:
20:b5:5b:d7:5d:92:6a:3d:88:91:f3:3d:6f:cf:e0:
ba:61:0f:c6:53:03:9d:6d:b9:e2:08:0a:d2:36:58:
b3:6d:9e:fd:ca:3b:06:44:59:b4:fc:a7:12:86:23:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:96:56:2F:2F:3E:72:03:30:EB:42:F0:87:AF:84:B9:6F:92:85:BF
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:45:0e:54:f0:be:46:c4:c6:a6:02:7c:13:50:0a:ee:ff:d1:
df:85:08:e9:09:46:8b:be:be:a2:bb:f4:e0:19:c7:95:3f:eb:
9d:3d:5a:14:7b:94:da:59:ad:bb:1f:be:48:9d:7a:67:05:1f:
4b:aa:25:5a:bd:ff:f7:19:52:4a:2e:e5:5b:2b:c4:80:47:1b:
55:42:98:79:61:75:84:4e:42:81:23:52:d1:e8:cf:19:89:7e:
69:57:d5:8d:5d:76:fe:ca:d2:4f:9f:f6:ef:24:89:35:66:65:
0a:5e:22:a6:a5:18:18:a9:e3:3d:b6:84:f0:4e:5a:9c:5b:ce:
50:0d:cd:30:11:b2:97:53:8f:e1:b3:7b:d2:80:b8:fe:a6:d0:
75:91:8c:ae:ef:1b:50:a8:7b:b7:15:d0:ba:8d:29:e7:d7:5b:
7c:99:82:09:84:f3:c4:e3:bb:44:35:0c:c3:7a:cf:e8:f8:84:
bb:c0:58:54:8f:9e:db:8c:62:50:11:b3:90:2a:63:a7:3a:2c:
c7:2b:bc:00:40:5c:c3:b8:51:d2:28:8c:de:2a:1e:30:ac:fc:
ad:94:e9:b4:91:18:41:b0:2e:84:13:ee:d6:ad:f9:a2:46:08:
92:75:25:39:e0:68:65:6b:04:3d:94:ff:7e:9f:0e:ed:2a:fd:
05:0f:a9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:15 2025 by rpki-client