Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
File: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft (raw, json)
Hash identifier: qoaCssZSxsDVQ40Fg4BWlunMYd2IlpuguJniCiGbNR4=
Subject key identifier: C0:FB:12:CA:62:04:DD:4D:80:D2:9E:8A:5D:54:5C:47:68:5F:00:8D
Authority key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
Certificate issuer: /CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Certificate serial: 0197B5C515B480C9AD46693A18AF7269690E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
Manifest number: 026D
Signing time: Sat 28 Jun 2025 09:01:21 +0000
Manifest this update: Sat 28 Jun 2025 09:01:21 +0000
Manifest next update: Sun 29 Jun 2025 09:01:21 +0000
Files and hashes: 1: 7221QtQkpZ5fYG5uSqjd2485FGI.roa (hash: qWfFUUJnuvb44KA8Ta3mXVGgM6VvJjf6ZydNkx5R4C0=)
2: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl (hash: fpau7atbrm+0+qVVR/pWjcSq2wbL262jNZsWDcPXkSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:15:b4:80:c9:ad:46:69:3a:18:af:72:69:69:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Validity
Not Before: Jun 28 09:01:21 2025 GMT
Not After : Jun 29 09:01:21 2025 GMT
Subject: CN=c0fb12ca6204dd4d80d29e8a5d545c47685f008d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4c:cb:0b:a4:f0:29:a3:ee:b9:d1:b9:d8:f8:
a6:96:98:25:e5:20:eb:78:ca:6f:a5:5c:28:65:a8:
5f:11:b4:43:09:67:d9:ac:27:f3:62:60:e2:06:02:
cf:27:78:f5:4d:1b:71:5b:ee:c0:b4:b5:a5:c5:94:
c6:c4:cc:fe:53:2a:9d:8b:3a:c0:32:2d:be:7d:05:
d3:88:20:20:c4:7c:2e:c9:64:a0:93:33:1e:61:20:
eb:07:2e:7e:8a:7f:de:9d:36:47:5e:df:59:5c:4c:
d2:7e:c1:43:66:37:3a:51:20:f2:4e:6f:a3:09:25:
39:64:f8:48:58:18:21:b9:b4:dd:b5:6b:61:26:4d:
ff:3a:12:79:be:f2:66:59:ce:52:c9:ac:67:52:3d:
fc:a4:04:b3:81:f7:99:d8:7c:8a:79:e9:e4:bd:ae:
b3:12:c8:9c:db:8e:57:29:ab:b8:97:1b:cc:53:45:
c6:b7:29:bf:06:c7:f6:da:c7:d5:55:f7:f3:03:b6:
b4:c2:3c:0d:6c:a3:bd:bd:af:19:13:c6:b0:93:11:
c2:e5:3a:77:3b:16:be:a1:e7:7c:3e:60:fb:fa:64:
29:2e:a5:a3:00:27:57:d5:92:8b:cd:ec:bf:6b:30:
07:69:f1:3d:94:6d:8b:0a:cb:99:15:d2:a4:42:bd:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FB:12:CA:62:04:DD:4D:80:D2:9E:8A:5D:54:5C:47:68:5F:00:8D
X509v3 Authority Key Identifier:
keyid:64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:65:49:82:2a:8d:68:c5:97:76:20:38:d2:ab:7c:b2:81:a9:
cd:fa:43:47:a2:53:c1:10:88:c5:b6:af:cc:db:14:9a:91:17:
c5:fe:64:64:de:3a:b8:37:c4:c2:2f:78:8f:53:a6:59:43:04:
0d:70:5e:a9:b8:8f:6f:67:4d:82:93:eb:67:0d:f0:68:82:fb:
e3:87:e9:74:e0:db:1b:f0:9c:6c:8b:c7:31:75:cb:d6:05:11:
59:aa:34:1e:97:83:0a:5d:4a:39:fd:4e:8d:fc:8e:8a:08:86:
c5:3b:4e:25:c0:04:75:91:02:c6:74:50:69:29:50:63:9b:d1:
00:dd:c4:92:27:37:6b:02:29:9f:4d:6d:35:a5:63:38:98:03:
02:6b:01:01:78:d4:69:db:19:80:04:0b:af:01:f4:b6:15:ce:
79:8c:7c:d5:a3:af:b6:95:59:fd:9a:ec:ab:ef:e0:5b:a9:d3:
4e:1c:8b:f2:eb:50:b1:b2:dc:2b:71:1f:58:9f:f5:db:7f:7e:
02:c1:c1:22:b4:82:5d:3f:51:67:48:7c:9a:17:ba:6e:e0:8a:
31:98:64:b4:5e:64:2f:c9:e7:09:9f:b0:0c:a9:84:2e:bb:45:
b6:a0:e7:ad:41:53:71:54:77:e0:2f:45:5b:7c:4b:b4:c7:bc:
5f:df:98:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:18 2025 by rpki-client