Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
File: ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json)
Hash identifier: C0J1exhR1xlzCIug/wQZtCJG447MQEg5s6dJdwZR6aw=
Subject key identifier: D7:B6:A4:BE:A7:14:FF:B9:3C:2B:63:F0:D6:7C:C6:54:16:0F:4C:31
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial: 0197B6A150610A80D8ECB9AE7B45C05030A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 13:01:54 +0000
Manifest this update: Sat 28 Jun 2025 13:01:54 +0000
Manifest next update: Sun 29 Jun 2025 13:01:54 +0000
Files and hashes: 1: Wi8TeX6HlCf6UscTIz-eiQunz20.roa (hash: iC2va1BTrYFKnldJrvaufKukdaOfozas1t65U+xf85Q=)
2: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: FzPyaVBo2h5/GrYqfTSdK7sSNfpfyA+HGWsDuC9fG0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:50:61:0a:80:d8:ec:b9:ae:7b:45:c0:50:30:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Validity
Not Before: Jun 28 13:01:54 2025 GMT
Not After : Jun 29 13:01:54 2025 GMT
Subject: CN=d7b6a4bea714ffb93c2b63f0d67cc654160f4c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:b8:a0:4c:da:07:fc:1b:3f:46:bb:b6:03:
c8:6f:ce:19:51:cf:11:b9:e4:ec:8b:bc:54:e0:5d:
29:4b:46:bf:20:e0:af:24:e6:2c:d4:06:9d:69:12:
2a:3b:96:60:d7:e0:53:a7:4c:a0:1d:22:35:7f:6e:
bc:53:90:76:db:9f:ba:c4:68:07:be:ce:86:a6:bf:
40:a8:93:39:50:93:ec:45:01:6d:35:62:11:74:f6:
e2:9c:65:1d:3f:59:5b:10:58:64:0f:dd:f7:00:e3:
43:d9:4f:77:c6:3a:62:82:78:de:17:4b:20:b2:77:
ab:b8:88:da:d0:c5:c4:29:b3:e2:e1:49:6c:98:41:
ed:de:cd:26:fe:bd:c5:7f:4a:1e:13:a7:21:18:d6:
c4:91:79:29:95:2c:2b:4b:44:35:d5:3b:b9:8d:a6:
7b:96:04:0f:bc:4f:e4:4a:19:b9:c3:40:24:3f:f3:
01:38:b7:51:75:2f:9e:10:7a:3b:20:92:d5:69:14:
9e:ff:56:e8:24:98:9a:3d:1e:81:38:46:63:7a:8a:
c0:70:0e:95:45:ab:de:5e:02:80:2f:19:af:bd:90:
55:f6:a0:ed:18:65:9f:d3:f3:86:4d:c6:6b:db:e4:
40:62:df:8a:46:3e:36:4e:24:11:85:2c:71:5a:28:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B6:A4:BE:A7:14:FF:B9:3C:2B:63:F0:D6:7C:C6:54:16:0F:4C:31
X509v3 Authority Key Identifier:
keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d2:b2:94:9a:06:3d:d6:ec:28:73:01:8c:72:2d:b5:15:31:
80:c3:3a:f1:de:b2:70:07:00:cd:c8:d8:ab:93:7e:22:48:d8:
96:be:49:1f:2d:3a:29:f9:fc:7b:4f:1c:3f:d4:63:f8:f7:e9:
37:fe:f8:fd:74:98:80:67:45:f4:da:ff:1e:f4:67:cf:d2:d5:
a1:9a:66:8d:59:33:6e:29:3c:e3:b5:4e:ce:fb:ae:8a:4f:80:
9b:a4:24:59:e4:41:4a:46:b9:52:58:4c:e7:3e:4e:15:41:f3:
fa:79:2b:4c:8d:92:85:0c:ba:35:de:33:a6:15:ae:dc:b1:15:
14:a6:b3:89:14:8e:7c:fb:19:ac:a5:65:9c:e2:f5:07:f2:e4:
1a:7a:49:f3:6b:f9:b3:fc:81:39:e7:e6:cc:1d:b5:d1:6b:5c:
01:b0:c6:97:b8:85:c6:ce:b5:75:2b:9d:47:30:ba:dd:98:f3:
a0:01:8a:3a:01:be:3a:b7:7d:60:64:2a:07:13:47:a8:11:1d:
a2:1b:74:52:3f:bc:d8:e5:ad:1e:20:76:c6:1d:65:5a:2f:8d:
89:b7:f0:74:08:89:29:c7:2e:a0:62:fd:80:61:1e:a0:67:c5:
c8:11:2d:64:bf:5c:8d:1b:9c:d1:d0:c8:38:9d:40:6f:37:76:
b3:c9:66:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:48 2025 by rpki-client