Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier: k7EEgiOULFv2fCxxtq1rwRjq+JAuUpSPlNKF5iegXNs=
Subject key identifier: 3C:13:19:86:83:D6:49:8F:9F:6F:AB:D6:B7:43:9F:30:2C:70:8D:44
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial: 0197B5C480129BCD83A68CC30AE7D3657676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number: 039C
Signing time: Sat 28 Jun 2025 09:00:43 +0000
Manifest this update: Sat 28 Jun 2025 09:00:43 +0000
Manifest next update: Sun 29 Jun 2025 09:00:43 +0000
Files and hashes: 1: TbjsUDhMP9oiyRFzkMf_XEJ0_gs.roa (hash: N0QojbQjnjXATXQxNe2ZVC9V9rik44C7TlWbUv97jVE=)
2: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: CQlvUBRULhiPdclPtvH4gTp1Poc8/2bTe+XSzDW6ej8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:80:12:9b:cd:83:a6:8c:c3:0a:e7:d3:65:76:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Validity
Not Before: Jun 28 09:00:43 2025 GMT
Not After : Jun 29 09:00:43 2025 GMT
Subject: CN=3c13198683d6498f9f6fabd6b7439f302c708d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:c7:a5:f2:71:9d:f9:b0:9c:98:c5:d5:9f:
f4:1c:c7:48:a2:35:3b:c9:74:e3:4c:24:eb:78:5a:
31:95:1e:09:97:1b:42:d9:65:d6:7d:5c:64:ac:1f:
4b:28:c8:10:47:0f:4a:d6:14:3f:47:8b:b4:2b:4f:
f5:2f:5c:a6:36:d0:58:e1:c5:37:15:ec:fd:83:d6:
10:ad:0b:2f:1f:d7:7d:39:43:84:6b:4a:88:f2:3e:
11:6e:d3:10:b8:ff:05:18:cc:7d:7d:f2:0a:d5:94:
0d:0b:f6:45:8f:19:27:76:cd:87:5c:93:52:d5:19:
cc:ae:01:71:27:23:2a:47:f4:b1:99:ac:da:fc:c7:
90:4d:50:7c:f1:18:a0:9b:e4:02:07:ae:85:f2:15:
79:b3:0f:5c:44:52:d2:e4:db:d1:b7:1d:27:29:0e:
5e:3b:d4:b2:b1:5d:92:3e:3e:0c:1c:ab:91:e5:6c:
06:66:9f:bf:d2:81:21:5d:7c:c9:c7:81:34:51:f8:
37:c4:c6:a0:eb:0d:a1:83:a0:34:47:85:99:37:1a:
78:26:4d:f5:09:72:f5:7e:f7:e8:61:22:1f:fe:94:
c9:91:36:a9:41:d2:19:d5:a5:eb:23:01:40:d2:f3:
5f:a4:96:7a:92:96:77:d3:a0:a7:9f:52:aa:0f:b8:
dc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:13:19:86:83:D6:49:8F:9F:6F:AB:D6:B7:43:9F:30:2C:70:8D:44
X509v3 Authority Key Identifier:
keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3f:30:d4:ee:46:e8:9d:b9:d9:d3:d8:ad:e7:c0:fe:24:44:
84:7a:a3:c7:44:db:62:26:83:c5:eb:e8:ae:1e:43:d8:39:4d:
75:f9:8e:4e:72:1e:53:dc:8c:a9:0e:75:e9:03:1b:f8:3c:18:
21:7f:6c:fd:9f:e1:5a:ad:97:c2:fd:ed:30:c7:1a:fd:5a:42:
39:45:9b:a4:7a:7c:90:b0:ed:82:c0:b9:e4:2c:58:8a:77:bd:
8a:18:cb:1d:28:9d:55:fa:b5:90:7e:8c:b4:37:21:55:3a:6b:
a6:d2:b5:d8:f4:50:3e:50:67:c6:2b:f0:dc:d3:11:e5:11:fc:
d3:19:9e:2a:8e:03:bc:04:a5:9f:3d:5c:f7:78:57:5a:fb:c2:
1c:b3:de:a4:0c:cd:72:4f:8b:ae:45:b9:bb:a2:9e:b8:86:72:
86:91:92:c2:1c:ee:9c:7c:69:20:c8:19:6c:3c:3a:85:a8:ef:
29:60:17:91:e6:4d:d7:23:0c:d6:2a:38:e6:f5:55:e3:ff:b1:
95:77:9a:d1:10:fa:88:97:5e:27:dc:23:cc:78:9c:fd:2b:a2:
c5:f1:cf:cc:fa:9b:7c:74:ca:8d:3b:d8:a5:2c:a0:ba:0e:4b:
77:6b:78:24:70:37:ca:0f:95:22:69:30:66:13:42:ba:9b:94:
c3:32:6d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:32 2025 by rpki-client