Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: R/AoV/cFx3b2JBP5HKgrf16o5e+OvXg1rqdGpvUJ2VA=
Subject key identifier: 5E:99:31:E7:EE:5A:8D:9D:31:88:26:33:3E:24:3F:18:8B:FC:FF:8B
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 0197B6D7AF5E39B9ACF252E079BD23143368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 14:01:17 +0000
Manifest this update: Sat 28 Jun 2025 14:01:17 +0000
Manifest next update: Sun 29 Jun 2025 14:01:17 +0000
Files and hashes: 1: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: BHoI5y/i3kAK5mATTSqy6mYoNXeocu4alFIVuP0jFUQ=)
2: nh2jj_LSbHbo6dOlRaW604QLuxE.roa (hash: ajpkQ8o6WuSUyO59iQdi5/jQGtK2O9XCwMuhD9aQ4wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:af:5e:39:b9:ac:f2:52:e0:79:bd:23:14:33:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Jun 28 14:01:17 2025 GMT
Not After : Jun 29 14:01:17 2025 GMT
Subject: CN=5e9931e7ee5a8d9d318826333e243f188bfcff8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:74:c2:31:39:0c:eb:2b:c5:a7:bd:5d:9a:
09:23:c1:73:11:f8:dc:7f:54:ae:14:95:5f:ea:3e:
78:aa:80:87:39:7e:49:ed:6c:6c:d8:28:6f:06:cf:
dc:8c:13:6f:7d:1a:41:3b:93:3d:1b:d6:7e:58:6e:
32:d1:6f:f1:4e:b9:2a:1e:a8:e3:0e:5b:7c:07:5a:
27:40:56:dc:9d:ea:d5:6a:51:9d:77:0c:89:b5:50:
70:84:74:0b:06:b9:86:93:76:30:cf:7e:05:f1:b2:
f1:34:9b:d4:19:5b:70:c4:1f:39:a4:70:87:4a:f9:
d3:51:21:ba:64:6f:68:08:0b:f8:c6:5c:d4:65:86:
9f:4c:24:f0:69:e1:0b:8f:2b:ae:2f:a0:63:14:4c:
0e:b2:45:37:6a:0f:a0:95:17:2b:79:88:78:0b:3c:
8c:a1:51:2a:f3:d5:e0:21:3c:1b:7d:4e:99:b7:97:
40:87:18:06:7f:2f:25:39:61:25:cf:38:91:90:f2:
9e:7e:31:22:d9:81:8d:4d:19:e3:22:da:00:d9:d3:
56:6f:a9:0c:8c:33:6e:18:6b:68:7a:ea:75:a0:72:
24:de:1c:64:86:ec:d3:5f:02:c9:c5:a4:10:6a:3c:
b5:85:34:bd:22:86:64:69:fe:96:75:d5:43:21:a2:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:99:31:E7:EE:5A:8D:9D:31:88:26:33:3E:24:3F:18:8B:FC:FF:8B
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d6:30:b4:40:bb:62:1e:29:c3:17:7d:e4:6e:87:48:f2:af:
ff:32:44:59:0b:c7:ad:99:50:d6:41:99:4a:b2:94:20:22:17:
dd:6f:9a:eb:a4:34:38:95:d6:b2:ae:8f:56:09:4f:ba:36:f6:
3b:93:30:79:99:66:59:db:f4:7b:9f:5e:3f:c2:20:bd:3d:6b:
f9:69:6e:d7:2a:29:5c:70:ab:d6:bf:ac:52:b2:db:7e:6b:f4:
11:35:e2:57:bd:c9:60:9b:cd:5d:96:d9:2a:35:74:d6:d4:23:
67:58:17:15:9b:27:52:e3:ca:2a:fe:f6:bc:a0:bd:29:b0:e5:
c4:f4:80:c2:9e:e4:a5:18:80:37:db:49:4a:b4:22:4a:c3:7b:
32:58:54:de:f5:3b:69:95:f2:e4:9f:bd:29:28:4d:88:2a:bf:
e5:97:b6:06:55:77:57:0d:21:67:b7:6b:58:ba:21:39:ef:77:
5b:54:7e:50:13:f6:21:87:c9:f9:e9:34:4b:e7:bd:b4:6e:59:
5d:20:54:f3:b1:90:29:34:4f:00:c5:b5:69:08:97:8d:7e:98:
99:b0:d1:56:84:84:e1:be:3f:8e:15:9a:27:d9:90:eb:b3:1e:
9d:2c:b7:5e:84:4a:65:b8:54:81:83:4f:a8:72:ff:bf:d2:2a:
e2:b3:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:24 2025 by rpki-client