Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: o1jvEgWVfvC5z8z425s7Zlpt67ss74CdKqMhS4uioUQ=
Subject key identifier: AA:68:F4:DB:5E:E9:3C:5A:AA:00:EC:E2:8D:A0:B5:AA:34:58:41:09
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 0197B6D78D8F60CFC92EA7061C6151D0EA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 14:01:09 +0000
Manifest this update: Sat 28 Jun 2025 14:01:09 +0000
Manifest next update: Sun 29 Jun 2025 14:01:09 +0000
Files and hashes: 1: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: r5uYVhMYzvnHY7C1G0/l5xFxCNHYDH4OBpZ5mXhFl9Q=)
2: yg4sGgC5KBzP9wrpfNuvhuojK2M.roa (hash: e1y06aA1s62UqKwjDXe9gE31sK3hItmKrNoYCjTILV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8d:8f:60:cf:c9:2e:a7:06:1c:61:51:d0:ea:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Jun 28 14:01:09 2025 GMT
Not After : Jun 29 14:01:09 2025 GMT
Subject: CN=aa68f4db5ee93c5aaa00ece28da0b5aa34584109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:21:00:68:51:1e:a6:fc:24:21:5f:18:68:37:
0d:8a:48:d5:cc:18:7e:ed:27:6d:5a:7f:e6:39:74:
9d:9a:c4:60:bd:98:3e:69:1d:6e:62:f4:c3:c1:5a:
21:19:49:99:00:58:47:97:0a:33:e6:6d:b4:7d:38:
ab:43:a1:2f:9f:2a:52:f4:05:7a:cb:24:d7:3a:8e:
8c:12:27:2d:79:b5:1d:3b:f5:33:9c:26:7f:f0:1c:
49:02:b0:ed:fd:a0:2e:48:e7:ce:3f:16:67:a9:48:
ba:e6:cd:65:6f:13:7c:23:9d:dc:9a:a4:21:dd:51:
f1:db:17:c0:01:81:af:05:d8:19:e8:b3:c2:8e:0a:
ba:86:b9:d1:14:96:73:48:f5:0f:5f:02:6b:8d:4e:
a4:de:c7:92:8c:ec:71:24:4e:a1:3d:77:2d:e7:52:
cb:14:1b:c7:9b:31:51:0a:96:45:30:a7:b0:9d:9b:
d4:38:72:b3:2b:6d:81:e6:d6:b8:cd:a8:df:30:1b:
fa:d3:75:a8:45:77:88:a9:de:81:3b:3f:74:ad:10:
f8:75:60:5c:c3:c7:4d:a6:19:a8:e5:76:3d:41:d9:
a7:e3:8e:07:83:82:a0:2d:31:ca:d5:6d:1b:77:18:
1a:62:1f:2d:d2:92:4f:b9:d5:2a:16:a7:0a:db:34:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:68:F4:DB:5E:E9:3C:5A:AA:00:EC:E2:8D:A0:B5:AA:34:58:41:09
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:26:e5:f3:e9:16:4b:e2:cb:7f:f9:d0:2b:f4:bf:ec:6f:09:
d4:2f:ae:8e:bc:8c:ab:c1:09:47:f3:77:f3:ce:c4:55:2e:7d:
3e:6b:44:43:21:47:d8:6f:1e:b1:cd:00:60:2d:89:d9:f1:2a:
5f:e8:dd:ba:66:e7:44:c4:2f:53:3f:eb:37:70:17:a6:fc:4e:
3f:8a:94:ca:73:72:3d:e3:90:c0:25:72:47:4a:a5:d3:bf:df:
12:46:a4:73:04:ef:f4:9a:e3:be:e6:c5:0a:81:d6:56:fc:e8:
8c:e0:0d:5b:04:04:b8:64:88:6e:a6:0c:f1:87:22:e1:f9:5f:
ca:9f:de:96:d5:8c:39:ee:cc:88:49:4f:36:cc:6d:d7:60:f9:
5d:43:75:de:81:f4:a1:05:95:a8:64:63:0a:73:60:e3:3a:18:
46:cb:34:78:32:22:0d:dc:fa:75:67:d7:98:b6:34:b6:5e:00:
f1:f5:c6:a0:3d:26:ae:04:72:10:c2:ab:e6:4a:2f:41:8b:33:
fe:34:88:56:cc:fa:e6:d0:b0:2d:16:fd:ea:05:35:a0:33:8a:
22:0d:56:37:b7:43:2e:05:0c:95:8d:7b:77:f8:68:ed:5c:d0:
16:1c:93:03:24:1b:aa:8b:a0:01:96:1f:68:4c:94:9b:ba:68:
79:57:c6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:08:25 2025 by rpki-client