Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier: xrdrtrUY1ld0AaPkxTHt4ToQLe/XE4QTDaiE40zvkbY=
Subject key identifier: 19:A3:39:B3:F9:5F:66:29:32:86:55:DE:E4:D4:3F:52:61:87:59:78
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial: 0197B7458DD349FD963EE43E47048155A9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 16:01:18 +0000
Manifest this update: Sat 28 Jun 2025 16:01:18 +0000
Manifest next update: Sun 29 Jun 2025 16:01:18 +0000
Files and hashes: 1: E_L2oklniQj05pWuM0xgBEBv9Z0.roa (hash: vggfw58sjlCL17O/pPVvpJxnAr4298gihw1aekiLNHY=)
2: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: 5M6BXj5uASWxyV3hNOSeUQyiOJ0CaQKM6u7QAAytWKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:8d:d3:49:fd:96:3e:e4:3e:47:04:81:55:a9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Validity
Not Before: Jun 28 16:01:18 2025 GMT
Not After : Jun 29 16:01:18 2025 GMT
Subject: CN=19a339b3f95f6629328655dee4d43f5261875978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:cc:e5:15:52:a9:35:de:b5:ed:03:a4:8a:
2b:1f:50:9c:ba:05:92:3a:3e:f9:5d:40:b0:ab:79:
b8:4f:0b:c8:8f:4d:37:79:82:52:6d:29:f3:ec:8b:
ff:14:08:fa:29:2e:a8:71:b5:52:eb:ba:33:c8:ea:
95:b2:e9:70:a5:51:70:0f:b7:64:15:47:18:41:38:
0c:94:44:67:8c:b1:43:af:09:4b:2e:7a:56:49:94:
74:54:3d:b9:8c:d0:75:77:09:df:a1:6c:bc:e2:27:
54:69:bc:f8:63:87:f4:d4:cf:f1:f2:5f:c4:1a:c4:
d1:e0:98:e7:5d:bc:2c:0e:c3:ec:85:3f:76:5f:b2:
97:57:5e:43:16:19:11:c5:a3:ea:2a:6b:1f:24:a3:
ca:00:c8:45:33:2a:2c:73:63:52:8a:de:a2:63:7c:
47:a9:98:f6:30:b7:22:1c:0c:78:91:6d:0f:13:ab:
1c:0a:92:79:cc:2c:f0:9b:64:25:2d:86:61:8c:63:
36:25:49:4b:7f:24:07:f1:47:d9:b8:ab:db:50:1e:
59:51:46:48:aa:dc:3c:87:b7:e4:10:9e:90:12:44:
b7:40:89:7b:1b:3c:1e:93:0e:32:c3:a8:d0:f4:b0:
3e:6d:ee:e1:c1:a9:8a:b3:79:8d:ce:ec:57:31:2f:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A3:39:B3:F9:5F:66:29:32:86:55:DE:E4:D4:3F:52:61:87:59:78
X509v3 Authority Key Identifier:
keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ea:d9:8a:1d:1c:82:6b:54:84:66:8a:a8:51:58:dd:23:0e:
bd:48:3a:3f:7f:c9:38:1d:cd:f6:ef:c5:7d:06:cd:7c:93:9b:
4b:ee:2b:31:2f:b7:9e:62:2f:6d:31:44:50:aa:08:85:a9:08:
52:9b:df:5f:8f:69:30:d2:ce:92:da:2b:af:9d:63:07:55:e3:
db:06:3f:2e:52:13:73:f7:5d:e7:70:ad:67:47:61:6e:d0:0a:
82:d6:15:97:12:39:44:d2:23:62:44:1e:78:93:40:36:6e:e2:
e0:c9:9e:f6:17:aa:75:e6:42:de:56:53:b2:e5:aa:4c:65:b4:
e1:40:1f:7b:c3:a5:e6:5a:cb:ab:90:54:44:7c:a1:2d:54:23:
91:3a:41:1f:52:8c:42:34:49:8b:d4:7d:32:96:f2:fd:81:4a:
a8:6a:c1:02:22:36:59:83:ef:19:9b:35:70:02:65:e9:a1:14:
e0:0c:60:2c:3f:a9:7e:5e:c4:93:29:de:ca:53:63:b0:ec:43:
c6:65:00:5a:0d:da:a7:b8:59:e4:0a:44:e2:e0:bf:30:d8:2b:
58:0a:06:3d:f7:c5:6c:92:22:65:bd:d2:87:76:b7:4f:75:75:
1f:13:dc:14:08:0f:7c:87:9a:eb:9b:39:45:9a:a6:1b:68:2d:
aa:b8:89:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:53 2025 by rpki-client