Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json)
Hash identifier: nwb885gdZ6OYlOeOPXEiR6kPhRQSeUHOSldcobPsPmI=
Subject key identifier: C0:6D:20:B0:89:91:08:04:B2:65:D1:02:4E:04:EF:61:99:93:11:AB
Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Certificate serial: 0197B88FE469D29DAEED57723489B61065DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
Manifest number: 0F22
Signing time: Sat 28 Jun 2025 22:02:07 +0000
Manifest this update: Sat 28 Jun 2025 22:02:07 +0000
Manifest next update: Sun 29 Jun 2025 22:02:07 +0000
Files and hashes: 1: i-wVHRnuTYtFq7EOptpWJBt3Mdw.roa (hash: dyBwX82dFdjJwih5rdCwN8ZxNRpPJvl5rysORp718qc=)
2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: u10mYBw7Zsoa/MJRQXBwN27OJuiNylEdBq9+0osmgcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:e4:69:d2:9d:ae:ed:57:72:34:89:b6:10:65:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Validity
Not Before: Jun 28 22:02:07 2025 GMT
Not After : Jun 29 22:02:07 2025 GMT
Subject: CN=c06d20b089910804b265d1024e04ef61999311ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:31:ff:5f:1b:2a:42:df:8b:55:71:bd:e5:de:
02:d8:58:b1:d0:65:78:61:91:7a:39:36:d8:24:8a:
d0:da:24:80:f7:35:4a:35:80:e1:90:64:a6:4b:4b:
86:9c:18:23:20:a4:39:5e:6a:3f:0b:cb:32:89:98:
43:bc:ad:83:4c:e2:3c:7e:e7:14:32:30:38:c6:08:
75:13:f5:f6:35:90:b6:87:ba:6d:54:b1:2e:fd:85:
ef:5c:be:b3:7d:3e:5f:a4:f9:b4:42:69:c4:46:8c:
91:cb:22:e2:f1:6b:ed:73:a4:a0:4d:4f:4b:83:bb:
1e:8c:be:77:3a:0b:e4:f5:63:1a:4f:4f:4e:51:1d:
32:2a:9f:4c:52:6e:88:53:26:db:5e:9a:53:e5:09:
3f:e5:1b:d4:eb:f5:55:31:f1:56:6a:a6:68:94:a7:
b4:5b:fb:f2:5b:f5:b0:51:38:05:1a:ee:b2:87:de:
a9:97:26:97:80:0d:a5:ac:45:5a:ef:75:03:f0:04:
06:18:65:93:fe:96:17:70:92:6c:c2:44:81:9d:2e:
17:79:e8:fd:68:72:a5:b4:63:69:43:28:2a:a3:b1:
bd:2b:e4:9b:ed:87:93:9c:30:f9:1b:1f:4c:14:7a:
65:0b:42:77:13:eb:7f:fe:28:49:77:b9:a5:5f:5d:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6D:20:B0:89:91:08:04:B2:65:D1:02:4E:04:EF:61:99:93:11:AB
X509v3 Authority Key Identifier:
keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:89:8f:cd:84:7e:3b:1e:8d:e2:d5:98:bf:29:bb:d3:4c:34:
b6:b0:78:23:a4:d4:b7:4a:61:80:0f:aa:39:4d:8b:8c:bc:72:
63:6d:ba:e4:92:98:ed:43:99:d4:58:30:b7:ba:e8:52:5f:d7:
b0:ed:d9:97:d3:bb:69:dc:c5:22:0a:8a:f2:bc:c1:db:0b:a8:
f3:66:6b:b8:c7:4b:6e:b6:b8:6d:ca:9c:64:dd:1b:d5:1e:d2:
ad:8a:47:7c:d2:a2:5f:e9:f3:42:0f:76:b0:d6:3b:7e:f1:ff:
5e:3a:9d:2c:44:be:6b:e9:e6:1a:64:cc:25:3b:7c:c9:be:ec:
6f:1e:0d:37:81:10:c2:d7:11:6f:c4:f1:fb:d5:be:02:89:84:
96:0a:50:c8:1e:4c:8e:d1:7c:72:0a:4b:70:d4:39:c2:a2:d9:
cc:d1:d7:78:34:0d:a2:8a:cf:68:9f:0d:22:8e:ce:f5:62:05:
b5:55:e3:23:ef:c4:7b:d8:53:2b:f2:e8:a7:c5:c4:65:ca:a4:
7f:75:44:c0:df:df:e2:9b:47:f4:08:01:83:48:32:04:9b:2a:
9b:6f:81:a8:ca:fc:f2:7a:56:31:c5:5b:29:70:d7:ca:5c:0f:
1c:54:92:8a:19:db:3c:72:84:f1:1e:88:b5:46:a3:d8:e3:99:
54:43:2c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:49 2025 by rpki-client