Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: bjuANpSZbCqkG0mNtBRNw353rT4VxskgP2V68xsB3vU=
Subject key identifier: BB:5D:70:60:FD:F2:75:17:98:1C:74:92:BB:BA:BD:A9:A3:8E:23:6B
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 0198D73B846D54E0EB68AA8A6F775DCD9EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 06C8
Signing time: Sat 23 Aug 2025 14:00:58 +0000
Manifest this update: Sat 23 Aug 2025 14:00:58 +0000
Manifest next update: Sun 24 Aug 2025 14:00:58 +0000
Files and hashes: 1: 59hx8MiVy0L5bbCsrmz6L5yJrmQ.roa (hash: tUrCnGXwIpcsX6KWOsldh7ImOj30jilIGBTNNVRq1UU=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: 4IvpJgJSfdddSB8w0I7tuxuvvNqAoBzFZAKo7gA7ooI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:84:6d:54:e0:eb:68:aa:8a:6f:77:5d:cd:9e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Aug 23 14:00:58 2025 GMT
Not After : Aug 24 14:00:58 2025 GMT
Subject: CN=bb5d7060fdf27517981c7492bbbabda9a38e236b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2e:c6:aa:ff:a8:20:14:85:99:47:1c:a1:79:
b1:0f:a0:95:66:91:b4:ef:be:b0:c9:46:9a:ee:3c:
cb:5c:a8:9b:0a:d3:a8:e8:f7:4d:ed:49:f1:28:f6:
4a:30:d6:22:ab:8c:d7:5a:9a:a9:99:4d:bf:03:8f:
ed:46:c2:3e:21:62:b3:b7:66:ee:fa:48:d3:9c:9b:
ac:e1:da:60:37:52:15:60:7f:ac:1b:2d:ef:ac:11:
94:08:f6:45:e6:83:a8:f3:ba:68:80:d6:56:85:54:
bf:f3:ae:ae:2a:cf:f1:ee:45:04:ec:34:6f:e9:d5:
ae:55:56:2f:1f:82:27:80:c9:c6:96:93:22:b7:13:
00:27:8b:5a:e5:c2:1c:16:2d:e8:46:23:f5:04:1b:
e0:0c:14:c7:d3:5e:6e:f6:5f:e8:85:43:46:63:4f:
3c:3c:7b:47:c4:d0:d1:4f:74:cc:a3:e2:ab:99:84:
07:94:27:78:88:d5:4e:cc:f0:b4:fe:0f:ea:d6:e6:
c3:c5:e1:0e:ba:d0:60:6e:5d:74:ff:91:6a:16:c6:
bc:a3:8b:5a:60:25:9b:c7:67:a7:5b:e2:a3:ac:ac:
98:dd:26:77:42:ea:7d:9e:da:f1:d5:eb:4d:6a:2e:
a6:c0:6d:7e:08:2f:bd:79:00:80:69:f0:d2:58:56:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5D:70:60:FD:F2:75:17:98:1C:74:92:BB:BA:BD:A9:A3:8E:23:6B
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1a:6f:f8:80:a0:d1:d0:c0:c1:a6:e7:27:b5:c2:0b:cc:d6:
79:8f:b1:a0:1b:6f:a5:b6:fa:ab:11:38:16:b2:50:38:67:eb:
76:69:68:43:c9:cf:81:82:13:04:33:bc:67:2d:a1:b2:f4:cb:
00:8e:8a:68:b7:e0:6b:a2:80:1f:65:43:51:00:19:79:45:86:
43:50:2c:06:24:8d:04:c5:c4:9a:ff:ef:d7:99:e8:53:14:ac:
11:f4:b5:4c:7c:73:ea:62:41:25:96:26:01:38:24:70:1d:6a:
85:30:7e:dd:ca:0e:ef:5a:8c:20:d1:75:dd:27:b5:50:68:4f:
ae:5e:2e:2f:ae:88:68:ce:92:16:b7:c4:31:57:13:a6:55:74:
c2:56:ad:91:08:e7:00:a1:a2:3a:65:15:5a:43:01:48:ba:b0:
09:f3:3a:d9:db:b4:0f:76:3a:31:00:f7:9f:46:47:31:46:d0:
85:a3:39:b4:a3:8e:57:a8:72:62:16:b7:bb:44:26:41:55:70:
bb:a9:ef:cb:8c:aa:c2:ab:50:d0:c7:f3:b5:47:1b:07:07:c3:
7e:f6:c6:3a:29:48:ba:9a:e4:e4:82:a3:a9:cc:17:ce:dd:3b:
c0:1c:86:31:6a:ef:18:d5:d9:8f:ec:88:d3:70:ae:a3:77:d1:
75:84:cb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:01:57 2025 by rpki-client