Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: CHU88NYZYY7KImErozpPiual8laNvgnd3eNCd7aaSW8=
Subject key identifier: 28:1C:8F:5F:40:90:5C:D8:FB:BF:17:6A:B3:DF:C3:0F:D4:3E:80:BF
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 0197B77C3F57B4E1F2460339BBE988223630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 0633
Signing time: Sat 28 Jun 2025 17:01:02 +0000
Manifest this update: Sat 28 Jun 2025 17:01:02 +0000
Manifest next update: Sun 29 Jun 2025 17:01:02 +0000
Files and hashes: 1: 59hx8MiVy0L5bbCsrmz6L5yJrmQ.roa (hash: tUrCnGXwIpcsX6KWOsldh7ImOj30jilIGBTNNVRq1UU=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: pX7KDSZPwWgXlDrJvX/mK59qDmiQsHB0dprWRA579RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3f:57:b4:e1:f2:46:03:39:bb:e9:88:22:36:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Jun 28 17:01:02 2025 GMT
Not After : Jun 29 17:01:02 2025 GMT
Subject: CN=281c8f5f40905cd8fbbf176ab3dfc30fd43e80bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:bf:5c:58:de:ef:01:8e:97:75:90:52:62:54:
0c:52:98:ec:b4:48:ea:5f:3a:39:3e:3f:d4:6a:0b:
f3:e4:92:43:ca:19:76:86:52:47:78:92:eb:4d:c7:
b0:39:9a:b9:aa:81:16:23:ba:f7:e8:6b:48:3a:5e:
e1:3a:7e:bf:7a:4d:d3:56:cc:71:e9:38:90:74:29:
39:6c:55:e2:8a:36:5c:ab:5e:5c:b5:96:cd:da:77:
d0:39:37:67:75:68:d3:74:27:03:27:10:02:02:64:
66:7a:1b:4b:e2:ca:97:a6:6b:28:e4:e0:0b:f3:a8:
e6:f2:14:21:7b:e5:c4:80:b8:05:d0:01:74:21:3f:
87:8d:96:e5:c5:fe:b7:f9:58:18:65:43:e1:de:76:
9d:c1:45:74:d3:b1:92:bd:48:1b:c1:ab:16:6f:f3:
d0:bf:62:3b:94:64:2c:42:14:6b:f2:e9:2d:72:2e:
5f:b0:ee:7f:54:b5:51:8f:d6:b6:62:74:ba:d2:09:
a0:96:21:d5:a9:df:f4:4a:89:ef:52:0c:10:6c:e8:
0f:e2:5a:20:76:47:c4:7f:07:39:e2:72:06:fd:23:
b0:bb:0a:0e:28:2d:79:6f:84:18:67:8c:99:8b:ab:
df:89:84:e5:a6:31:3f:7f:14:94:49:d2:ec:6a:31:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1C:8F:5F:40:90:5C:D8:FB:BF:17:6A:B3:DF:C3:0F:D4:3E:80:BF
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f7:bf:c5:a8:b2:6f:0b:55:3a:87:75:09:66:b6:4c:4a:65:
e4:db:75:09:62:a6:9a:f4:f0:73:35:45:6e:0c:b9:71:a9:2c:
eb:72:6d:b6:e4:38:74:78:3f:67:e6:8c:86:f2:db:e9:c2:42:
bd:4a:10:6f:c9:a0:b2:28:c8:48:8c:5d:de:c8:33:14:8c:d7:
b1:2f:45:d9:5e:17:0c:4c:5a:c9:be:6b:78:c5:59:88:06:e3:
33:ab:82:92:63:3a:79:0d:aa:fe:89:b9:0e:68:1b:4f:e4:07:
ca:f1:66:92:d6:08:0c:64:05:ae:71:f4:90:ee:b3:57:90:a1:
23:2c:bf:83:d6:1d:60:99:ea:a1:7a:eb:2c:76:20:91:70:50:
09:72:2c:cd:c8:46:a5:13:39:07:86:4c:d6:40:c6:e1:67:fd:
f5:e6:f2:76:d9:e1:a7:45:9f:e3:c9:c9:9d:a6:b1:dc:9a:3c:
07:5f:4a:6f:47:98:9c:4f:c4:28:5e:87:28:48:a9:fb:74:4d:
a4:84:fb:36:56:b4:0d:19:50:52:d5:15:d5:28:0f:a4:d4:fa:
5f:ff:d5:ac:1c:9c:0a:71:0d:f1:82:f5:0b:8a:2c:10:c5:36:
cf:3d:53:dc:70:30:40:fe:53:b4:23:dd:59:07:23:39:1b:f0:
87:fe:bb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:18 2025 by rpki-client