Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier: Xk6zuWaORriZfveCbBU9WVbS+3ecMdBzpxzGIl3xXdY=
Subject key identifier: B7:05:12:39:F5:30:67:E3:E0:81:79:B8:2E:3E:74:0B:3B:AA:CE:64
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer: /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial: 0197B6D752DEFE0A79454416A16DE830F33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:00:54 +0000
Manifest this update: Sat 28 Jun 2025 14:00:54 +0000
Manifest next update: Sun 29 Jun 2025 14:00:54 +0000
Files and hashes: 1: CHPWlUWLkhhN8KqcQvdgSIi7nSQ.roa (hash: oTR4o/Lu/P2pP/jqKMJRfshRV5ap+zULnMucNhK6ij0=)
2: D4kPuzxI99LO9za1uzpIOKYzyZk.roa (hash: c+Ehw1XN1UBVbiuLbeIY9bu5RDnn9bT1POuqZJ3ek+g=)
3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: +5/veiTUPBGcMow2w/DiMMi7B3y6+nYMl4JVt7siBJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:52:de:fe:0a:79:45:44:16:a1:6d:e8:30:f3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Validity
Not Before: Jun 28 14:00:54 2025 GMT
Not After : Jun 29 14:00:54 2025 GMT
Subject: CN=b7051239f53067e3e08179b82e3e740b3baace64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:88:66:c3:34:9d:fc:d0:e6:4b:5f:a2:1a:
23:58:15:d4:8f:ca:54:db:c3:8a:4a:d9:b2:cb:3f:
43:69:c4:95:3f:10:13:4a:c4:e9:54:e9:eb:9a:72:
fa:4b:8d:7c:dd:e0:ac:b8:c6:7d:bc:91:c3:b8:dc:
c8:99:76:62:fb:87:21:23:1c:8c:ce:58:e8:84:92:
0d:0d:d3:66:50:12:41:04:56:89:09:21:c5:5f:72:
e5:95:de:8f:b5:c6:ab:6e:b7:bc:97:66:d4:b7:f2:
74:e0:05:2e:49:02:d5:cf:7c:eb:c4:90:44:7b:90:
b0:30:7d:31:87:3e:39:c9:35:1b:49:2c:eb:c8:18:
11:62:92:81:b7:fa:cb:d4:11:a2:0f:05:7f:e9:37:
14:4d:0c:a2:18:d3:74:94:c9:0b:95:43:0f:0c:f5:
9e:6f:14:1c:b1:91:db:6b:9c:ac:26:48:43:09:c6:
dd:aa:95:b5:5d:12:44:98:fd:ab:db:5b:87:43:b9:
7f:e4:71:60:6e:17:07:46:d7:10:a7:04:a9:bc:91:
e1:eb:eb:67:7f:75:c2:85:c6:e9:74:04:ec:4e:e6:
c1:80:e1:30:68:44:b8:6c:fd:d6:ab:cd:ba:0e:f6:
15:c1:35:93:b6:9d:f0:c0:38:73:a0:b8:e8:b2:94:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:05:12:39:F5:30:67:E3:E0:81:79:B8:2E:3E:74:0B:3B:AA:CE:64
X509v3 Authority Key Identifier:
keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:07:c1:14:12:57:9d:a3:13:78:45:2a:90:f2:35:39:65:b6:
0c:bc:ab:5b:18:31:41:d5:fd:a8:a5:01:3c:02:c1:bb:c0:5d:
ca:65:fd:b2:27:06:c0:b3:c4:d3:4d:aa:37:fc:ee:01:bd:1f:
d7:41:93:fc:15:2b:54:96:1a:15:5d:59:1f:90:0e:54:7d:72:
7c:90:3f:2f:e0:60:42:7e:ab:29:0e:41:1a:94:b1:be:22:12:
7b:f6:27:69:7d:39:a4:75:bc:53:cd:27:04:ef:74:b2:b5:c3:
60:f4:d8:e4:36:6b:e4:2d:02:38:dc:21:cf:59:94:e3:e2:58:
2e:c9:7d:db:a9:4c:85:8b:06:de:3d:a2:b5:db:7a:22:60:b8:
3e:96:89:54:7b:f0:5a:89:0a:2b:47:52:f0:b2:29:23:0a:63:
98:bf:a0:5d:8d:e0:cc:a8:d8:59:d5:cb:1a:5f:c4:a1:2b:55:
b6:cc:98:13:6c:af:1a:6b:46:20:80:d7:cc:3e:6b:26:00:13:
31:5a:8d:ea:da:aa:d6:b7:70:b3:2c:5b:64:26:68:0a:7a:e2:
7b:5c:d1:1a:fe:a6:54:fe:be:2c:39:25:f1:77:7c:99:fd:ee:
90:15:f4:33:43:7b:0a:1d:0d:ca:d4:51:2b:3c:e2:7a:cb:ab:
9d:9e:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:31 2025 by rpki-client