Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
File: ZgwymWrhJGGJciLi2cwJOTCSfd0.mft (raw, json)
Hash identifier: igkJHqlsb7LcCI60fq0F0t0l5rcdHQ2Z4SMnF5IIIE0=
Subject key identifier: 94:2A:C0:97:D2:7D:75:BD:05:73:06:5D:69:86:6A:7D:02:EC:D9:9D
Authority key identifier: 66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
Certificate issuer: /CN=660c32996ae12461897222e2d9cc093930927ddd
Certificate serial: 0197B5FC160DBB2E0102C6919815BDF8BF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 10:01:26 +0000
Manifest this update: Sat 28 Jun 2025 10:01:26 +0000
Manifest next update: Sun 29 Jun 2025 10:01:26 +0000
Files and hashes: 1: ZgwymWrhJGGJciLi2cwJOTCSfd0.crl (hash: n0s8CCR3HuN/hbcF9L52GlZDAR8M+UeYwm6eQY0NOX8=)
2: eTKPP1Wu3aoon8pt_QrTkfCfijI.roa (hash: 40MqBGQjbWUX+1wVm2enGIIcrfvo/5OK7+JG7rETf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:16:0d:bb:2e:01:02:c6:91:98:15:bd:f8:bf:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660c32996ae12461897222e2d9cc093930927ddd
Validity
Not Before: Jun 28 10:01:26 2025 GMT
Not After : Jun 29 10:01:26 2025 GMT
Subject: CN=942ac097d27d75bd0573065d69866a7d02ecd99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:07:d1:3b:f4:b8:48:99:31:21:01:f1:99:6b:
13:59:4d:fd:fa:1f:e2:21:f1:10:d4:e0:12:bf:ff:
f2:79:cd:93:fc:1f:45:24:dc:bf:ef:86:c1:5b:12:
44:32:50:69:d4:dc:1b:8a:1f:22:32:2f:d4:d4:82:
ff:92:46:44:af:87:3b:46:ee:12:dc:2a:3f:e4:4f:
b1:28:ec:f0:b4:a3:5f:e1:5a:4b:79:62:a6:80:18:
1b:e2:1f:69:2e:15:34:3c:1f:2a:83:80:6f:74:fc:
67:f2:73:5f:d5:ba:10:85:8c:8c:57:f6:e3:43:5c:
d4:32:68:bb:aa:43:87:5a:36:38:38:71:3d:18:36:
02:8a:c0:14:d4:fc:3d:48:ea:11:1c:ef:93:aa:4a:
3a:15:2b:9a:cd:9b:03:6d:8e:df:51:48:f8:df:07:
7b:6b:4b:ed:93:ef:65:67:f7:c9:7c:4f:71:3a:a3:
cc:c6:9e:9f:13:d4:19:b5:c0:36:1e:3d:d2:15:c1:
31:23:de:c6:3f:05:bb:fa:ef:53:da:4e:76:db:4d:
1b:11:9d:ce:b4:74:75:55:3c:c4:ea:ba:62:6b:c3:
8f:4f:78:e4:ba:cc:fd:56:db:d7:ec:60:c6:d6:7a:
26:c7:54:61:e1:f5:5a:7b:bf:42:f6:ee:cb:6b:ce:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2A:C0:97:D2:7D:75:BD:05:73:06:5D:69:86:6A:7D:02:EC:D9:9D
X509v3 Authority Key Identifier:
keyid:66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:28:89:2c:5e:d5:ab:c6:9c:88:64:9a:97:40:a1:44:c2:c7:
61:04:95:50:13:dd:22:73:08:41:8e:b3:86:e4:56:32:35:d3:
5b:66:9d:bc:44:25:f8:2c:cd:5e:ae:e0:e8:0f:b6:1c:55:e3:
14:5d:fa:4a:46:01:da:8e:83:b3:ec:62:c0:77:25:62:98:e9:
65:b1:d5:a8:3f:ef:01:9d:3d:6f:1e:19:81:18:0f:cd:49:98:
83:73:08:91:5d:79:66:f5:76:5d:6f:ce:e4:fc:ac:c4:c2:0f:
f1:3e:1c:9f:09:8a:1a:ce:74:51:91:fa:7a:ec:26:50:c3:fd:
d0:fd:04:c2:0e:01:14:0b:ac:c7:7e:3e:3c:82:14:3f:59:ee:
6a:0e:93:1b:45:79:a2:88:f9:7a:1b:16:10:aa:0b:31:4d:43:
df:8e:20:5b:80:9e:e8:7e:b9:13:d4:4d:50:c2:0a:e2:4a:33:
7b:52:d9:88:e6:04:19:9b:fe:ee:0d:8a:b9:bd:21:d2:a0:02:
95:2c:c0:c0:9e:08:d2:9e:ee:53:1f:df:85:7a:e4:6f:3e:87:
32:7c:b4:ba:1e:63:54:d6:f9:76:36:05:11:17:cc:f4:a5:52:
a2:93:fe:5b:f7:30:da:89:d4:c4:40:e8:4b:0d:a6:db:fc:d1:
3a:e0:3d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:48 2025 by rpki-client