Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json)
Hash identifier: nKXsd7ykupQ612vrbG01WVCUTKO/8FcnxKKo3GYaykw=
Subject key identifier: 86:FD:FC:77:50:93:AB:F4:13:34:7D:E2:1A:BD:03:BD:5C:D4:C8:92
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 0197B6A14DF441690B947889C6F12B927885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
Manifest number: 06E9
Signing time: Sat 28 Jun 2025 13:01:53 +0000
Manifest this update: Sat 28 Jun 2025 13:01:53 +0000
Manifest next update: Sun 29 Jun 2025 13:01:53 +0000
Files and hashes: 1: O6G70f_k228z-ZHm2ohB4tt-ekc.roa (hash: /bGnkVKQw6cLnt6o6jgq/vbGsus5bIRs/NypwJUrJ1g=)
2: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: 8Nyk7zA+c2skpMKcEFki38u9nSmdOR6ykx3Y1j3xJRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:4d:f4:41:69:0b:94:78:89:c6:f1:2b:92:78:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: Jun 28 13:01:53 2025 GMT
Not After : Jun 29 13:01:53 2025 GMT
Subject: CN=86fdfc775093abf413347de21abd03bd5cd4c892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:bc:f3:9e:31:7d:90:1e:57:31:e7:a4:a3:
dd:46:a4:b8:6e:3e:c7:f7:42:e7:da:f0:29:16:2a:
ed:fa:42:7d:dc:7e:5e:8d:ff:1f:07:15:b8:49:48:
27:7d:a1:a2:3d:4b:ed:e6:e4:90:98:78:ed:e7:92:
fe:47:b3:e1:21:80:46:fa:e6:d2:4e:6c:35:38:31:
16:74:45:1b:f3:a5:e3:76:d5:3b:0e:6e:1c:6d:e7:
76:a7:39:44:05:5a:a7:ac:18:5a:35:52:21:6d:17:
c6:62:07:c0:1e:d8:87:5f:86:a3:2e:9f:46:50:90:
ef:f3:22:10:6c:08:d0:2e:69:b2:fd:ca:12:b5:d5:
d7:4a:9d:46:fe:45:52:69:c8:c8:6b:3b:04:f5:4c:
a1:5b:13:2c:2d:8a:c2:45:9e:69:0f:bb:65:da:18:
d7:4f:21:af:17:f6:bd:45:6b:43:1b:aa:3b:f8:e8:
1c:58:d6:15:f5:8d:f2:f0:fb:a5:93:fb:47:ad:2c:
61:e4:f3:63:9c:cc:86:3e:e2:3d:47:4b:70:56:ef:
85:ec:19:da:e8:4f:3e:12:59:c1:ab:50:8d:3e:88:
e7:fd:11:7a:5c:fe:b2:ae:6b:ce:34:48:3d:0d:30:
2e:21:fe:c1:9b:ee:50:f5:b3:a3:47:e6:ff:a9:b1:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FD:FC:77:50:93:AB:F4:13:34:7D:E2:1A:BD:03:BD:5C:D4:C8:92
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e8:b1:f5:a2:7e:55:ce:32:86:3a:b7:f1:0f:c9:3f:0e:48:
80:16:01:39:9c:33:5b:54:ce:c9:c7:7b:82:6d:5d:87:d9:f3:
0b:0d:6a:b5:e0:57:0f:39:b5:5d:86:c6:49:cb:c6:4d:35:b7:
d5:a4:b4:4c:52:7d:81:93:c9:b0:02:03:8b:16:28:23:d2:d5:
56:a1:06:ef:82:f3:86:5d:33:ef:30:37:a2:95:88:94:3a:5a:
1f:25:48:6c:42:5d:83:08:6e:a2:eb:9f:8b:02:23:25:97:3c:
c7:68:02:73:ea:91:4e:7c:ff:9f:eb:f1:dc:25:12:83:ee:87:
87:7f:08:68:c1:13:f6:aa:5e:6c:42:f7:ab:f1:f2:b9:62:f6:
a6:13:fb:bd:af:96:fa:38:15:4d:40:6e:8b:07:00:71:c0:ad:
c9:0a:78:aa:d0:66:0f:08:07:15:ff:64:29:59:53:fb:de:4a:
93:a8:9d:8b:5d:87:4d:64:79:c0:42:40:1a:c1:8f:99:15:62:
96:1e:df:bc:ae:44:70:fb:32:20:84:61:bd:a5:22:21:75:da:
85:51:6b:b0:6e:77:07:32:ba:20:40:f4:7e:e1:37:8d:b8:58:
d4:29:ef:fd:01:1a:1e:0e:20:53:1c:07:c3:04:7f:48:ab:62:
4b:15:56:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:24 2025 by rpki-client