
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
File: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft (raw, json)
Hash identifier: hVQ2+NLxkL7rGb2+ssB1mQR4LBFBRoar/Wp4RP2T4mA=
Subject key identifier: 7C:B5:B9:70:53:47:58:AC:F2:FC:BF:08:D4:FC:45:E9:27:7D:A5:73
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial: 0197B6A21A869FBA02B17474B3064323A6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
Manifest number: 0D50
Signing time: Sat 28 Jun 2025 13:02:46 +0000
Manifest this update: Sat 28 Jun 2025 13:02:46 +0000
Manifest next update: Sun 29 Jun 2025 13:02:46 +0000
Files and hashes: 1: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl (hash: qOP2X4zAh/ZR2BxdV6AqNH2r4jKaIJ1VkRWd+0LNR+M=)
2: bmxfR1YI28e9AvruScrILUTRG3I.roa (hash: cqN9qg0IAUOQT2Uuvb3v+aRnSBYZJQOZClfPWFzUISg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:1a:86:9f:ba:02:b1:74:74:b3:06:43:23:a6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Validity
Not Before: Jun 28 13:02:46 2025 GMT
Not After : Jun 29 13:02:46 2025 GMT
Subject: CN=7cb5b970534758acf2fcbf08d4fc45e9277da573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:82:aa:df:b4:a6:4e:d0:14:7f:a2:20:85:e5:
b7:0e:ca:40:a1:b4:2f:87:96:f3:7b:70:7f:aa:7f:
f6:0f:14:e8:f9:6e:7f:a1:4f:07:42:4b:89:fb:11:
4e:34:c8:f8:95:97:04:16:0f:b6:ab:e0:88:68:eb:
7a:6b:2f:08:1e:09:ff:68:11:69:64:7c:fa:8e:2b:
3c:cd:c9:aa:8b:fa:d8:29:bc:ee:43:d0:b5:d9:61:
53:6d:cc:17:ae:96:31:b3:50:53:02:31:58:04:42:
5d:7d:38:3d:f2:18:26:45:30:03:35:0d:9b:e8:50:
13:72:12:6b:e2:3c:a0:39:e6:e5:43:30:68:00:15:
03:49:db:23:89:10:ef:de:90:a7:2b:65:37:ba:9d:
b7:fa:88:f7:45:ca:5c:5a:e7:b4:44:75:c9:25:e8:
20:cf:12:03:0b:bb:b9:d1:f6:8d:03:dd:16:f8:23:
18:20:6c:75:3c:8a:51:e8:3e:2a:da:54:d4:57:77:
b5:37:22:00:d8:cc:fb:96:3c:66:5f:67:4c:37:2c:
ca:7a:3b:74:40:dd:a9:a3:c7:88:8e:88:a2:fc:ae:
44:65:fd:43:7e:c0:7a:f2:7f:4f:f2:2c:41:b1:44:
d7:b8:af:45:c1:57:cc:a9:9e:25:95:b6:46:b3:83:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B5:B9:70:53:47:58:AC:F2:FC:BF:08:D4:FC:45:E9:27:7D:A5:73
X509v3 Authority Key Identifier:
keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4d:e8:7d:46:37:1f:d4:74:e9:fc:ee:50:ac:09:da:ad:ff:
bb:3e:38:73:f4:fe:c8:4e:2a:62:5b:c4:01:f6:51:ae:e0:d2:
9c:3f:5b:1d:c2:ed:dd:d2:6c:6d:bd:48:1f:45:f4:7d:62:99:
34:dc:e3:df:7b:4e:38:38:19:13:67:e4:f0:68:de:9e:96:c8:
e8:04:df:39:b4:45:60:a0:39:c3:a2:ae:b2:95:99:09:f2:87:
ce:16:e6:3d:e5:3d:b1:72:0e:9a:49:61:f4:fd:04:af:fe:00:
37:2d:8b:df:b7:c4:5c:db:10:7f:9b:94:f4:c1:1e:76:3a:a9:
ed:db:59:42:2a:2e:a1:40:aa:f9:fa:46:fc:1e:ce:ae:53:53:
84:05:c1:d9:f9:5e:b6:71:4c:df:e3:e0:73:53:59:d4:f3:c7:
e0:0f:64:ba:93:58:be:39:82:f6:bd:fb:aa:04:a4:a9:7d:fe:
a4:05:a9:06:21:54:47:ad:1d:e4:0e:a0:05:c3:67:5a:1e:1b:
46:c6:2c:f9:fd:d5:6f:21:a3:17:52:2b:c8:83:df:e6:0c:60:
43:6d:dd:26:7f:94:82:7e:4a:7a:33:91:b6:c8:f3:3b:6d:8c:
9f:bd:aa:25:41:76:5a:61:58:46:44:1d:b1:64:21:62:42:06:
6d:8a:6d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:20 2025 by rpki-client