Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
File: b_zhb_1qm6nFcxRVikR_q_bFwNo.mft (raw, json)
Hash identifier: dvUu08ZtsiUmCllj8n9b76hPEoe8j0tpE45SUVBDdXc=
Subject key identifier: 41:BD:58:22:C3:80:01:83:16:AE:5F:A5:4E:16:E7:21:80:71:FF:3E
Authority key identifier: 6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
Certificate issuer: /CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Certificate serial: 0197B7B2E2750AE94A18C227D2E0A55CADB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
Manifest number: 069E
Signing time: Sat 28 Jun 2025 18:00:43 +0000
Manifest this update: Sat 28 Jun 2025 18:00:43 +0000
Manifest next update: Sun 29 Jun 2025 18:00:43 +0000
Files and hashes: 1: EGnmM2wVMqJLntTcgDGU7znYv7c.roa (hash: Bu3yW0I7bzwPNxcVAKRDv1V3C8AYG3+UWoK1onNW2P4=)
2: b_zhb_1qm6nFcxRVikR_q_bFwNo.crl (hash: 6nsBgsajCM44gLFUMIKGfd1YKo91F6fWxvRzCWau0qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e2:75:0a:e9:4a:18:c2:27:d2:e0:a5:5c:ad:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Validity
Not Before: Jun 28 18:00:43 2025 GMT
Not After : Jun 29 18:00:43 2025 GMT
Subject: CN=41bd5822c380018316ae5fa54e16e7218071ff3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:0f:c0:b5:91:43:a3:78:26:87:e1:dd:37:
af:65:17:75:85:aa:b2:c8:e7:71:2d:f2:0b:72:2f:
ee:97:7f:67:01:89:fd:7a:98:35:fb:30:32:a3:70:
e4:0f:ab:13:ac:51:9e:f7:99:b6:2f:38:36:bd:5e:
a7:a3:41:93:0e:90:97:d6:5b:d6:d7:c6:8d:0f:c9:
37:05:fa:2e:a5:61:39:77:02:5b:09:8a:80:e6:ab:
65:e2:0c:da:1d:a6:38:5e:5c:78:75:d9:ba:67:79:
1d:ef:c0:3c:1c:87:8c:32:cc:73:d7:1e:d8:ee:df:
e0:c2:05:22:df:34:dd:62:e1:98:47:d7:3d:57:fb:
e5:ad:18:81:8f:9d:93:f4:db:24:ca:a5:90:80:b7:
b1:ea:07:4d:26:19:3c:a6:4f:1f:3a:19:d1:84:b4:
b1:55:95:37:5b:92:8c:32:99:ee:f6:b7:12:6c:d7:
1f:1a:49:e0:57:d2:04:ce:a2:81:83:5f:20:d9:aa:
8a:6f:1d:3a:04:5d:b1:ad:52:2a:e6:8c:24:8e:69:
57:88:f7:89:7d:c2:73:bf:61:c7:27:1e:80:8a:ac:
a7:37:84:79:b5:09:40:bd:19:62:56:e5:e0:c2:36:
8d:b5:31:af:7d:5d:f2:e8:fc:31:1d:4d:eb:ae:7f:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BD:58:22:C3:80:01:83:16:AE:5F:A5:4E:16:E7:21:80:71:FF:3E
X509v3 Authority Key Identifier:
keyid:6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bf:1a:c2:51:68:77:d2:ef:42:c7:bc:b7:69:89:bb:94:5f:
e4:48:95:64:30:11:a4:78:d6:63:6c:2c:bd:bf:bb:18:33:9f:
2e:97:80:27:b3:14:fd:d5:04:f1:2e:44:b4:7e:94:4a:57:da:
40:ef:51:8b:52:77:f2:7e:f3:a4:97:e6:90:49:99:29:22:d2:
9e:f9:fb:22:0b:77:6b:0d:fe:a5:a8:02:be:c2:bd:0d:a3:0b:
a7:51:3c:4d:04:e1:a4:d1:f7:dd:3e:26:b0:c1:9a:3d:67:d6:
5d:87:46:f3:93:20:f9:af:dd:3e:42:58:6f:58:11:d5:5e:e9:
3f:b9:c6:87:1d:6b:78:fe:a8:81:c6:11:75:7a:f8:c1:6e:e4:
4e:1d:fc:62:df:8f:1d:41:ac:b1:89:2e:e9:8b:9e:1d:ab:f2:
7d:eb:2d:6d:97:8f:b7:d5:ba:9e:db:94:9d:bc:ac:cd:88:02:
f1:98:35:91:8c:2d:e1:25:82:b9:d4:be:f2:05:75:fd:39:a4:
d2:99:97:47:96:79:b8:f6:e4:bf:39:e7:16:a2:4f:31:fe:dc:
e3:9c:df:66:fd:24:a4:c1:2c:5b:5f:4a:d3:e3:3e:2f:22:c1:
a8:59:2d:14:50:da:0e:e0:e1:69:8f:89:a7:43:fd:68:b3:4b:
dc:21:f5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:17:56 2025 by rpki-client