Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json)
Hash identifier: +74zJmRiEiNtde3hoIi6j029NChfLdTpfe0B9DCH/ZM=
Subject key identifier: E0:BC:08:0D:5B:B1:22:59:69:0D:32:70:7D:A7:74:27:D9:5E:0F:D2
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial: 0197B7B34C5014A549C7A217066D05A5A3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
Manifest number: 1550
Signing time: Sat 28 Jun 2025 18:01:10 +0000
Manifest this update: Sat 28 Jun 2025 18:01:10 +0000
Manifest next update: Sun 29 Jun 2025 18:01:10 +0000
Files and hashes: 1: 3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa (hash: r9nE6BN+YAUaWRC/VJWHKz/x1whGDYTMWiwj3TDgzA0=)
2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: casumGQM1wDI5WpG3qa8U2sgKPuib0/DRZIpe6pURe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4c:50:14:a5:49:c7:a2:17:06:6d:05:a5:a3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Validity
Not Before: Jun 28 18:01:10 2025 GMT
Not After : Jun 29 18:01:10 2025 GMT
Subject: CN=e0bc080d5bb12259690d32707da77427d95e0fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:a4:f7:57:05:a8:50:90:53:28:9a:de:04:
86:f7:24:88:5c:60:f6:bb:d3:3d:a2:78:f3:29:3b:
ea:40:b9:5d:0b:d5:12:ee:58:1b:49:a3:66:2d:fc:
29:b2:81:16:c1:d1:16:7a:c8:30:56:70:b3:0e:3b:
72:7e:d3:ff:64:3c:61:7d:a0:5c:52:09:4c:11:86:
fc:bc:21:b0:c8:5d:1a:47:fd:16:90:19:c0:72:4c:
01:4a:3c:ef:af:eb:94:e6:59:d1:14:cb:61:08:16:
f0:a0:5c:3e:2c:1e:a0:7d:c9:a2:47:3c:86:69:bd:
70:9f:0e:44:21:93:ed:88:16:30:91:cb:e7:9a:87:
a6:c4:61:c9:30:89:28:82:19:0e:66:bc:ab:15:90:
a7:45:32:30:84:f9:25:d6:f8:41:96:02:f2:d3:da:
72:5e:80:de:d5:4f:19:c1:d1:f4:35:a3:25:3a:6b:
8e:92:7e:06:72:dd:f1:36:0e:a7:c3:fa:f0:9e:09:
a6:11:df:7d:e9:f6:b1:6a:e6:34:b0:c5:b8:65:e4:
e3:81:9a:84:07:ac:79:88:e5:82:66:54:7e:66:8b:
c5:b2:ff:2c:11:be:2a:9f:5a:7e:64:d6:42:91:ce:
db:a8:90:6d:7f:6d:27:f0:4d:89:95:f3:85:07:e3:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BC:08:0D:5B:B1:22:59:69:0D:32:70:7D:A7:74:27:D9:5E:0F:D2
X509v3 Authority Key Identifier:
keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:70:05:f5:02:a1:79:f7:8e:10:20:fe:ec:57:50:86:6d:e5:
52:36:18:06:af:8b:67:85:56:03:65:8d:ab:53:67:24:99:d6:
98:cf:b7:33:6a:e5:6c:9e:e3:9a:5a:d1:9a:e3:d9:8c:4a:41:
b1:ce:21:c6:38:a0:8b:b5:87:e4:90:5b:4a:f9:33:16:95:19:
ad:3c:f8:94:b3:94:b5:17:b1:1c:28:e4:86:7c:6c:97:ba:a0:
36:47:93:6c:ed:f2:36:4b:06:9d:36:8e:e0:c0:47:55:94:e9:
3f:eb:46:31:40:04:85:9f:3d:34:4f:aa:5c:e1:0c:2d:f1:db:
11:8e:f8:75:c5:ba:2a:32:dc:b0:81:53:ba:31:36:ca:ec:34:
6a:57:86:e4:65:49:29:16:54:66:4d:7d:5b:08:3d:bd:ea:af:
9f:21:0c:17:78:6e:f6:e4:44:a5:7c:24:38:11:bb:d5:57:2d:
32:d4:c3:e8:fd:ef:ef:d3:71:2c:3f:2f:02:ed:16:e2:45:30:
4b:d2:d7:93:f2:6b:25:13:0e:7e:b4:f8:e9:cf:d1:ae:f3:e4:
04:02:c0:d2:c7:65:d5:a1:76:3d:46:2f:fb:4b:49:7f:f2:48:
16:4f:78:40:3b:83:84:89:6e:24:6e:92:f8:73:d8:b4:34:bc:
41:31:96:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:58 2025 by rpki-client