Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
File: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json)
Hash identifier: Yviq1n3hmSOxaU0CYve4P3qW6/lggnhI0m8fGmeP2a8=
Subject key identifier: A5:A6:E0:0D:1C:52:02:CE:A2:65:74:D7:5C:94:5F:5B:25:1F:53:96
Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
Certificate issuer: /CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Certificate serial: 0197B5FBE0EEC2C94BD8867FDEED53EB6CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
Manifest number: 0154
Signing time: Sat 28 Jun 2025 10:01:12 +0000
Manifest this update: Sat 28 Jun 2025 10:01:12 +0000
Manifest next update: Sun 29 Jun 2025 10:01:12 +0000
Files and hashes: 1: GFCwLYZ1iVeKH5Z8sR6pOUA3Lm8.roa (hash: cER4WH5eXS4Lm/LZABdPjot9dROZgtRCRJnalyX5t/M=)
2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: aXe6pu+oJ41quBZzx3YfgCh2/pPfveSq4kkWITcipjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:e0:ee:c2:c9:4b:d8:86:7f:de:ed:53:eb:6c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Validity
Not Before: Jun 28 10:01:12 2025 GMT
Not After : Jun 29 10:01:12 2025 GMT
Subject: CN=a5a6e00d1c5202cea26574d75c945f5b251f5396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:dc:0d:2b:92:ca:20:38:ea:64:70:1c:c9:
43:1d:15:fe:e9:19:4f:6f:3b:74:7b:05:b0:fc:0a:
c0:f6:a7:92:9c:9b:ca:ca:7c:f4:58:ea:73:d5:fc:
3d:66:f3:ac:aa:a9:e4:df:68:20:57:67:10:db:bf:
8b:4f:58:76:6f:b8:57:66:60:39:27:d2:10:a9:14:
88:31:ca:bc:f3:cd:e8:49:af:8f:4b:c4:a0:55:bd:
79:22:15:87:d5:13:0f:e0:fb:00:d3:6b:0d:bc:da:
a5:2d:2b:48:6d:16:2e:90:24:71:fa:80:5c:9e:b8:
e5:23:18:98:4f:02:9b:d6:86:9f:1b:99:3e:f3:73:
80:df:1d:bd:bc:a2:fb:54:90:4d:9c:b5:b6:33:5c:
01:11:f0:61:66:6c:35:98:cd:8a:42:6e:ba:a3:17:
6c:e5:55:b5:52:31:c7:fc:20:bb:0f:1d:05:0a:78:
2a:59:1e:bc:0d:f1:74:1e:03:00:92:9e:a5:c6:b6:
90:c1:f7:13:6b:72:26:7e:b3:d7:bc:2b:99:97:16:
45:20:6c:28:95:e2:dd:ec:f1:ac:f4:0d:77:63:41:
ca:b1:06:2a:00:89:d7:22:10:58:50:0a:c8:e4:2b:
65:c5:98:a9:55:97:1d:44:90:9d:b1:f2:ac:37:94:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A6:E0:0D:1C:52:02:CE:A2:65:74:D7:5C:94:5F:5B:25:1F:53:96
X509v3 Authority Key Identifier:
keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b9:86:9c:7e:ba:fd:93:4b:77:7a:ac:e9:48:77:4a:4d:d2:
5b:4d:f5:d4:cd:4b:da:af:b8:38:54:e4:e9:ac:6d:80:80:5b:
4f:f5:78:de:7a:85:4b:ac:b1:73:2e:f2:0e:ae:42:67:96:1b:
69:70:8b:3d:fd:8c:23:ad:c6:94:79:38:8a:67:c0:b1:f9:f3:
1a:fa:49:89:2a:7a:1c:4e:1e:b5:0b:ec:97:f3:e6:1f:43:c5:
49:f1:86:80:f3:72:f9:b4:bf:17:6b:01:cc:82:1c:a4:21:1d:
fd:70:5a:8d:39:85:dd:29:12:e3:cc:26:50:3a:96:ca:70:19:
06:22:93:52:ea:7f:b4:ec:44:56:fc:97:1c:73:ed:94:e9:49:
3a:38:62:d7:11:81:d7:75:1a:b6:8c:53:a6:14:75:45:5f:da:
2d:23:68:08:03:e8:3c:ec:9c:14:1d:fb:be:8e:6c:9f:c1:28:
2a:c7:c7:9b:34:0f:ec:49:a7:5a:71:6f:db:cc:9b:2f:8f:ca:
8b:e0:ec:b6:17:49:37:a6:d1:57:48:b5:e6:93:35:25:93:2b:
31:70:d1:d9:5d:ce:f9:35:6c:79:1a:e8:48:e0:e0:67:ff:36:
98:75:29:ea:bf:13:00:bb:f6:22:e1:ca:d4:e2:b2:fe:26:35:
97:2f:0c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:37 2025 by rpki-client