Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File: ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier: rdx+SVUNWpdalD1Evpc8ytasquiRVfCdIxf0o9+/Ybs=
Subject key identifier: 15:8F:1C:2C:8D:3B:6C:B4:0C:30:10:60:C3:50:B9:2C:86:2C:A9:C0
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 0197B7EABAA743A9D9D4D8B287B0F134CDCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number: 0DD2
Signing time: Sat 28 Jun 2025 19:01:43 +0000
Manifest this update: Sat 28 Jun 2025 19:01:43 +0000
Manifest next update: Sun 29 Jun 2025 19:01:43 +0000
Files and hashes: 1: 7EbuG3-0BaX89LTHJW4crEKXOgE.roa (hash: JIvKyqKrpPXGWekxvpmbylJZltK1pz01V4vTqb0PGqw=)
2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: TaaIYOrTzhbfM+gg4Byvl1v+VVQedHLQ6Gtp5qiAX20=)
3: o17-yma_5t9exYXoXM4y9yk2rGc.roa (hash: 21brSGZYsEDJcaoR6r/SPKw0TZMGaiZDGKvCII90PgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ba:a7:43:a9:d9:d4:d8:b2:87:b0:f1:34:cd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Jun 28 19:01:43 2025 GMT
Not After : Jun 29 19:01:43 2025 GMT
Subject: CN=158f1c2c8d3b6cb40c301060c350b92c862ca9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:4f:2c:13:eb:ae:f9:a0:f3:f6:2b:19:d9:
77:bf:3a:aa:69:75:3e:2b:e9:3a:2a:0f:ed:26:34:
40:e2:84:0d:92:e5:6a:55:38:43:5d:7f:ba:0a:ef:
d3:46:94:d5:5a:3a:39:4d:2c:8e:7b:29:36:8f:f5:
1d:dd:70:59:0b:39:75:cd:7b:1b:2c:aa:6c:e5:59:
5d:93:9b:16:2e:9a:cd:47:b1:c4:b7:b9:41:b7:22:
50:e9:20:53:c2:9a:fe:d0:b0:59:47:33:2d:95:90:
40:d5:9a:70:f9:85:13:86:74:8d:7b:3a:af:4f:3b:
c0:ee:ed:4d:0b:9b:f1:14:05:a3:ae:24:16:30:49:
48:29:27:ae:4e:39:0b:ae:5b:d0:03:c2:cd:bd:d6:
a3:d0:51:0a:94:5c:04:35:ab:7e:2a:3e:c2:fe:42:
03:7f:88:68:2e:64:26:12:08:7e:ef:ca:39:f2:ab:
c3:6f:e6:5e:ad:71:e8:e2:5d:7a:a2:29:02:47:01:
e9:7e:e7:1b:ee:5f:cb:fb:5b:3a:ea:04:97:fd:1a:
13:87:d1:a5:c5:5a:46:b2:07:77:10:31:6e:27:f7:
f5:25:1c:26:58:3c:1b:33:69:b6:7b:6b:61:f2:81:
21:36:e2:a1:ff:1d:e9:92:8e:27:ac:1d:69:39:dd:
f3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8F:1C:2C:8D:3B:6C:B4:0C:30:10:60:C3:50:B9:2C:86:2C:A9:C0
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:51:6a:be:52:54:e7:de:2a:bf:8f:c1:19:d8:3a:49:08:71:
38:59:3c:28:50:8e:c0:e1:44:e4:9f:41:82:59:b3:ce:ce:2c:
5e:5e:fa:90:31:e7:6b:0f:03:22:18:fd:b4:6d:73:85:42:c4:
5f:c5:d8:94:98:d3:1c:cf:1a:e8:f8:4f:1a:60:1c:8f:54:c7:
7b:1a:87:9c:12:26:7a:01:bb:9f:de:14:4c:83:5a:c4:99:70:
16:a2:d4:42:84:5d:b1:82:38:eb:1d:5b:a0:99:d9:b8:1f:68:
c5:9f:45:05:58:0c:49:71:68:04:7b:ff:99:45:b9:7e:c0:d0:
2e:e7:f7:d2:51:b5:1a:45:c6:09:a6:dd:e3:7d:a4:5d:2d:00:
a7:6c:93:97:54:34:c0:97:e4:5a:d1:72:0e:72:20:9f:b6:88:
81:df:40:f6:a0:e5:94:15:62:4f:18:b7:d1:5d:42:a3:0c:85:
a6:d5:bd:7a:b3:44:12:a9:39:f1:bd:25:39:18:72:29:12:cf:
78:33:98:06:43:98:94:21:39:d7:7e:b1:01:80:34:eb:ba:18:
56:24:a0:51:fc:23:ae:47:ff:5a:9a:f0:ec:9b:fc:a2:ae:7d:
0d:c4:34:ad:e5:12:37:e3:1c:ad:24:0c:e2:db:7e:28:ea:3b:
81:57:7f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:23 2025 by rpki-client