Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File: ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier: tPY3V8TP9pJpa/xrR0KLzsnNyc3aKeK8Jr0C99ZAjSA=
Subject key identifier: 78:E9:83:52:A4:5C:3B:4C:C9:BC:15:7D:22:0A:ED:DD:77:32:3E:F6
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer: /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial: 0197B6D7A5AF7DA891E8077E8B30C3BDDE74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number: 052E
Signing time: Sat 28 Jun 2025 14:01:15 +0000
Manifest this update: Sat 28 Jun 2025 14:01:15 +0000
Manifest next update: Sun 29 Jun 2025 14:01:15 +0000
Files and hashes: 1: CNanKGITt6BZ7mvdQ6Xv0MVd_cg.roa (hash: qTzgtOOAjYnbYX/V8tOmm+S0TaEKxSqcRfCFeliNRNI=)
2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: zOrhn//2TbimXrNnHaqz719c7FsRTZNYGdQdQFdOPMs=)
3: kLdYNlBxoUsO0xToRjcSbRZEf5M.roa (hash: uSz8pizyGPkpRJKc5zYo+RcDvjmGd3gE3D8JNJ5Va40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a5:af:7d:a8:91:e8:07:7e:8b:30:c3:bd:de:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Validity
Not Before: Jun 28 14:01:15 2025 GMT
Not After : Jun 29 14:01:15 2025 GMT
Subject: CN=78e98352a45c3b4cc9bc157d220aeddd77323ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:fb:7b:e7:9b:35:78:aa:2f:7f:17:d2:0e:
aa:3b:cd:e3:9a:92:72:fe:85:35:87:fa:36:f2:29:
ed:0b:d6:0d:fd:28:2d:d4:70:2f:47:5f:c9:e1:ac:
59:33:1a:3a:57:c9:9e:33:10:8f:fe:d2:c3:71:07:
80:e9:bf:6d:f3:ee:c2:9c:24:41:bf:a4:73:2e:be:
6f:14:4b:3b:35:f7:47:f9:14:04:04:ac:d5:25:77:
ae:8b:c0:de:e5:09:fe:3b:f9:96:a7:3d:66:d3:0f:
92:05:57:2b:2f:b9:23:b4:5e:61:c3:55:66:ca:0e:
ea:f7:f0:4c:e1:2b:ab:97:45:f4:00:8d:1f:67:37:
2a:93:e6:7a:d3:e3:9e:63:b0:d9:38:71:45:ad:8a:
df:15:b4:d4:cd:fd:2a:2e:81:f2:22:18:84:b7:e9:
30:78:93:9b:de:b3:54:b1:dc:00:7f:98:3e:5e:de:
da:bb:73:e0:23:d0:ff:dd:8d:bc:8c:2b:ba:ab:44:
6c:24:15:23:34:fb:d1:ca:fd:66:28:e4:ae:85:7f:
89:71:e0:0a:63:6b:1d:61:27:ad:68:de:ee:f5:85:
97:44:c9:ef:6c:4e:41:43:72:69:b7:de:78:bc:c7:
d1:2e:25:2c:4e:1d:15:a1:b6:8c:d4:49:ba:3f:08:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E9:83:52:A4:5C:3B:4C:C9:BC:15:7D:22:0A:ED:DD:77:32:3E:F6
X509v3 Authority Key Identifier:
keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:29:fb:2d:fd:9f:7e:d5:50:c4:c4:76:95:4d:5f:52:3f:d1:
3f:dc:e9:2d:53:c5:cf:1e:be:0b:7d:63:65:27:7f:79:6c:bd:
29:4e:69:f1:b3:66:02:85:ef:a4:7a:2d:f3:48:38:68:37:43:
d3:48:38:4d:e4:68:a7:40:94:78:ea:7f:fa:84:3d:85:f0:f6:
f2:3e:47:cc:52:43:32:6a:5d:25:35:de:57:55:26:fc:d7:10:
c4:ab:87:8d:f1:86:b9:79:2b:0c:4b:46:e0:cb:ca:66:d8:6b:
58:ee:ad:f2:be:61:46:47:6a:47:65:93:c2:94:ee:43:ef:17:
26:fe:12:cb:5c:af:06:80:1a:71:05:74:98:8a:f5:77:c0:c0:
d7:12:bf:97:e0:de:7a:83:18:fd:d1:b5:75:fc:70:09:06:f3:
8c:4f:35:71:16:c8:0e:ae:27:9d:23:7c:fa:e2:ad:d8:4b:78:
47:fb:eb:f9:37:d7:5f:09:58:45:48:92:31:e5:0d:55:85:d6:
15:0b:fd:62:b6:61:65:69:82:e7:e5:e8:c9:e2:05:81:2c:45:
66:23:82:63:9a:b0:2b:82:83:18:5e:11:9d:c1:77:45:8c:8d:
b7:08:dd:8e:a4:3a:3e:d8:11:7b:fd:f2:08:f8:5c:ce:8b:4b:
c6:fa:42:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:47 2025 by rpki-client