Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
File: ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json)
Hash identifier: IGfqLOJlNEhcEHVWxtc0qp+KvwRnn3M2yHE3EHEhkU4=
Subject key identifier: 4C:F4:52:05:97:4F:E4:B2:05:10:1F:45:6E:48:40:DE:89:79:61:3D
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial: 0197B6A181659FC1DAF15E6017F5966A045C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
Manifest number: 0B08
Signing time: Sat 28 Jun 2025 13:02:07 +0000
Manifest this update: Sat 28 Jun 2025 13:02:07 +0000
Manifest next update: Sun 29 Jun 2025 13:02:07 +0000
Files and hashes: 1: LsPOYMRIkwCviikK1SggYlQsE6c.roa (hash: C4ntpCFi4UgQNTh+MTX375uysoH85gdlFAEV6hZ2Gtw=)
2: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: djHpVLFb4NoCzJKPawNbx2HurFaHYpkjf+w13Gtw1lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:81:65:9f:c1:da:f1:5e:60:17:f5:96:6a:04:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Validity
Not Before: Jun 28 13:02:07 2025 GMT
Not After : Jun 29 13:02:07 2025 GMT
Subject: CN=4cf45205974fe4b205101f456e4840de8979613d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:39:af:13:ac:b9:b9:e7:23:05:4f:ba:79:61:
2a:63:36:88:2b:25:5d:84:62:6b:76:b9:68:9f:50:
ad:f1:9e:e3:04:61:52:a4:50:5a:c4:14:a1:00:24:
f8:fa:37:26:fd:22:1f:78:73:28:8c:76:08:79:1e:
86:95:f5:11:e9:5c:b8:bf:57:2d:34:3f:6d:d5:43:
1d:e0:ef:7f:02:10:dd:51:e4:79:8c:3f:b9:30:c8:
e2:66:c7:9f:3e:32:ac:7a:b0:de:c5:87:9d:c2:5f:
c2:f7:af:1c:50:d3:08:48:12:99:da:ba:89:ff:e7:
ba:2c:44:bc:9a:96:f0:70:cc:7d:6e:48:01:13:ae:
28:55:34:31:ae:34:c6:05:ef:a9:d2:1a:7b:94:ad:
af:ad:fd:64:30:4b:51:11:f1:3e:69:d7:9a:b6:6b:
6f:14:5a:33:21:18:1d:b9:4e:43:f8:7c:a3:dd:8a:
18:1e:1b:c6:1e:f7:57:44:b0:f7:66:cc:ee:b1:6a:
97:ff:58:0d:ab:81:ae:06:66:f5:e0:ab:0a:f8:e1:
0a:50:cb:e6:d8:aa:c6:99:d7:52:7d:fd:2d:7b:f1:
41:8b:74:58:00:81:d9:20:0e:65:23:41:25:3d:cb:
22:7e:da:44:1a:c8:3b:f4:e4:70:58:62:b8:20:b4:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F4:52:05:97:4F:E4:B2:05:10:1F:45:6E:48:40:DE:89:79:61:3D
X509v3 Authority Key Identifier:
keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:31:99:47:fa:03:ca:f1:a6:15:5d:82:57:22:f2:6b:78:ce:
ed:fc:48:3b:e4:ee:d6:0c:93:b2:03:e8:28:d6:75:76:0b:89:
b7:fd:3d:76:79:21:d5:83:e2:90:a5:0b:b4:48:ba:d3:a2:91:
80:15:88:8d:4c:9e:fe:9d:a7:86:9d:e8:f9:33:9b:58:b8:3d:
bf:bc:5c:27:0b:28:36:c7:3b:2f:0e:71:dc:9d:c1:7d:43:35:
af:17:35:3a:c7:8d:00:66:39:21:48:6b:42:d5:75:85:d9:3a:
7f:48:b6:73:39:8b:f3:cb:b1:11:cf:a4:c8:14:5f:4d:42:e5:
36:7e:39:12:22:7e:f5:0a:3a:94:c1:44:cb:c9:40:87:b6:dc:
d3:86:7e:c8:6b:e6:13:8f:04:a0:5f:1a:fc:72:d9:8f:c6:7a:
01:10:6a:a3:04:e0:c4:59:ef:3a:5d:46:fc:fa:ce:09:27:75:
3e:79:13:83:8a:c4:ed:2a:f7:a7:a1:93:3d:8b:18:bf:a2:cf:
fd:2c:f7:0f:50:f1:09:a6:29:ad:90:48:1b:84:2e:98:62:ff:
90:48:34:9a:af:09:3e:a4:e7:f7:3a:bb:8e:a9:20:82:39:5d:
e0:dc:c0:3e:53:2b:8a:0f:50:69:26:66:a2:d1:b5:a1:f9:81:
3c:81:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:41 2025 by rpki-client