
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
File: ZD4bqRxWmoshptLWf1271sBOQ-o.mft (raw, json)
Hash identifier: e+BiBBP53a/f/OvYCzz3xLNTfvnuwH8KM/M/vP0kmRk=
Subject key identifier: C2:9D:CD:DC:72:CA:91:3D:26:0F:46:1D:C9:B9:45:3A:CA:D7:C5:EB
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial: 0197B7B320D626ACC4167DA37C4D946676A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 18:00:59 +0000
Manifest this update: Sat 28 Jun 2025 18:00:59 +0000
Manifest next update: Sun 29 Jun 2025 18:00:59 +0000
Files and hashes: 1: 1MBxY-L-G-PezNdSAum2Qznjvvk.roa (hash: WzqdlX3BQAdtrBN0mtz0qnp4BVXNCLlknuqqWLF2nEY=)
2: 64_MTb5KgxHA8ajybrrfkFaqSHo.roa (hash: 3HoEZ5o8a764cMBp72+Je8xSTOL3XWu1W9vfmUxztJY=)
3: NcFH54U_2J6k3O8FG01A4l3YkX4.roa (hash: /kjUMIh5yITP6UOhs7cpgkxUJuo6AlmV12M3gHqX+6U=)
4: QnTqLhMHC9T4AoMjaLap4QpmLDU.roa (hash: 7wNURJNL1VG5jzuYA7SYiM1RdZjO0wnh2b7/W3YMGs8=)
5: ZD4bqRxWmoshptLWf1271sBOQ-o.crl (hash: 5+iOHWWopjxb7pdVd0c9RxmIoBT+Vgrrey0m4E3t0+o=)
6: ZKwCytxQwb2lA8HdN2ItTa-nGFE.roa (hash: YVehp3VlkVUX9qY7Jk5F+8RNoRR+lbS+MAT+mCdr+Tw=)
7: ymZdEzMVegQJBBFPgdqPQzW1-gk.roa (hash: RX7+2wwGNp6bGJxI7GKZlbgjxbbHN4LNuKVuwi5foZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:20:d6:26:ac:c4:16:7d:a3:7c:4d:94:66:76:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Validity
Not Before: Jun 28 18:00:59 2025 GMT
Not After : Jun 29 18:00:59 2025 GMT
Subject: CN=c29dcddc72ca913d260f461dc9b9453acad7c5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:73:c5:19:53:ee:80:e2:1c:54:b2:3e:ee:53:
1c:cc:b5:78:ae:f4:b0:d9:de:62:81:0d:5f:ec:a0:
a2:45:ec:8c:df:23:a2:5c:33:5b:8b:1d:6d:f2:a7:
b6:3c:c4:9e:ca:56:89:90:9b:6c:29:89:c1:f3:63:
87:91:11:fc:c7:67:3d:d0:80:3c:69:f0:99:0a:2b:
1c:5b:64:04:7c:a5:53:74:9d:3f:56:2f:d8:40:5b:
7e:5d:9b:e5:46:41:fa:80:b6:d9:e9:f7:af:81:0e:
3b:f4:e9:d6:c2:13:f2:79:09:a0:1d:16:bc:04:31:
80:ee:dc:5d:bf:d9:0e:40:2c:4c:04:40:e3:ac:b2:
1e:76:ca:4a:05:79:eb:8a:cb:3b:57:a0:ad:90:d6:
d5:df:4e:a6:aa:a7:a7:ec:c7:3f:d7:ee:cf:a3:c2:
0f:fb:2b:00:bb:ec:7c:f6:ea:fc:7d:14:47:52:7f:
8e:9d:e4:e8:09:38:ba:30:85:ec:73:87:a1:e8:b3:
5a:41:9e:d6:78:97:fe:19:1d:a7:78:02:45:5f:2e:
51:5c:4c:fe:f3:2f:0f:52:2d:fa:d9:02:bb:95:ba:
c7:50:b9:7a:4d:ac:58:34:d1:b9:1e:68:b4:1e:1e:
b0:b1:1f:89:85:3a:cf:d9:b8:05:e9:00:18:9f:80:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9D:CD:DC:72:CA:91:3D:26:0F:46:1D:C9:B9:45:3A:CA:D7:C5:EB
X509v3 Authority Key Identifier:
keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ee:99:8c:da:00:e2:cd:6d:47:09:eb:66:80:e0:7f:ee:fe:
b9:93:0b:30:20:21:fe:55:4b:5b:ae:a2:e4:85:b4:5d:f0:ac:
66:64:1e:1d:0b:a4:b6:43:be:c6:b6:58:4d:16:14:ab:b8:99:
67:0f:98:c0:44:c9:47:6d:eb:69:03:63:4f:c7:60:64:46:02:
d9:18:e9:3d:18:6d:07:c3:76:42:4b:36:2c:47:88:d6:32:cf:
f5:d3:e4:50:45:6e:0e:e2:a8:1f:01:3f:7b:f8:93:13:68:f9:
ec:bf:9d:6d:d3:12:87:a3:8f:1e:c2:38:fc:62:50:cb:fc:49:
18:c3:2e:af:a6:19:4a:d5:16:4f:b6:df:f7:c4:46:47:88:0d:
dc:fc:29:e9:be:45:45:40:15:31:38:e1:79:e5:4d:ea:43:37:
ab:d2:f3:f5:2e:02:ff:d0:33:04:be:8f:e8:c0:f1:3f:6e:31:
52:46:39:22:a1:98:1b:d4:9c:0f:ae:05:56:05:56:7a:d1:f5:
81:4b:16:0d:b4:5f:04:c3:bf:ad:28:71:c3:c1:22:69:35:98:
e8:ae:b9:62:3c:f2:c4:2d:3f:7f:fc:d5:33:af:32:a1:33:61:
41:86:4b:e6:3e:4c:df:31:54:4d:41:af:31:48:c1:28:e7:bd:
b0:18:dd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:46 2025 by rpki-client