Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
File: ZRHOXi9Tt7uMrI854pTomkWyACk.mft (raw, json)
Hash identifier: DgP0lNJeE+WhsLMze/s5SAkJTKTEmdvkMw0Dpag1uRA=
Subject key identifier: 3A:DB:62:A2:06:69:FB:77:C6:4A:49:E9:EB:DD:81:A0:6D:B4:F0:51
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial: 0197B77CC36DF2C00DBF84C79041290C274C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:36 +0000
Manifest this update: Sat 28 Jun 2025 17:01:36 +0000
Manifest next update: Sun 29 Jun 2025 17:01:36 +0000
Files and hashes: 1: ZRHOXi9Tt7uMrI854pTomkWyACk.crl (hash: EHDiVohS2tx/8vTXaci4RpsaXbL86u5k9782Uo3TF4k=)
2: ckxfsidkq0zDgn8HR-xIWsqm2AQ.roa (hash: WdjOIbcaJnLXbL/Nx00pV5xdwXgfnCo9JLmJy57TSjE=)
3: rS8McXzCkBbcVb5uezFTBLPdaiQ.roa (hash: KC6Lr4AJ8lP/HwGwdQX+pnrzkPDHp47sMoI3Dyq3FbM=)
4: uYm5oYNq-JACxgzZxNgku-KZuSg.roa (hash: mMvblRec/LXUeEQXaAaSvKQKI7NqUb/x663S4SMp3Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c3:6d:f2:c0:0d:bf:84:c7:90:41:29:0c:27:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Validity
Not Before: Jun 28 17:01:36 2025 GMT
Not After : Jun 29 17:01:36 2025 GMT
Subject: CN=3adb62a20669fb77c64a49e9ebdd81a06db4f051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:42:e4:bd:62:cf:46:65:8f:96:2e:1b:94:c4:
bf:41:e7:83:48:34:3d:96:18:2a:19:2e:e8:40:da:
4d:34:3d:d7:d2:96:11:24:cc:a1:e2:c3:ad:d2:41:
1c:64:35:a6:76:cd:a2:b8:1b:1d:d3:e2:60:1f:44:
06:da:ae:22:1d:87:9d:29:de:14:6b:ed:cf:ca:da:
33:23:17:00:f9:8f:ed:79:05:3b:13:29:a0:57:c2:
42:e1:dc:d7:ae:5d:37:cf:1d:1b:2b:f3:49:ea:38:
64:2c:1f:06:9d:f5:f1:21:a0:54:82:cb:33:3b:95:
cd:42:bc:84:1c:b4:43:a5:7a:79:a1:cb:9d:03:cd:
85:71:a0:97:ce:1b:a7:99:72:4f:70:1a:7b:84:18:
aa:d8:4d:68:8a:34:8a:8c:85:ca:a5:27:6f:15:ca:
5b:76:b7:b8:a5:c2:97:19:80:34:6f:b5:dc:75:57:
39:1e:8b:c5:86:c1:bd:dd:e6:20:ea:7a:f2:9f:4c:
f2:c7:ae:95:ac:ea:d2:89:d0:d9:42:87:15:9b:cb:
6f:cc:98:a8:6c:61:73:a4:98:7b:eb:83:8d:84:62:
91:13:1e:7e:8e:02:f7:c0:f9:06:a4:6f:84:fc:c2:
34:4c:9f:e1:89:73:56:c5:7c:91:42:6a:38:88:f0:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DB:62:A2:06:69:FB:77:C6:4A:49:E9:EB:DD:81:A0:6D:B4:F0:51
X509v3 Authority Key Identifier:
keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c3:50:af:0f:ed:22:24:76:d5:4f:df:a7:ed:85:2e:c6:a7:
cb:cb:65:3f:a1:25:a1:9a:2a:9a:8b:db:21:fa:be:47:ce:22:
8d:8e:0b:e8:6e:3a:d3:e8:91:03:5c:e7:bc:7a:25:8d:2e:a5:
7a:5b:f4:a2:7d:25:d7:ad:89:f2:89:f5:21:6d:a7:a7:19:7b:
b3:3f:60:e7:4b:17:2c:d2:f5:c6:9b:5b:9a:7f:17:cd:60:28:
df:ec:da:3f:0a:a4:a9:33:47:6d:46:86:08:a4:ff:87:46:a9:
b7:f3:26:6c:8a:7c:ed:94:9f:ea:d3:34:dc:f4:a5:28:1b:d0:
d1:2b:29:d5:37:8a:d8:5d:09:bf:bf:dc:0f:c8:ef:92:23:84:
b0:b0:04:dc:2a:a1:a4:0c:ab:70:c5:50:1e:f0:af:39:1c:2d:
c2:77:df:6c:54:e6:c4:d6:98:5e:aa:62:83:a2:b2:cd:e8:81:
f8:2f:e1:dd:53:ea:18:71:98:40:fa:a9:bd:95:bc:18:3f:3c:
a2:ef:ba:97:46:f2:6e:c1:9d:46:d3:5b:72:47:7a:da:af:9d:
03:b0:cf:db:b4:6d:ee:f7:4f:78:b2:e1:fc:ac:17:b7:54:20:
60:52:cc:bb:10:d5:8f:92:be:30:42:ad:c0:44:f2:16:69:b8:
92:9d:e0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:29 2025 by rpki-client