Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier: ZcpcgHpOGdOF01zF0ve/4iQERLsmjPNY5bMh1TQzzMk=
Subject key identifier: 3D:CA:F2:EC:AF:54:A8:C3:A6:35:65:EB:EC:AD:0D:55:FC:CD:A8:0E
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer: /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial: 0197B6A22A43D9E506E970534B6E587838F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number: 126F
Signing time: Sat 28 Jun 2025 13:02:50 +0000
Manifest this update: Sat 28 Jun 2025 13:02:50 +0000
Manifest next update: Sun 29 Jun 2025 13:02:50 +0000
Files and hashes: 1: TnfRZZa2DEP319r9F-J1M2uX-bg.roa (hash: 96MJ1Ftk1CjXiFA2P/QFgrE4MRV/eyv9dtWF5pRgqI0=)
2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: H7EvlT5lX/RVMpb8exwEpB2MwzsRGTHEpiHXMOWt3lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2a:43:d9:e5:06:e9:70:53:4b:6e:58:78:38:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Validity
Not Before: Jun 28 13:02:50 2025 GMT
Not After : Jun 29 13:02:50 2025 GMT
Subject: CN=3dcaf2ecaf54a8c3a63565ebecad0d55fccda80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:68:40:c5:46:c7:9f:71:39:d5:3d:98:cf:
08:d8:73:61:1a:25:b8:ae:0b:3a:4e:63:c4:b4:7d:
1f:cc:c8:6b:9a:96:e2:3c:8b:d7:30:72:ba:56:d2:
2b:ba:c1:92:2e:15:00:49:ea:02:aa:ca:b3:5c:61:
64:f9:e8:4a:d1:38:73:46:3c:96:a5:54:58:15:52:
86:fa:69:f0:2d:32:67:5d:e1:f9:ac:0d:36:e1:21:
38:de:3a:47:53:47:72:f8:99:ae:23:16:bf:85:8a:
f5:85:7f:17:19:a5:9c:63:6c:34:0c:c5:73:99:d2:
bb:74:8a:a7:4d:2d:1c:0b:0c:5f:d2:7e:a3:13:e0:
ee:be:02:ca:0c:74:2b:d8:15:bb:7f:0a:79:64:b4:
bb:3c:bc:62:40:c1:a8:cd:3c:68:fc:f6:01:a6:db:
72:4a:70:ce:6a:7a:85:87:6a:e9:5c:f5:ac:28:4b:
ef:53:c2:b3:4c:21:03:ce:b9:ff:2f:f2:5f:7f:3c:
9e:83:80:23:db:84:b8:be:c0:63:c6:b6:3d:97:ec:
5e:0b:d7:a5:0b:18:8d:b5:8e:bb:d5:33:45:c6:46:
2a:e2:3a:dd:45:a3:81:c3:f4:a6:2a:76:7f:88:c8:
4a:71:49:bf:ef:ac:92:64:17:41:71:d3:99:ee:a6:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CA:F2:EC:AF:54:A8:C3:A6:35:65:EB:EC:AD:0D:55:FC:CD:A8:0E
X509v3 Authority Key Identifier:
keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8e:f6:f0:13:76:1d:68:7e:e9:5a:fb:0c:07:3c:97:a6:31:
0e:54:93:04:3f:fa:43:a4:45:37:fb:73:47:c4:72:c3:79:c8:
20:6e:7e:05:6b:16:73:01:5e:f9:48:13:44:ea:53:74:d6:89:
33:2e:65:6b:1f:06:4d:9e:aa:5b:97:13:d0:a3:65:a6:4d:b5:
7d:de:76:e6:96:5f:28:2b:29:f3:70:e8:7a:82:97:24:43:70:
92:72:a9:66:8c:0f:37:a4:ed:f1:ec:fd:68:c5:3e:03:8a:b7:
27:9c:66:a0:9c:f5:f7:e8:12:27:08:cc:45:c4:c1:d0:bf:ce:
43:8e:e8:cc:2b:4e:6d:dd:7b:50:1c:a4:a5:16:a1:4b:fb:b1:
e4:81:a3:c9:7e:02:71:94:8f:da:03:9c:16:3c:08:c2:ee:92:
08:0c:4c:36:5f:fb:08:be:d5:db:7c:a4:b6:8e:58:ea:d4:b5:
73:ad:82:f0:d6:f2:9c:11:c7:79:d0:43:be:b7:da:85:5f:c7:
09:92:1f:9f:0b:dc:2b:45:1b:5e:1b:90:2e:f0:14:d8:d9:81:
6a:1a:53:c8:01:3d:e8:be:b9:56:dd:19:d2:96:50:f2:46:f3:
5b:7b:db:7c:96:cb:a4:5d:83:eb:19:32:88:cb:fc:db:85:f5:
f8:e3:35:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:10 2025 by rpki-client