Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: M+2W0uuiObPKBbvw6c9ckNYaAfNUHcCDiOLA6AaD+Lc=
Subject key identifier: A3:5D:4E:01:DE:DB:C6:8E:08:DC:CC:E3:7B:AB:A0:1B:4F:32:3A:04
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 0197B632EEC4379CC852AB97FB06495C65B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 0597
Signing time: Sat 28 Jun 2025 11:01:20 +0000
Manifest this update: Sat 28 Jun 2025 11:01:20 +0000
Manifest next update: Sun 29 Jun 2025 11:01:20 +0000
Files and hashes: 1: UMWovwfUscq8UXa7HcOk99jOyUw.roa (hash: qIZD+/8tTRjxnDRolqscZk7I94oyVCzhMP8LFn0HeeI=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: 9MTQDoujF3tWNq/RGDVwDVkb2OpNQN4Kgj18X1THlhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:ee:c4:37:9c:c8:52:ab:97:fb:06:49:5c:65:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: Jun 28 11:01:20 2025 GMT
Not After : Jun 29 11:01:20 2025 GMT
Subject: CN=a35d4e01dedbc68e08dccce37baba01b4f323a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:96:da:b3:77:8f:9d:61:2a:7c:9f:61:e1:
12:7f:7b:9d:ce:e9:d1:26:fb:ab:20:b1:d0:44:e3:
89:e7:e3:b5:1d:7a:5b:61:d4:22:7b:16:e9:97:3e:
fb:98:df:2d:1e:23:d2:27:60:d7:26:25:a9:f1:77:
ee:f5:de:d1:70:bf:c2:09:60:0d:3b:3e:1b:89:23:
7b:14:f6:6e:d9:42:48:47:fd:fd:29:37:f2:52:a9:
2f:4c:05:a5:36:9e:bc:c6:e5:c9:7a:68:0e:5e:e4:
e1:0f:d2:0f:8d:c4:ed:16:68:a4:69:c6:0f:46:f1:
51:43:73:da:87:1b:ee:04:2a:f6:2c:d6:1f:35:5c:
de:9a:35:f1:a5:1e:52:85:26:49:b3:75:5f:33:69:
15:40:3a:f2:97:fd:8c:d4:a4:af:ea:b4:47:1f:51:
30:71:b8:b8:63:c0:b1:b0:76:e2:b1:09:3a:a5:d1:
9f:ad:50:24:f7:54:76:4d:82:fc:ac:52:8e:c4:85:
ae:25:38:20:04:c9:e9:cf:01:d5:22:80:d1:3b:86:
80:65:ed:b3:4c:da:38:37:a3:d9:5d:23:22:55:f9:
df:d5:64:5f:8f:75:05:79:af:05:42:ea:f2:a6:1d:
af:0e:d6:16:c2:6b:cb:51:8b:11:73:6f:cc:63:86:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5D:4E:01:DE:DB:C6:8E:08:DC:CC:E3:7B:AB:A0:1B:4F:32:3A:04
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2a:c6:23:9a:53:ef:ba:9d:e5:b2:bf:2c:cc:82:9a:49:d1:
ce:93:f6:83:63:81:94:b3:14:72:cc:1d:35:3a:6b:50:a9:5b:
05:6d:20:87:a9:f8:ed:ff:77:8d:e9:bb:17:ab:ca:45:61:d6:
c5:17:f5:f4:85:09:9a:c6:49:16:32:6a:04:7b:79:f4:cf:58:
3e:68:de:eb:36:d1:25:7a:46:05:71:f1:dd:38:03:12:06:80:
f5:bd:5f:b0:a0:ae:35:ce:29:70:7f:03:ba:33:37:6d:70:f2:
b4:93:f9:cc:ef:ed:f5:3b:31:ad:92:39:3f:df:72:ac:3f:8a:
4a:4d:b4:94:84:05:6d:62:c7:80:62:50:0b:71:19:c0:dd:6a:
db:39:0c:43:fd:69:27:d7:bb:24:54:5b:f3:c6:8f:00:de:ff:
6e:4c:66:d9:8b:f7:98:be:bf:8b:2b:1a:8c:0b:2e:bc:c7:5d:
b8:c6:bb:bb:08:82:f8:f0:3a:79:7e:ec:a1:65:12:12:09:46:
5b:a3:b7:1a:41:0c:47:d0:7d:31:1e:34:49:7b:63:f3:4f:54:
5e:46:dd:3b:92:dd:9e:fa:d1:82:25:02:c6:53:64:27:27:f0:
e8:c5:06:5e:e2:84:f6:a5:8c:4f:dd:4b:9c:bd:dc:20:88:af:
a5:88:1f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:08 2025 by rpki-client