Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: EKz+ZLPaHzUsnIZ7xIj17Pag33dOIqtqcZwOM1YBIiI=
Subject key identifier: 15:C4:EF:F6:2B:84:99:00:A6:92:B5:2B:C1:7F:6C:BF:3F:3E:8F:8C
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 0197B6A10D960D8987D6984B8943581BE8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 13:01:37 +0000
Manifest this update: Sat 28 Jun 2025 13:01:37 +0000
Manifest next update: Sun 29 Jun 2025 13:01:37 +0000
Files and hashes: 1: ZhlMSwf3_ZJIBXJaWSn_aND6IvY.roa (hash: I3W7A3cWQn7Ae7Qv1tAEghjtV2ZOTEutRM33xiC+rN4=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: RuB/sqKmjpF+NlVJjnYqauKIVDVClUeTCnXwbvjkV70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0d:96:0d:89:87:d6:98:4b:89:43:58:1b:e8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Jun 28 13:01:37 2025 GMT
Not After : Jun 29 13:01:37 2025 GMT
Subject: CN=15c4eff62b849900a692b52bc17f6cbf3f3e8f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:38:22:34:df:f8:ad:c0:1a:94:5f:a7:b1:be:
c8:d0:e1:04:10:d8:4f:6f:4d:d5:81:5d:5e:14:bc:
d5:22:a8:bb:19:53:de:d6:02:0c:36:59:99:0a:4d:
b7:79:c3:5c:72:19:65:e1:97:58:d9:f1:b4:d5:32:
3a:cd:c4:af:c9:f6:ec:66:fc:bb:24:dd:a0:66:a6:
31:df:fe:45:f4:30:8f:2c:35:7d:da:d8:1f:08:89:
25:0d:03:a2:26:91:b0:56:bb:f1:fb:3f:df:01:3f:
73:b7:08:e5:df:f9:38:78:5b:0a:ef:c6:66:f6:b3:
ec:87:89:c1:f2:88:7f:e1:ad:58:a4:dd:63:cd:e5:
7a:55:9c:f6:e4:25:f3:23:2d:fc:da:24:12:34:a2:
f0:d9:b4:dd:21:9c:4b:ba:94:82:76:59:fd:ea:42:
28:75:22:ea:e0:6b:61:90:0f:4f:ef:a2:7f:4a:d8:
a3:40:e6:a0:af:43:57:69:fb:3f:c6:6c:08:71:a9:
7b:8e:e0:76:e8:92:14:06:6b:b3:b0:bf:53:41:7f:
73:15:55:e6:11:9b:55:d8:86:8b:3a:50:9e:1d:24:
6f:d5:07:a5:73:18:c4:a0:27:a4:15:17:bb:6d:23:
58:b1:74:41:d4:02:d0:f4:75:e1:a7:90:9d:9a:2f:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C4:EF:F6:2B:84:99:00:A6:92:B5:2B:C1:7F:6C:BF:3F:3E:8F:8C
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:15:a6:40:5e:35:49:64:9d:56:a3:d9:bd:fd:4c:db:c0:94:
6a:78:84:ab:29:bd:8a:7b:9f:3c:f8:56:78:31:10:d3:a6:89:
50:74:57:89:6b:0e:f0:e8:e7:d8:6b:62:db:f0:80:85:f0:66:
6b:d9:d4:5f:11:ec:00:05:27:4b:59:f3:b6:4b:2f:f3:bf:66:
4c:cc:e2:f6:a1:31:26:a3:f9:e8:bd:30:bb:1c:39:09:3f:34:
47:24:2b:2e:1b:10:0e:72:33:46:c3:ae:af:df:84:dd:1e:7a:
0b:cc:9a:50:74:75:8f:47:bc:cb:80:cb:c8:dd:82:28:87:ca:
13:f6:d5:5f:11:f8:cb:a4:ff:84:1f:9e:31:53:e9:57:77:77:
0c:50:60:3b:b1:7e:1a:03:0d:e7:26:46:0e:c0:bb:9e:e3:8b:
f1:f7:e9:35:a9:f4:cb:2e:89:bf:38:34:c2:61:5d:16:dc:bf:
6f:8a:52:bb:db:8b:78:1d:04:02:0d:09:78:2e:64:d5:04:c7:
70:d4:64:64:72:34:d8:07:15:a2:ae:52:19:ee:d9:72:44:bd:
60:94:5b:18:21:9f:e1:85:73:47:18:92:c0:c1:a4:11:b7:1f:
ec:6a:76:96:53:c4:66:a1:1b:e1:ef:52:78:bd:71:6a:0f:a3:
36:c1:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:52 2025 by rpki-client