Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
File: ZKPnXG0KuryTHChHzaqGX7jX-c8.mft (raw, json)
Hash identifier: 6BzaDt+HZW1RLeFIuR1UI/xbU0NbYc7USjfVS5bF5cg=
Subject key identifier: 75:A3:8C:57:77:11:26:47:3C:1B:E7:7F:66:D7:AE:CB:12:54:BD:78
Authority key identifier: 64:A3:E7:5C:6D:0A:BA:BC:93:1C:28:47:CD:AA:86:5F:B8:D7:F9:CF
Certificate issuer: /CN=64a3e75c6d0ababc931c2847cdaa865fb8d7f9cf
Certificate serial: 0197BA0F3F04F700AC38F74C5AB8BEEED092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
Manifest number: 1548
Signing time: Sun 29 Jun 2025 05:00:50 +0000
Manifest this update: Sun 29 Jun 2025 05:00:50 +0000
Manifest next update: Mon 30 Jun 2025 05:00:50 +0000
Files and hashes: 1: ZKPnXG0KuryTHChHzaqGX7jX-c8.crl (hash: Bdk4qvb1p/ntFrLbhhMl1LDL5RNJKGHONCsvJA8GQdU=)
2: y9vY7PQkblV9_5mGvnjpI_1sy2c.roa (hash: IUOwXFsA4FATdHPgwe2EY1C0pHGXri80WzQO/bHofMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:3f:04:f7:00:ac:38:f7:4c:5a:b8:be:ee:d0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a3e75c6d0ababc931c2847cdaa865fb8d7f9cf
Validity
Not Before: Jun 29 05:00:50 2025 GMT
Not After : Jun 30 05:00:50 2025 GMT
Subject: CN=75a38c57771126473c1be77f66d7aecb1254bd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:0b:3e:a2:5b:4a:ae:42:66:9c:f1:74:e8:
32:2c:e7:94:19:58:21:e8:c4:2b:0a:57:0e:ce:f3:
70:cb:ff:a6:4e:0f:da:6e:d2:8b:39:42:b8:33:8d:
7a:60:76:4b:6e:0f:18:48:75:01:de:5a:fe:90:df:
04:a8:3b:e9:eb:fb:27:d2:69:d3:04:94:8c:ae:d8:
27:fc:a1:0f:c3:7c:75:5c:d2:b4:80:e5:a3:70:e2:
df:99:49:e0:2c:1f:70:1b:30:5b:ea:01:29:2c:f7:
09:38:79:c0:0c:87:07:ee:99:e0:17:5c:e8:a8:83:
94:e3:b3:5a:df:ab:41:83:14:34:68:12:f5:9e:5e:
44:32:ba:8d:ab:9a:ca:66:59:bd:56:3a:b5:54:ee:
84:af:e0:b4:5b:f6:8f:4a:3c:c2:45:b5:14:fe:65:
3a:28:af:11:e0:2c:d7:73:3f:c1:a4:40:e9:76:c5:
23:af:f5:99:43:9b:c6:44:0f:07:c8:f5:5a:3c:87:
89:31:61:40:f6:a4:3c:87:91:34:93:18:63:6f:e5:
8d:c0:b2:1e:c9:38:a8:75:dd:9e:e1:3c:2c:12:41:
25:24:59:b5:e0:a3:1b:8d:11:86:f8:ca:d9:91:7a:
ff:6f:3c:97:63:13:bd:42:18:16:63:48:1d:56:02:
28:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A3:8C:57:77:11:26:47:3C:1B:E7:7F:66:D7:AE:CB:12:54:BD:78
X509v3 Authority Key Identifier:
keyid:64:A3:E7:5C:6D:0A:BA:BC:93:1C:28:47:CD:AA:86:5F:B8:D7:F9:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ba:58:c2:32:9d:9d:43:1e:b3:5e:ae:65:65:ed:14:12:a4:
c7:12:54:2e:32:27:4b:5d:e1:fb:d2:78:62:7b:bf:f6:d4:ab:
69:2e:7f:76:b7:4e:44:c7:2a:78:a3:15:f5:c8:3a:70:41:87:
07:65:59:45:73:8a:ed:a6:0b:16:d3:ec:36:96:15:d1:c2:93:
d4:28:c2:3d:71:05:74:20:8c:56:b9:0f:42:55:20:d0:2f:53:
7a:e2:95:0d:d0:cd:b4:e6:76:9b:3b:d9:1f:dc:ea:11:58:f6:
29:0c:ce:e5:99:6c:a4:3b:a4:c8:4c:f0:12:fb:98:c1:89:a7:
75:e1:c5:77:60:37:f1:f0:71:73:13:c8:69:75:e0:37:20:a1:
47:5c:7b:17:74:19:cb:70:00:64:cd:7c:bf:70:2c:37:f2:9c:
0c:b7:df:1e:fa:aa:2b:27:e7:b8:aa:9a:21:1b:e5:be:2d:a3:
84:63:76:94:8c:00:94:32:c3:f6:cb:a2:33:21:eb:c6:5b:16:
5e:12:75:df:e4:dd:ed:14:91:4b:86:7b:97:91:d3:42:92:d0:
8e:36:cd:8b:c9:19:35:3c:8a:2a:38:d4:ab:a8:8d:3f:7b:60:
fd:63:77:2f:90:ac:32:ea:9c:08:91:36:3f:ca:f0:bb:7d:63:
07:56:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:43:49 2025 by rpki-client