Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json)
Hash identifier: kAdoVYQ6UtowvC5xF95aJLmJiFwmie5SZUIWl6rxgXE=
Subject key identifier: 44:51:F5:DE:A9:50:98:81:4A:2F:DD:1B:E1:49:3D:A6:58:8A:EA:7C
Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Certificate serial: 0197B77CBF51DCF9308629731F47E7482A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:35 +0000
Manifest this update: Sat 28 Jun 2025 17:01:35 +0000
Manifest next update: Sun 29 Jun 2025 17:01:35 +0000
Files and hashes: 1: KB39bYqIMJokJ-KK1JHEqLNlJ44.roa (hash: phEsVyJYnJtq6yuZEFal91oSzWP2tqwsWq5VAN0UDT0=)
2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: yB5z4NMTRsD/G8+ts8j6WaI85Ng/1FWfUJaUmpOBrJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bf:51:dc:f9:30:86:29:73:1f:47:e7:48:2a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Validity
Not Before: Jun 28 17:01:35 2025 GMT
Not After : Jun 29 17:01:35 2025 GMT
Subject: CN=4451f5dea95098814a2fdd1be1493da6588aea7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0f:fe:14:53:5a:01:7d:cb:48:72:05:2c:3a:
cf:33:2a:a0:f7:06:02:29:15:32:f3:05:e2:80:ef:
5c:fd:68:11:12:8c:fd:5b:59:73:0f:26:3e:cf:4c:
46:9d:d9:5b:4b:b7:1f:ec:f3:13:20:63:3b:0f:ba:
10:a2:f4:e6:b5:0d:5a:4b:44:61:4e:03:b1:f8:50:
29:2b:e3:ec:1a:44:5c:1d:d1:a8:ca:3d:2f:9d:dd:
46:ed:38:23:ef:f4:a0:fd:f3:ea:df:2e:ba:e5:5b:
59:3a:4b:84:35:c1:66:5b:4f:9c:82:47:fb:0c:18:
ab:19:65:13:76:4a:96:59:cc:ae:02:c0:f7:3d:d0:
63:63:4d:fd:9e:12:53:0b:0c:bf:e0:ae:f4:71:b8:
ee:3e:1d:cb:2b:08:a8:62:bf:b2:ca:25:93:95:86:
9e:1e:51:7b:a6:af:9a:ea:cb:79:f5:62:ef:02:a0:
ed:c6:80:b2:63:60:b1:98:d9:e5:40:b1:9b:94:f1:
59:51:0a:55:8e:ca:e7:bf:67:f3:81:a4:28:28:a0:
7d:e7:da:87:73:4f:7b:ea:4e:ef:a4:70:b6:a4:fa:
ef:2d:de:77:ee:23:c7:79:60:27:b6:1d:7b:b8:02:
4a:90:18:2a:c6:5d:48:0e:6b:58:c0:1b:54:0e:04:
c5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:51:F5:DE:A9:50:98:81:4A:2F:DD:1B:E1:49:3D:A6:58:8A:EA:7C
X509v3 Authority Key Identifier:
keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:45:d8:63:93:cd:1c:0d:80:8b:6f:d1:c9:d2:15:20:dd:81:
b4:42:20:c2:f0:fd:02:8c:c0:83:71:4e:ae:0b:64:78:93:95:
be:b0:44:d6:54:27:ea:44:ce:8b:f5:c9:fc:b8:3c:1b:39:6b:
bc:44:99:d7:bf:50:ce:76:74:05:ae:b2:1e:d3:2c:b3:32:fa:
88:9c:63:f9:b0:b2:cf:43:72:5f:11:16:77:96:f4:21:f0:d0:
be:ea:58:27:d6:f1:c5:c9:67:79:6f:ba:83:e9:2b:e9:bd:29:
35:ba:a5:7e:2a:ce:21:b0:bd:d9:ee:59:ea:f0:33:b3:e6:ff:
f7:5b:10:34:d1:5a:a3:44:4b:16:93:64:ad:b6:e9:56:90:41:
b8:fa:08:e0:22:9b:c8:4a:a4:f0:69:7f:4c:75:00:e5:73:75:
e3:8c:cc:73:8e:95:5b:3b:ca:c1:9d:57:17:f9:6d:48:95:ad:
16:74:c4:67:8e:44:3c:36:7e:26:5d:ad:06:ee:2d:c7:9b:90:
a1:2c:eb:58:f2:f1:11:1b:b6:04:ad:c2:88:f1:40:64:e1:1e:
79:3d:9c:ed:be:8e:fe:08:36:a8:70:c9:cb:e3:de:b5:6d:6c:
fe:84:25:07:fe:e5:48:10:48:69:0b:42:d0:e7:8b:32:68:94:
96:02:1d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:44 2025 by rpki-client