Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
File: ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft (raw, json)
Hash identifier: EhHY5XcmJe+YqyebPXrrUEJXf7swtljb2yctyM56gTM=
Subject key identifier: 1A:F5:A0:8D:F2:0B:EF:01:69:3A:0D:E6:2F:92:22:FE:BF:24:83:4E
Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Certificate issuer: /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Certificate serial: 0197B6A18BCA53F4AC0ADB5816ED18166ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
Manifest number: 10E3
Signing time: Sat 28 Jun 2025 13:02:09 +0000
Manifest this update: Sat 28 Jun 2025 13:02:09 +0000
Manifest next update: Sun 29 Jun 2025 13:02:09 +0000
Files and hashes: 1: ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl (hash: EBlDf4wJoVRFX0zXZKp6BTzJgxF/bG5q68HwMIYJE00=)
2: duKwaDi_zRpAEa-uPqbKM14YVII.roa (hash: TetSzhXv2DRZxntyXp+bNMJwwDRAUYL5O4ug5nil6iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:8b:ca:53:f4:ac:0a:db:58:16:ed:18:16:6e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Validity
Not Before: Jun 28 13:02:09 2025 GMT
Not After : Jun 29 13:02:09 2025 GMT
Subject: CN=1af5a08df20bef01693a0de62f9222febf24834e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:8e:3b:f4:4b:7d:76:04:e7:0f:85:d2:5b:
cf:3b:da:69:a4:be:4e:10:57:8a:68:72:7b:88:0d:
0e:8a:df:9c:47:e6:bf:3d:85:45:78:72:09:2f:1c:
55:3f:66:49:27:d8:32:4b:7a:2f:a5:0f:b3:b4:da:
cd:5f:88:83:6d:7a:c7:ef:34:14:9f:7d:2e:f0:d4:
27:35:56:44:59:60:5e:d1:08:da:16:cb:3d:3d:fb:
75:0a:db:47:f9:6e:21:1e:c7:85:9b:3f:c6:51:98:
ef:21:26:1d:f9:af:97:c4:32:89:f9:3f:65:e6:c5:
30:e8:e2:d4:3b:56:86:d9:2e:df:3e:90:d3:fa:20:
20:7f:6c:39:92:87:33:e5:69:54:fc:69:1f:79:a8:
1a:90:d9:37:6b:c7:51:4b:04:be:43:b8:1d:a3:42:
c3:c3:1d:5c:a2:6c:d1:bc:7b:fb:95:ab:10:3b:95:
65:f7:12:55:46:17:00:e7:c7:0a:29:ea:00:ac:7b:
f9:23:a6:d5:1d:4d:25:36:7d:0d:76:56:b4:30:b2:
62:a4:3d:55:61:7a:19:f1:05:f7:22:a2:ce:98:d7:
28:af:d7:12:31:47:7e:cc:e7:6d:3e:2b:1b:51:b7:
d3:82:34:ef:68:f4:f5:dd:9b:d0:fe:0f:03:d6:a4:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F5:A0:8D:F2:0B:EF:01:69:3A:0D:E6:2F:92:22:FE:BF:24:83:4E
X509v3 Authority Key Identifier:
keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6f:a6:38:d1:ee:cb:3b:fa:ce:15:70:46:e5:dc:00:62:2b:
5b:77:e3:90:60:2a:30:07:37:45:f2:5a:c7:18:74:b2:b9:9d:
50:f5:d6:fb:83:6f:8b:9a:ff:4e:bd:38:ce:82:6d:50:01:39:
37:77:ee:90:d9:9f:b9:7e:21:c5:1d:a0:c2:a5:9b:81:94:71:
84:f6:cb:95:7f:3a:a5:95:ed:9c:dc:df:cf:54:f6:5c:98:5a:
39:a3:63:ff:aa:d0:75:fb:9b:2c:5d:a3:5f:4e:4e:61:69:b8:
37:fc:6e:77:36:a8:80:3b:7a:56:ee:6e:78:4e:93:96:2f:92:
c8:c7:f8:bd:47:b5:cc:f9:7e:4d:ea:52:1b:f7:f1:d3:d9:e9:
58:30:34:02:4e:28:85:aa:62:14:c4:37:b3:1b:bc:4f:6a:73:
98:f6:12:f4:2e:47:65:fb:6f:ce:be:06:aa:4b:41:8c:f7:76:
4b:52:c7:a4:21:0e:8f:ce:bc:09:c5:14:14:03:5f:55:e4:0a:
5d:db:49:a3:fb:af:75:8b:e3:05:44:ae:9f:eb:3b:f6:81:24:
ec:40:01:06:fc:da:c7:b7:5e:23:a7:b5:47:bc:c3:bc:11:81:
28:58:98:bb:59:8e:1a:8a:38:12:9d:e0:35:40:2c:b4:14:5d:
ad:59:48:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:42 2025 by rpki-client