Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
File: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json)
Hash identifier: G7byCDKDIvqnMvzaeu88/XGgHLBA5xzd+tLTyQ1rosY=
Subject key identifier: 02:D8:9A:99:5E:06:62:00:0C:EB:C4:BE:DD:99:F8:D8:C9:FF:B7:7E
Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Certificate serial: 0197B821441E5B18FD3D3088FFAD4F9A5D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
Manifest number: 0E67
Signing time: Sat 28 Jun 2025 20:01:17 +0000
Manifest this update: Sat 28 Jun 2025 20:01:17 +0000
Manifest next update: Sun 29 Jun 2025 20:01:17 +0000
Files and hashes: 1: xWr5Uv-m_2n6jrRfiUwYnyQQGpc.roa (hash: i1R3GX2qn3HUs47acSt8qqkjUz+ff6QT9CroD89ajl8=)
2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: fqVNe7PNhbhmutFyIIyeb+FTmHgyEDxQRO4bcOOlx44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:44:1e:5b:18:fd:3d:30:88:ff:ad:4f:9a:5d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Validity
Not Before: Jun 28 20:01:17 2025 GMT
Not After : Jun 29 20:01:17 2025 GMT
Subject: CN=02d89a995e0662000cebc4bedd99f8d8c9ffb77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:8f:a4:8c:1c:34:03:dd:88:22:99:82:9b:
1c:8e:f1:74:1b:41:55:32:97:55:b9:0f:5e:cc:3d:
eb:6e:e9:dd:7a:ea:a0:2e:5c:61:cc:42:b4:0b:64:
c3:2d:4f:39:f9:69:0c:ee:03:a7:98:0c:f5:3c:81:
7f:a3:08:09:1e:b7:01:16:c7:3d:8c:c3:49:c8:40:
34:f5:0b:da:71:08:1b:b0:af:30:ee:aa:66:1d:2f:
6a:07:da:01:93:ba:90:51:0b:71:aa:96:d1:76:d2:
9a:e1:cb:2b:d3:8f:c7:c5:41:d6:8a:6d:66:b1:9b:
b2:43:67:2c:e7:f3:4f:87:20:a8:12:58:d7:dc:cd:
3c:6b:1b:f9:14:76:97:c7:cb:6a:d6:6d:5a:8c:87:
55:11:dd:2b:e7:db:c6:9b:5a:61:7e:cf:f1:5f:8b:
58:32:38:e4:64:42:50:b2:8e:bd:65:da:06:ea:33:
85:20:2c:cb:da:d8:93:42:23:5e:f4:32:0a:e9:65:
4e:eb:99:e7:cf:0e:ee:4f:55:d4:24:95:bd:0c:a4:
9d:b8:79:74:80:f2:16:c7:b7:b3:9b:8a:07:5a:eb:
1b:89:e9:24:78:06:6a:6d:c9:01:34:96:fb:de:a5:
ed:c0:29:f4:38:d3:64:02:78:de:12:21:a5:cc:aa:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D8:9A:99:5E:06:62:00:0C:EB:C4:BE:DD:99:F8:D8:C9:FF:B7:7E
X509v3 Authority Key Identifier:
keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a4:62:f6:a2:99:92:9b:86:51:aa:17:08:97:67:a0:71:3a:
d9:c1:16:84:9f:67:08:6f:95:b9:dd:eb:a1:81:fc:9b:2f:52:
e3:ee:90:99:e9:4a:1e:f0:8d:08:a2:bc:12:f5:7b:5e:a3:4c:
22:86:56:44:bb:0d:e0:d4:dd:ca:58:b3:ab:a1:d7:39:00:39:
e3:80:c1:3f:b3:9d:9e:62:cd:95:45:4b:29:c3:b0:68:c5:5c:
da:d3:cc:d6:34:e2:7d:3d:ab:71:12:a0:99:d7:07:9b:47:bc:
e3:6a:b9:8a:2f:1e:ab:5b:e9:6d:e7:de:85:c9:fb:1d:0a:4b:
ce:46:0b:17:79:b8:a8:84:9b:cd:1d:4e:b4:49:b9:3d:a5:2a:
ee:05:65:ce:55:95:21:f5:65:4a:fa:3e:50:d4:33:88:9f:6b:
94:66:e9:2a:ae:9c:e5:ae:fe:ae:de:e4:34:8f:bb:5a:52:1a:
9f:84:12:67:d0:2b:f1:b4:e3:a7:25:d1:b9:b5:d0:6a:47:9c:
1a:d8:dd:0b:64:d8:94:45:28:59:b4:9a:16:c5:55:48:2e:87:
40:da:cd:d6:90:7a:a6:59:f6:33:11:b5:11:c1:b2:70:bc:c1:
6c:c1:f5:e1:ef:68:b4:21:cd:5a:b7:90:58:74:0b:42:17:bb:
23:df:ef:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:35:41 2025 by rpki-client