Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json)
Hash identifier: 6zT4yr/FgyC5yTV1F2WKqJik7ecrGYfI7GHDrC7MhJw=
Subject key identifier: 57:FD:73:53:0D:5F:B7:70:C2:B1:2D:92:24:9D:9C:CF:32:55:4F:12
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 0197B7B326B329F50AE5DF93B056651E0FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 18:01:00 +0000
Manifest this update: Sat 28 Jun 2025 18:01:00 +0000
Manifest next update: Sun 29 Jun 2025 18:01:00 +0000
Files and hashes: 1: QrfYxaTHhTSXop-ghzKRc2pRZhA.roa (hash: PMTolMEGmvsQvzQ9GGSfcadwLJNVLNi1hDvyzf87EUg=)
2: ahq3UrSwaIQvDkIrorl5O5ztGvQ.roa (hash: rt6AciC29jxzpxpxz0n9wcvl0rWHWyCvo8/vyh12WeY=)
3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: +NOuBDRaiwx0tGhtRm33BNbXMFAqlxNqMm5DpGZGQ9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:26:b3:29:f5:0a:e5:df:93:b0:56:65:1e:0f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Jun 28 18:01:00 2025 GMT
Not After : Jun 29 18:01:00 2025 GMT
Subject: CN=57fd73530d5fb770c2b12d92249d9ccf32554f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:da:3c:e3:35:1f:f0:b7:97:56:f4:02:3b:
b0:0f:c3:80:79:23:36:0c:fd:2b:4b:69:40:1c:e6:
73:df:ee:ff:ee:64:10:70:b6:6f:25:39:03:c9:3e:
7c:76:19:bf:d3:1e:ab:bc:40:dc:d2:47:bc:9c:d5:
86:b5:73:9a:50:a0:69:ee:4b:76:30:bd:00:bd:d9:
ea:55:ba:48:67:47:ba:08:19:8b:12:be:42:7b:a3:
9a:89:b0:b0:be:13:b5:ae:82:91:8e:47:1b:0d:76:
5f:30:65:43:8b:91:81:c4:7b:bd:ce:7f:02:89:10:
46:a3:83:75:e8:40:40:b8:94:52:aa:a5:51:77:b1:
61:11:0d:d0:08:ac:11:b0:b8:b0:a3:40:df:e8:68:
2b:fe:8e:60:14:56:b4:75:a2:f3:8c:57:ff:d4:c8:
cb:b9:e6:a5:f3:79:64:44:35:bb:8e:6e:a2:86:15:
c9:e8:85:34:41:f0:32:06:c9:35:b5:21:e9:99:94:
19:64:9a:c1:34:9e:c2:4a:15:f6:e6:44:d5:12:62:
74:1e:48:55:c2:90:b1:08:c8:77:83:85:47:35:0f:
71:cc:34:fb:f2:08:46:8f:23:14:88:83:9c:fa:a8:
4f:ed:91:91:fd:5e:d9:49:ca:cc:b3:ca:27:eb:b0:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FD:73:53:0D:5F:B7:70:C2:B1:2D:92:24:9D:9C:CF:32:55:4F:12
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4d:49:9a:91:1b:38:1a:e4:06:6a:b5:14:c1:e3:3a:b0:0b:
82:bb:09:e4:61:29:8d:e5:f8:d7:56:8b:30:55:53:1b:54:11:
64:2b:c9:9e:93:13:9a:80:09:b5:1d:c0:26:b4:a8:2d:c8:54:
39:de:85:6d:3b:ec:ce:e5:c7:36:25:09:25:89:47:08:bb:ad:
1f:f7:b1:68:f6:dc:7d:17:7b:85:09:b9:9f:73:4a:cf:ec:0d:
c5:46:c1:b4:38:f0:10:e1:97:b5:19:cf:df:e9:3c:ad:3f:6e:
82:24:c4:65:c7:04:94:2b:fd:b9:fc:3d:fd:8f:06:73:df:57:
61:28:54:10:ab:8d:90:eb:02:9c:f1:c4:4c:f0:3e:ab:43:9f:
a6:08:7d:3c:bc:11:a7:37:55:23:16:cf:3b:c7:d7:28:ae:1b:
34:77:60:3d:6c:cc:ac:35:8a:7d:8a:d9:ab:8b:45:ca:e5:57:
53:c0:0a:c4:7b:88:6a:01:47:94:fd:e6:f0:99:10:3a:f0:90:
75:0b:07:56:cb:82:09:4d:ba:63:ca:23:89:5a:8e:3c:89:f2:
aa:65:32:44:74:9d:36:b5:8c:75:ce:a7:98:cb:da:f9:13:62:
3c:1a:ed:11:97:c2:a9:fc:ee:ed:83:9e:81:0a:49:46:4c:65:
33:f7:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:23 2025 by rpki-client