Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File: ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier: fPXHTbLozAgjzCdKn0b4TI/3jhd5WJf6Vvdlkts0zoY=
Subject key identifier: 55:74:0A:AC:F7:FF:95:2A:23:E0:BE:33:C4:28:82:FE:78:C0:9B:9E
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 0197B88FBBBAA0B264AF9F405787828B0E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 22:01:56 +0000
Manifest this update: Sat 28 Jun 2025 22:01:56 +0000
Manifest next update: Sun 29 Jun 2025 22:01:56 +0000
Files and hashes: 1: 02kstygB_1Q-T4WpJF1fDwmJj7Y.roa (hash: 1yQLO6zXVi4jG2bubLFyNc7MiwNkUFoEG9KeznEMEp4=)
2: 4-SKabrWOl-7KlndWPRuCU9aEhs.roa (hash: lMaT7o02aVJAelpgq3JP3XJEHgIKnGWGn47SBUcvn5g=)
3: 7Sa61R-MOh-0ZN995AyZU8ZyFSg.roa (hash: vYukMa63xBh0wU8yyQa7I0WK1kHPXukHl42Dhw+i7vg=)
4: K7WRjV9MYHng8NfZhIiH2_A3Swg.roa (hash: 7+t8vrSKIkcQUgESVH88zqe5BbNV7ixlCqPd3RDBnyQ=)
5: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: XVkUeVznp8yoP57+NA13YhqENhyMhsj9cmPMe871qrc=)
6: iJ0N88iATNc7UiUGXoHztFV1r-M.roa (hash: l8fJQFt0ipvnCwRF0O4nNX66/X32E1fs26DRKw04Vb0=)
7: qGjMBqPIGRJHE7hen5oLYlZvunI.roa (hash: tYN0YvNDzfdVUoqabm5wEwnZWZKNLJ2LiXHf0iUoR6A=)
8: ukKrQsbJYmMnCmIVGPhPmqzzI-Y.roa (hash: YP54ZYRp6pI7NTnVUT51wnLKoj40S7g2X/Zv7SQymBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:bb:ba:a0:b2:64:af:9f:40:57:87:82:8b:0e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jun 28 22:01:56 2025 GMT
Not After : Jun 29 22:01:56 2025 GMT
Subject: CN=55740aacf7ff952a23e0be33c42882fe78c09b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:7d:18:d2:2b:20:c6:cb:3e:ec:92:f4:9c:
ff:b9:50:de:59:fe:98:af:9b:96:0e:ff:67:43:d0:
3d:c1:d2:5a:a8:0f:0f:c5:0a:4d:6a:9a:66:4f:ac:
3c:cb:7e:e0:d9:19:fe:80:69:16:74:cc:9a:de:bc:
ec:69:4d:f7:16:aa:26:fa:58:d6:4a:c2:08:6a:6f:
ce:19:0c:83:c1:26:c4:6b:0a:7c:ff:9d:2f:2f:1e:
9c:6d:3b:2c:2f:99:75:1a:85:6b:82:ff:9f:62:b7:
a9:64:11:db:ed:38:6d:c2:27:dc:61:a2:21:45:a3:
1a:2f:32:49:01:6c:f6:48:64:b8:d5:8e:d2:5c:05:
0e:37:09:28:a0:91:20:27:ab:b2:3e:62:56:14:c2:
27:5b:37:50:d4:e5:42:01:30:5c:38:ce:d1:60:44:
77:bd:96:ab:28:94:f2:fe:94:ef:82:54:3e:92:a8:
6b:c5:95:df:db:e2:24:c1:0a:3b:83:ee:52:fa:50:
92:af:0c:9c:c8:eb:39:e2:9e:3c:d9:3e:74:ce:94:
5c:bc:d8:ad:ef:df:fd:8b:d0:87:39:23:2b:85:f1:
c2:f1:fc:cb:9a:e7:76:73:00:31:ab:5f:49:8b:b5:
e4:96:c7:c2:80:ef:ce:44:f1:36:44:e9:f9:8c:71:
32:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:74:0A:AC:F7:FF:95:2A:23:E0:BE:33:C4:28:82:FE:78:C0:9B:9E
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a6:c3:64:90:83:60:6b:65:d3:c0:52:36:48:4c:88:9d:6c:
9b:d2:39:87:73:26:c5:56:10:4e:cf:d3:0e:00:7b:cb:4a:19:
2b:eb:df:7f:c8:f7:f7:bf:c0:13:eb:b6:62:d9:bb:1e:d3:67:
54:32:ae:80:04:f4:c5:2c:c4:0d:dc:44:42:41:f4:92:40:4e:
9c:10:42:c7:8c:dd:a5:00:e2:46:c7:c9:c6:93:aa:be:95:0c:
25:98:00:0d:72:dd:83:b0:fb:65:08:4f:5d:73:25:ae:b6:f4:
cb:79:83:b2:a3:a4:ff:e8:d5:b1:2d:ae:80:7d:22:1e:94:6d:
8a:69:4b:4c:74:f4:de:8f:bb:82:bb:40:52:85:3a:c2:54:9e:
d7:65:ec:0a:14:a6:46:63:84:35:b8:80:f5:8d:21:55:b5:62:
ac:cc:a3:88:b0:7c:1c:0e:1f:a1:6b:01:4c:37:cc:a9:27:f1:
d0:d5:03:18:e8:71:83:ee:53:75:fe:20:07:26:02:88:17:43:
d8:fa:cf:97:00:2f:30:ea:2c:dd:7b:69:df:c0:07:6b:e6:25:
7d:7c:7f:2f:09:2b:3d:b9:47:11:9d:ef:54:fb:7d:42:a5:cd:
60:6a:cf:7c:2b:04:56:f0:78:be:f5:79:5e:b3:24:74:51:19:
31:e9:81:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:04:37 2025 by rpki-client