Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: ez9pBa8tkj41lKG8bbJZRpgkNiJkOsmSowP/O6e3ML8=
Subject key identifier: BC:2B:75:AD:86:91:97:8C:2B:19:BF:F0:1C:DA:2D:3F:37:C4:08:DA
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 0197B5C4F5B90A0F0FBFBB3640FC590B81D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0AFF
Signing time: Sat 28 Jun 2025 09:01:13 +0000
Manifest this update: Sat 28 Jun 2025 09:01:13 +0000
Manifest next update: Sun 29 Jun 2025 09:01:13 +0000
Files and hashes: 1: 0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa (hash: 0ucYwJNSE17Uoa0pbkg3UfaLHULdDrli5vO57ag/Rro=)
2: 2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa (hash: VgvyWftKXOdFJhTLD/7iPW28qCLdqt68A9FKNT0Kf7w=)
3: APnx_8mfcxrFZN4OeamIRjyf60s.roa (hash: LqDkg2crI+HJCMm5gdlU8GtHUckBwruDxKVGT27c+3Q=)
4: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: g5p4mw8EYs2ecz+vGdFMa69KmsJ4IJxQJpXBzO3b8IY=)
5: da-rbdUwvdK-EaEtMFVJ4ALqn7g.roa (hash: AiZ5cHYaXgbmcSlAY4kq0VLaSsmy8Eu/WyjQzyBskpg=)
6: izFiBce-GnGDYR4txZafIHP1iLk.roa (hash: 6ASOVWTNVRRVxuY9ayMGRUVJ1id7JkowncNxWBHtm+M=)
7: k-ezMHwur8MdZRQR3hE_e0BhJJw.roa (hash: P4qrs0pkvJINK01RPHPSPt0K8P0Ok49T8HWuoZXmVYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:f5:b9:0a:0f:0f:bf:bb:36:40:fc:59:0b:81:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Jun 28 09:01:13 2025 GMT
Not After : Jun 29 09:01:13 2025 GMT
Subject: CN=bc2b75ad8691978c2b19bff01cda2d3f37c408da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:c7:b9:69:75:8a:83:9a:5f:7e:14:ef:35:
39:c8:7a:3d:54:c0:bb:64:af:5b:bc:36:07:72:0c:
b2:8c:78:de:5c:92:3a:7d:44:1e:42:7e:42:bc:89:
2d:7b:f3:78:68:f4:3b:40:ca:ab:25:12:5e:8f:38:
33:81:8a:79:23:93:a7:76:a5:f9:27:90:a3:7d:2f:
a9:31:86:b7:52:0c:e5:3d:95:ee:92:12:35:6c:22:
1d:32:8f:3f:92:f3:dd:54:a4:8e:48:9d:5b:a8:69:
ad:8c:8f:69:3d:f8:0c:71:57:e7:a4:c9:63:f7:85:
7a:53:be:01:bd:7f:7d:3f:dd:d5:5d:65:e0:4a:1a:
ee:57:48:31:b4:7d:5f:25:18:63:dd:30:ff:c3:a0:
44:06:35:98:c2:a3:a0:3e:55:d0:c9:fe:7a:1c:e3:
61:e9:21:c0:90:b9:5a:13:06:e9:a4:7e:6b:28:c3:
78:57:26:59:69:ea:4e:22:95:0a:b4:10:f2:ae:21:
7f:0b:e2:7a:87:6e:49:50:c0:67:96:54:4f:d9:d9:
d2:ad:21:4a:92:aa:c1:e9:15:c0:c4:a8:a3:b6:87:
f9:9b:0d:d2:f5:6e:7c:10:a1:b4:9a:7b:20:60:2d:
11:eb:54:a5:14:3a:79:e5:5b:d0:93:5e:09:b4:23:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2B:75:AD:86:91:97:8C:2B:19:BF:F0:1C:DA:2D:3F:37:C4:08:DA
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e6:7b:24:26:c7:2b:c6:11:35:80:dd:52:bb:07:a7:0e:09:
6e:ba:b2:89:1a:35:9e:98:e2:53:df:39:4f:69:06:e8:55:a4:
27:0a:d5:d4:78:42:a2:0b:29:ec:61:8c:ca:ed:23:34:2b:b1:
a8:75:9b:42:5f:a0:d5:df:88:12:fc:ff:a4:44:bc:b3:26:f9:
6b:96:40:6e:16:c7:1e:4f:91:fb:84:e2:db:62:64:d7:70:cc:
63:10:5b:06:70:0e:be:4e:0e:67:be:53:54:19:9b:27:19:39:
dd:e4:2b:02:01:fe:61:76:60:3e:8a:3d:74:19:bf:fc:84:5a:
65:1b:09:05:1d:fa:32:c1:a0:3d:7c:76:9c:3d:02:87:89:01:
ab:25:c0:3d:86:81:b8:b7:9a:34:3d:65:b6:b5:d3:10:73:c7:
7f:83:9c:d3:72:a0:0a:8b:f5:99:88:66:1f:9d:ed:3a:78:b5:
95:4f:ed:af:eb:8f:36:c4:e3:b8:f9:19:2c:2b:e5:b1:e6:82:
9e:56:f5:64:f8:48:39:1d:c0:57:01:16:66:b4:e7:36:b7:df:
7d:6f:66:0f:3d:ff:82:c9:d9:ef:ce:25:46:36:a5:33:5c:80:
38:62:9a:b9:30:72:8a:40:fd:85:dc:79:f1:8b:8c:29:de:4b:
a9:22:d2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:54 2025 by rpki-client