Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier: qsIUw9HZN7RJ4wTwD2xD2+kF6e1fsADMQkcJx5KzJIo=
Subject key identifier: 83:B7:59:62:F5:54:AE:F6:7E:C2:FC:4B:14:E1:2C:41:88:10:09:5E
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 0197B88F39A194D32E09F761FBF0E9986B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number: 0E6B
Signing time: Sat 28 Jun 2025 22:01:23 +0000
Manifest this update: Sat 28 Jun 2025 22:01:23 +0000
Manifest next update: Sun 29 Jun 2025 22:01:23 +0000
Files and hashes: 1: 7KyvX2ge4BVj5LFVdOXXXemAkCg.roa (hash: Hc/1xIYUTBtB+16ukbbri4uoGukybMhi3rtoBVu7s8I=)
2: 8k4-DaJSUcckd3W12t-LKgUPXOY.roa (hash: FEgAXATsq5yqV5pU5s6y/DGmTndCuBZeOPWD+L+m2zs=)
3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: YkSlbBv9i+9Wka8eaWmCozsYSBDxY8oZMgWr7oxQMh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:39:a1:94:d3:2e:09:f7:61:fb:f0:e9:98:6b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Jun 28 22:01:23 2025 GMT
Not After : Jun 29 22:01:23 2025 GMT
Subject: CN=83b75962f554aef67ec2fc4b14e12c418810095e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:5a:0c:63:db:1c:ae:35:15:d5:99:64:c5:
56:18:69:fa:e2:80:6b:06:86:e5:28:74:ff:13:4f:
0a:9c:40:3a:92:8b:5b:53:5d:8f:b1:59:60:0f:b0:
0c:c1:ca:d4:53:e7:7c:c2:f1:31:a3:06:24:d3:6f:
4d:71:a5:df:d6:82:15:d1:7c:38:3f:f0:c2:4b:98:
4f:90:6c:f0:cc:8a:72:14:a1:a7:49:e0:51:ea:8b:
12:d2:21:f2:13:62:d5:82:2b:00:45:4c:f7:6d:52:
c3:b6:70:85:dc:fe:08:f8:81:8b:f1:c7:53:e6:5a:
b2:2e:fa:f7:cb:26:7d:99:d6:26:83:dd:69:02:3b:
5a:78:57:38:8a:c1:98:40:d2:ee:e8:8b:d5:a9:e9:
81:f4:24:1e:13:28:f4:c6:68:e8:2e:71:61:cc:f1:
30:72:cd:0a:eb:b0:9f:89:a9:e8:48:68:1b:b2:82:
56:95:45:ec:d3:0b:02:36:b5:04:aa:bf:39:b3:fc:
17:30:e5:24:48:fa:6b:92:56:93:4b:cc:ce:69:f0:
5a:d6:60:fb:9b:08:a9:71:f0:c1:a6:72:78:9a:a0:
8c:66:31:43:9c:da:bb:5a:36:5d:03:6b:b0:99:a7:
e0:f2:d0:96:3f:a8:90:ab:ba:4d:44:3b:2c:62:61:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B7:59:62:F5:54:AE:F6:7E:C2:FC:4B:14:E1:2C:41:88:10:09:5E
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6c:70:be:33:85:4a:4a:51:cd:15:9c:47:1c:49:0a:a9:14:
11:91:49:22:bb:44:19:05:d9:66:d4:bd:74:cf:52:13:8f:c2:
19:5f:61:ba:f5:90:ec:e8:83:15:4c:7c:9b:1b:d0:01:1c:d3:
20:3b:2f:a3:01:53:1a:b3:43:a0:26:06:d3:2d:80:6b:2c:a2:
2f:e4:1c:4b:a0:ff:ec:11:fc:fa:f2:2f:41:89:75:e3:25:36:
8c:84:da:06:ff:1e:08:d6:59:cf:e6:bb:0e:9f:71:cb:33:14:
0e:66:ec:6d:0c:45:e8:8e:c9:9c:35:d0:bc:42:a4:2b:84:35:
8a:dc:c5:cc:a6:c6:c9:12:e1:b4:2b:62:e8:3b:c1:af:a0:a9:
af:d4:e4:87:a0:b3:fe:de:d3:8f:64:ee:4e:9d:4e:52:a5:25:
af:8a:f7:3b:7b:28:04:f8:88:f0:a8:82:5d:7a:5f:98:52:a8:
64:3f:e2:48:cf:46:b4:d8:8a:04:bb:db:be:ea:50:1e:d5:f1:
18:49:5b:8e:1f:97:a2:e5:5b:f0:83:f9:ef:33:52:d4:2a:31:
de:0b:7d:72:3c:7e:b7:bc:df:25:86:dc:78:46:dd:05:38:5e:
90:f0:f2:50:44:e0:1b:55:48:43:7a:f6:53:6e:5f:29:e1:cc:
a2:21:3d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:13:03 2025 by rpki-client