Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: WhdX1pKSSgrGdfRnRVT4+9st9ZNwCIyTmvnamWjjULE=
Subject key identifier: D1:B1:B6:6B:C1:82:6A:9A:F1:61:40:B0:6B:FB:54:25:A6:47:EE:44
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 0197B5C52B05188BB7F7EB7083150480DC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0A6B
Signing time: Sat 28 Jun 2025 09:01:27 +0000
Manifest this update: Sat 28 Jun 2025 09:01:27 +0000
Manifest next update: Sun 29 Jun 2025 09:01:27 +0000
Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: n7pEsz+jC0IG8Gk1TbPHIQNzXKpQ4MNhxHScwOyK0ew=)
2: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (hash: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=)
3: wSK3TEqaONdwtqYByktpLoC9XxM.roa (hash: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:2b:05:18:8b:b7:f7:eb:70:83:15:04:80:dc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Jun 28 09:01:27 2025 GMT
Not After : Jun 29 09:01:27 2025 GMT
Subject: CN=d1b1b66bc1826a9af16140b06bfb5425a647ee44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:ec:24:cd:d4:23:b1:2e:38:72:d9:28:b4:
77:0b:84:8c:be:eb:ee:9b:cf:9a:47:d6:b9:30:a1:
3a:0e:d1:50:ad:02:d3:17:47:d2:c6:48:b5:b4:61:
35:1d:68:ab:8a:01:74:40:91:84:93:4b:cb:69:43:
d1:8d:23:16:dd:a5:9e:19:0d:d2:40:43:a6:d7:9e:
7b:a6:31:f5:7a:87:71:fe:06:8c:ad:3c:f6:0b:17:
6b:1c:e3:61:20:83:63:27:20:51:01:93:46:1d:ac:
77:a0:e2:33:fb:ec:16:25:b8:c8:90:43:91:f6:b7:
f9:fd:f0:c8:83:df:74:53:cd:f0:2a:74:9b:2b:36:
70:48:7d:3b:80:20:4a:1d:ec:28:e5:b8:e7:cf:80:
88:9c:e7:75:72:7d:46:71:a2:62:37:16:ee:39:5c:
68:9e:1e:37:3a:c6:6a:ec:e8:95:16:f6:d1:39:a1:
ca:44:78:94:ee:7d:9d:0c:d8:e8:f1:7e:75:5c:fb:
c3:83:d9:f4:70:39:7c:26:5c:16:47:e5:f0:64:7e:
55:4c:ac:5f:4c:5c:78:da:38:19:c5:89:4f:bd:6e:
ce:ed:2f:50:e6:ad:8e:b8:e7:90:a1:f4:62:b1:a1:
f4:33:5c:0d:a3:4a:6f:ce:7f:0f:cd:77:82:22:aa:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B1:B6:6B:C1:82:6A:9A:F1:61:40:B0:6B:FB:54:25:A6:47:EE:44
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:44:07:0f:e9:81:e4:11:46:79:c0:80:d3:7b:e2:f1:72:28:
7c:af:f9:e8:b4:60:9e:08:9e:0e:8d:37:42:fd:81:ea:65:8a:
40:82:1d:c3:27:ac:e8:d8:26:68:e6:a7:3b:c5:9a:6d:e4:eb:
9a:ff:72:86:d7:8e:36:1f:d6:4f:a2:55:9e:6b:cd:58:60:5a:
aa:68:ed:1f:3e:71:35:19:22:6d:0c:a2:00:86:b6:70:e6:ac:
fd:87:82:4b:5c:dc:ce:50:dd:ac:96:c5:bf:22:72:92:dd:fb:
85:c6:11:b9:c4:6b:92:a5:cd:a2:75:14:70:67:5b:be:bf:9e:
44:dc:b5:56:ec:eb:de:19:32:55:61:38:6d:43:03:05:42:46:
bf:77:d1:1e:1b:c6:e2:1e:cb:a6:96:69:1b:5e:f1:ff:b7:a2:
c9:fb:ae:91:fc:b3:ee:4b:25:93:3a:53:76:af:59:e3:6a:20:
eb:9b:34:86:a7:a7:2c:77:eb:c2:27:fb:7d:48:bf:9b:16:9d:
09:18:c2:b9:bc:36:2a:ac:70:ef:ee:28:1d:94:c8:77:8c:9c:
43:b3:fe:c4:8d:96:bd:67:92:ea:bd:d9:d6:51:ea:eb:55:a3:
de:ef:dd:c0:b1:9a:52:6e:5e:8c:ee:1e:c4:d2:09:01:f7:ad:
08:59:a2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:55 2025 by rpki-client