Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
File: ZfASDuO28PjbUtDbgcAeREfY5Lo.mft (raw, json)
Hash identifier: iqk+j5J/BuCZSb3z5fUDKfiRJ9koFPPajuecR7hY3w8=
Subject key identifier: 87:1D:86:B9:FB:54:53:77:B2:EB:AF:F0:47:3B:C6:24:2F:E8:B9:04
Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
Certificate issuer: /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Certificate serial: 0197B70EEC46E9BFD512F15D3509F0B83A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:37 +0000
Manifest this update: Sat 28 Jun 2025 15:01:37 +0000
Manifest next update: Sun 29 Jun 2025 15:01:37 +0000
Files and hashes: 1: ZfASDuO28PjbUtDbgcAeREfY5Lo.crl (hash: vSFctr32GdlH+A0Mbjy4sMXSPQ3a2HiGXhSF4SeKO9E=)
2: cO1AasGYHXhPsHKm3hi1TX9-Qos.roa (hash: CIc/4zinLVuL7fIWbIBFTK/p1pSlSm0f2NwdbryHRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ec:46:e9:bf:d5:12:f1:5d:35:09:f0:b8:3a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Validity
Not Before: Jun 28 15:01:37 2025 GMT
Not After : Jun 29 15:01:37 2025 GMT
Subject: CN=871d86b9fb545377b2ebaff0473bc6242fe8b904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:09:cd:26:e0:f7:e2:70:29:77:dc:36:57:
d3:cd:47:75:b9:e6:62:cf:c3:d1:66:09:f5:b3:43:
ec:e1:a1:66:1f:92:d2:11:5f:68:21:ed:f6:10:a9:
50:b6:70:8f:8e:7e:1a:10:3e:60:74:64:1e:75:a6:
02:34:91:4f:56:14:ec:23:a3:b7:88:66:21:cd:4b:
77:49:52:3a:85:c6:79:56:3a:7d:bd:f6:81:3c:f9:
03:fb:09:dd:3c:ab:08:b8:e8:34:77:39:7f:22:44:
d1:2e:fb:b2:f5:ad:82:6c:ee:6d:dc:bd:60:b6:fc:
3c:31:eb:6d:4b:80:e7:28:16:59:b8:8b:61:e5:bd:
8b:46:a5:1e:d8:e8:65:81:ac:b5:5b:f1:6c:1d:e2:
f6:c0:9a:f6:5f:be:07:44:43:e7:66:0b:02:b8:16:
29:ac:8a:a5:6a:57:33:51:46:81:ff:0c:06:2c:34:
59:83:85:bf:20:78:4f:01:ff:a0:24:bd:1d:de:e8:
13:6d:47:d3:16:eb:7d:be:2d:d9:47:1e:a0:99:bc:
cf:ff:22:5b:23:f5:57:d5:cb:fc:3c:6a:99:36:38:
3d:90:21:05:84:7b:4b:cb:cd:c3:95:42:77:0c:10:
70:fa:68:ef:1f:c3:6e:93:0c:b1:0c:93:0b:71:e8:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1D:86:B9:FB:54:53:77:B2:EB:AF:F0:47:3B:C6:24:2F:E8:B9:04
X509v3 Authority Key Identifier:
keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:38:6f:d0:ba:43:a2:82:55:c3:01:91:23:7a:e2:f1:fc:2a:
53:77:36:75:dc:15:ef:62:45:c5:d3:47:a7:b9:a8:f9:51:0b:
0c:27:51:04:63:c4:78:b5:f6:77:6c:1b:be:40:e0:84:fc:9c:
89:c9:2c:72:26:82:f5:17:37:c8:7c:3c:39:18:e1:49:e2:6d:
f3:e9:55:0d:a9:0b:73:bc:bf:a3:86:74:77:b5:4a:bb:65:e9:
c3:c5:e7:97:ae:fd:42:e3:94:fb:6b:c7:4e:26:a7:ed:58:6a:
09:6e:52:e3:5e:10:ae:31:07:f1:0d:da:73:f5:c4:bd:7e:79:
a1:d7:39:2f:04:e1:84:93:6a:6f:e4:4d:cf:64:15:ed:fd:70:
b4:ff:64:63:54:af:0a:5e:1b:55:55:7c:1e:88:23:82:04:7b:
84:ac:6d:03:6f:44:aa:c5:e2:43:c9:48:62:88:27:b8:eb:5d:
86:3c:74:54:0f:56:8e:7e:77:d1:de:93:c6:0b:66:e6:d1:2f:
a9:90:c8:24:5b:bd:d8:b3:24:ab:bd:7f:01:0d:b3:61:d9:e9:
21:ca:3d:b2:39:b3:14:78:4a:02:dd:08:79:9c:ff:c3:ec:59:
d1:a9:1e:32:ea:f6:e7:8a:19:8a:13:a2:e3:f7:47:af:b9:77:
a6:7d:8b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:28 2025 by rpki-client