Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: HFw3GXKNbTlmRFwwXODicG3oiTGMRCQN7vkDftxUL8c=
Subject key identifier: B8:D2:A2:32:A3:0C:FA:0D:31:5B:50:7A:ED:9E:90:0B:A0:5E:FA:2C
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 0197B77C959A36D6450573F575A05FB5DF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 0E7F
Signing time: Sat 28 Jun 2025 17:01:24 +0000
Manifest this update: Sat 28 Jun 2025 17:01:24 +0000
Manifest next update: Sun 29 Jun 2025 17:01:24 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: vMApAzWvFCOplVvUhUcd2kERcN0nAT2uFRjOCgJ/Og0=)
2: v7McWGmC6x_jve8hO4dvjOUzDnU.roa (hash: pEIX+2zdNDbAjQYiraeVFcmiQz+0WDogJaC+EZR5c2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:95:9a:36:d6:45:05:73:f5:75:a0:5f:b5:df:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Jun 28 17:01:24 2025 GMT
Not After : Jun 29 17:01:24 2025 GMT
Subject: CN=b8d2a232a30cfa0d315b507aed9e900ba05efa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:3d:1f:61:98:d4:11:f4:4a:4c:c2:e5:29:
86:1a:52:bf:b6:39:38:b3:6e:8f:aa:f6:71:a3:69:
00:12:73:97:ce:7a:94:5b:ec:22:0f:53:9c:60:95:
b8:4c:43:5a:bc:cc:4a:97:f3:c7:29:6d:ce:3d:fd:
c4:4d:d3:b1:f2:aa:e9:13:12:97:34:6a:c6:c2:81:
d3:73:4d:8c:da:e8:58:e1:c0:18:fe:71:39:38:7e:
eb:10:e4:36:2f:1d:bf:36:84:4d:5c:66:6d:22:14:
34:d9:04:15:bf:99:6e:ac:19:be:11:75:b1:fc:ca:
34:81:d5:bc:be:f5:ef:be:be:ac:68:e2:eb:77:73:
97:16:fc:47:24:9f:4f:b3:f2:3d:50:ee:26:9e:e4:
26:5f:20:1b:bb:61:f2:27:03:28:5f:6a:fb:ab:a1:
64:e4:a6:d8:fd:5a:70:c0:d6:cd:70:ff:c9:39:e0:
3d:03:d6:98:7d:5d:06:73:7e:55:f1:eb:81:3f:e2:
ff:ae:ef:f6:e2:21:c2:1c:d9:f6:8c:1b:67:8d:8f:
68:37:3a:13:60:1c:62:59:89:1b:40:70:53:a1:84:
e1:bc:06:94:50:56:89:74:e3:da:9d:28:c0:f1:8b:
2a:4d:70:e5:9a:8b:95:86:d0:9f:39:01:b9:36:07:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D2:A2:32:A3:0C:FA:0D:31:5B:50:7A:ED:9E:90:0B:A0:5E:FA:2C
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:13:cc:2d:0f:eb:b8:e8:71:85:a1:68:da:75:76:28:bf:e2:
ae:62:2c:03:8f:e6:f9:1b:d5:98:7c:a4:b6:23:10:e8:77:d9:
a1:2c:35:67:2d:12:af:e5:59:fb:d3:33:15:89:1c:04:16:27:
f1:96:00:12:d0:e5:ba:8f:f3:7e:f6:0f:05:9a:fb:d3:74:ce:
aa:c1:bd:3c:4a:3b:76:e7:f9:91:fb:06:21:72:da:a4:73:1b:
27:8e:68:35:f2:86:20:ee:0a:e1:18:65:00:bc:36:b5:83:8d:
3c:ad:07:65:7c:65:cc:bb:0c:69:11:98:8a:58:94:9f:a9:e0:
e1:b7:c2:b4:bd:9f:62:c8:ec:94:85:db:b6:15:78:5a:59:27:
ab:81:d7:e3:58:cc:85:52:ce:6b:23:9c:91:6d:9d:15:5e:1a:
ed:2a:a9:f8:b7:4b:15:81:35:a5:e7:8b:21:c7:3f:6f:cc:2b:
61:2a:7a:ec:6a:c4:84:e6:6f:c5:67:81:ca:f6:0e:18:46:63:
af:db:0f:e0:b8:87:9c:61:73:c3:51:5e:d6:39:61:48:60:93:
91:0b:7d:fb:a6:0b:f3:7c:30:a9:c7:9e:3c:e5:a8:5f:7a:32:
e8:db:ef:c8:71:8a:1e:87:a5:33:6c:ae:70:38:95:50:05:eb:
9f:cc:9c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:58 2025 by rpki-client