Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: 0rU6j5eISBSr3cK4ZXwUMsRJ61i41LXe1uuzWkOVQx0=
Subject key identifier: 02:F8:F9:51:AA:37:DA:3A:28:6B:66:5E:C8:9C:D9:F1:47:05:3D:65
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 0197CDCD988CD96DDC019301509055CBD4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 15C8
Signing time: Thu 03 Jul 2025 01:01:32 +0000
Manifest this update: Thu 03 Jul 2025 01:01:32 +0000
Manifest next update: Fri 04 Jul 2025 01:01:32 +0000
Files and hashes: 1: 4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa (hash: 188bZwTUrt3prH8kliJVWf+ZzLbMtaC8U5VcRX/YSdk=)
2: 6To_-SlMxz3YG0ptLY8TCmc3uqU.roa (hash: uJB/UZHKN4C9IojJMtedYn8sR+djAWZ0k/CyzWBoJ6E=)
3: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: Rc0+/9iTWk43S2s1TBjKPbFQR474eNcDlf92MJ2KQTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:98:8c:d9:6d:dc:01:93:01:50:90:55:cb:d4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Jul 3 01:01:32 2025 GMT
Not After : Jul 4 01:01:32 2025 GMT
Subject: CN=02f8f951aa37da3a286b665ec89cd9f147053d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:d0:73:81:9b:c2:3c:89:11:74:72:9a:9b:
a1:54:be:22:7d:c9:6c:6c:1a:fb:ef:9c:5a:9d:6a:
67:5e:0a:d8:c0:0d:c9:7c:56:9e:92:9d:a5:77:07:
43:57:90:00:0f:d5:4a:2f:1f:37:44:84:79:6b:08:
25:4a:c8:a3:1a:ed:28:97:38:f6:a8:28:f7:d3:01:
e1:72:a9:f1:e9:74:b6:ce:01:6d:e2:54:a4:c5:70:
7c:65:28:2b:96:1d:d7:80:fe:ab:98:1e:74:22:11:
04:63:b0:2c:7d:3b:c2:d2:db:de:73:03:82:77:4b:
3e:88:fa:62:a6:c3:69:17:81:78:76:1e:9f:63:56:
ad:53:23:34:98:96:aa:ea:ef:e5:a2:87:5e:91:34:
b6:39:f1:b3:e0:2e:b1:6b:7b:9b:3e:e2:a1:49:ca:
c8:58:db:68:4e:a0:67:52:24:f9:3a:e0:d3:2d:f9:
48:22:b0:60:b4:b0:82:2a:b4:6f:ac:16:a4:48:a6:
b9:d0:7b:29:07:24:d0:5e:7b:0a:db:5d:67:63:00:
a8:67:87:d7:82:d6:0d:48:1d:f1:26:1a:59:b4:39:
b9:ac:33:8c:8a:cd:43:3b:b1:40:81:c3:ba:65:15:
46:28:4b:ba:be:33:43:13:fc:36:70:8c:e3:5f:19:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F8:F9:51:AA:37:DA:3A:28:6B:66:5E:C8:9C:D9:F1:47:05:3D:65
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:59:e4:9b:a6:67:58:9c:12:62:c3:d2:fb:7b:2c:23:09:c1:
c4:8d:4a:14:3a:83:f2:cd:98:b0:b8:91:10:24:51:a4:d5:52:
7d:63:94:63:3a:bb:dc:1a:dd:4a:4e:6c:d2:c8:14:cb:a6:ac:
51:1b:57:0d:7b:52:f5:18:4e:15:20:92:04:8e:21:34:3a:03:
fc:cf:36:9d:49:6a:81:67:5c:62:ad:69:00:b1:06:35:94:86:
53:bb:a6:1c:d3:13:fb:ac:6b:a8:50:c3:8f:c5:14:ac:bf:5e:
40:b9:01:6a:6f:3b:9a:30:62:04:9b:18:ca:6d:66:ab:00:41:
32:73:6b:86:ad:a1:02:2a:2c:e5:63:70:77:97:21:21:56:b0:
c1:d8:d3:da:3d:65:2b:a8:2d:5b:8c:06:4f:bf:2a:44:6a:55:
ab:d3:5e:07:1d:8b:ea:c7:44:a1:0f:2c:cc:08:d3:9c:a2:ba:
36:ad:a3:7a:82:82:b9:ad:5d:f9:0c:c3:b3:60:27:ce:c6:1e:
3a:52:80:14:fe:6d:13:c9:4f:84:4b:d6:52:ab:45:7e:f5:47:
15:65:a7:f6:35:2f:72:56:e9:47:59:24:a4:fb:bc:8c:61:32:
b8:06:85:52:de:7a:be:6f:d5:41:04:59:f5:74:db:13:f1:e2:
c5:79:29:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:03:01 2025 by rpki-client