Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File: ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier: Ewz8pF1FR42XQyLOyK4OR6Lcj8ULnbl5XiGtie47MXQ=
Subject key identifier: BF:35:FF:8F:22:94:1E:A0:02:80:73:ED:39:8A:73:82:C7:9D:60:D2
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer: /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial: 0197B7EA706D5542CBBBB33393FC9266D8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:24 +0000
Manifest this update: Sat 28 Jun 2025 19:01:24 +0000
Manifest next update: Sun 29 Jun 2025 19:01:24 +0000
Files and hashes: 1: LPoSWmH9lMAQGTklM5DJIT-hXL8.roa (hash: TOrMsZzQDuOs5c3iwWnYNm18JhvhdddP0HuUPukBsu0=)
2: OvOurKu8T2ws1g_rbUDf-nmHO_k.roa (hash: il6P6mcaD6j7wpNIC2MuV0ZyXgmG33aNWz7qa9/JNHg=)
3: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: IiSddk//5mBFKO1+kccvsQt19G/aHBVPRIER1BB1zlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:70:6d:55:42:cb:bb:b3:33:93:fc:92:66:d8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
Validity
Not Before: Jun 28 19:01:24 2025 GMT
Not After : Jun 29 19:01:24 2025 GMT
Subject: CN=bf35ff8f22941ea0028073ed398a7382c79d60d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:09:7c:01:0d:09:fb:55:b8:98:48:06:d7:
0e:54:bd:0e:6a:31:35:1d:07:1f:18:b8:ec:e7:68:
5f:ff:56:eb:bc:ad:ee:a9:51:97:80:c2:8e:8f:dd:
72:4d:18:29:95:3f:c8:5e:cc:60:06:2b:49:7a:9d:
63:44:91:3c:f7:69:7c:cc:a7:d8:74:12:84:25:dd:
52:11:ac:e7:e2:6f:6a:d4:f8:a2:69:87:08:35:41:
3c:45:3e:8c:07:ca:7e:bd:51:70:03:03:0b:73:c1:
49:c4:c0:aa:e6:0b:9d:e5:4b:57:9f:9f:3b:7c:f4:
0b:2c:d3:17:e3:d4:9b:dd:71:34:f9:90:f6:03:a5:
b1:b6:66:c1:d2:95:2a:be:7c:63:27:c5:3b:4b:a0:
21:a9:38:ab:54:85:16:bc:e2:b8:5a:29:e4:c4:e6:
40:3e:54:72:cc:92:d3:f2:ec:62:0e:6c:ad:26:80:
12:fd:0a:aa:f8:c0:be:c2:66:16:9e:f5:ec:72:57:
07:9d:8b:b9:33:09:99:41:79:a7:43:c1:7c:57:fd:
d0:b5:f1:14:b8:aa:d2:d4:5a:da:c6:2e:15:a5:a0:
95:97:c2:84:d4:77:b7:a1:3f:2f:11:f9:5b:72:d8:
a9:97:3e:84:33:52:ab:c9:e7:b9:fd:07:7d:bd:71:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:35:FF:8F:22:94:1E:A0:02:80:73:ED:39:8A:73:82:C7:9D:60:D2
X509v3 Authority Key Identifier:
keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cc:10:04:a8:a5:50:ba:b5:a4:f5:31:ed:a7:f4:cf:dc:b7:
76:73:ed:48:5f:05:5a:44:66:1b:f1:57:4b:a6:19:80:04:de:
11:94:ec:81:bb:4e:93:37:8c:14:57:48:d7:14:9f:c3:b9:f0:
e3:c0:02:f8:ef:82:ad:84:8b:46:9c:2f:20:2e:01:58:f2:aa:
c1:58:be:f2:8d:06:fa:7a:25:01:ae:55:3f:bc:cd:3e:89:5f:
ba:6d:a5:88:6e:e2:d8:98:d9:c3:da:24:1b:97:bc:fc:e9:21:
97:d2:82:ba:d3:d8:12:1e:4b:fc:21:fe:4d:a6:ff:49:38:80:
3c:02:e5:12:9c:dc:0e:18:b0:22:7a:6e:93:e2:3f:f5:76:64:
15:c8:74:15:2f:db:f7:c4:94:ef:c9:ad:9d:07:3d:9e:ef:65:
32:08:e3:db:de:fc:b9:ce:2c:df:56:47:9c:34:d1:e5:9c:d0:
47:c4:dc:a0:fc:00:f4:d2:77:12:29:78:44:18:e7:7f:63:3c:
7a:24:a0:6e:14:8e:35:e0:2e:c2:19:85:77:f7:c9:8e:73:d8:
a7:f1:b1:1b:46:60:63:19:f5:b6:0c:93:3e:de:d2:8c:93:49:
de:9a:82:d3:85:1d:41:e4:71:8e:b7:dc:b7:20:8a:47:19:e1:
6f:37:ad:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:14 2025 by rpki-client