Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File: ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier: BlKON2qmBU7UVSdbKjuZ24k8kxFBApXUNG86VbWXy8M=
Subject key identifier: A1:22:88:C1:94:1F:14:D7:B0:E2:3B:55:CE:93:C3:CD:FB:AC:C7:F9
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial: 0197B89093F1360E87136BF06D3378444739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:02:52 +0000
Manifest this update: Sat 28 Jun 2025 22:02:52 +0000
Manifest next update: Sun 29 Jun 2025 22:02:52 +0000
Files and hashes: 1: 4D_rZ45BYofG_PKX7NdD5oQoUdM.roa (hash: 8wujCBX6hI1Ut+YVGttUi2MlgiyCoDf/nLWfLC5wQhA=)
2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: nstij03aBImO1eu7h3MzMvVcKMRPCVjEjj+Xx0ef/ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:93:f1:36:0e:87:13:6b:f0:6d:33:78:44:47:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Validity
Not Before: Jun 28 22:02:52 2025 GMT
Not After : Jun 29 22:02:52 2025 GMT
Subject: CN=a12288c1941f14d7b0e23b55ce93c3cdfbacc7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:b2:03:23:09:e5:55:ab:f2:7c:01:bb:e8:
28:0d:d8:7f:f6:39:3d:76:4b:8d:88:6f:26:43:a1:
bf:a7:54:5a:8c:75:7d:e1:95:81:7a:4e:83:af:a2:
f0:d9:0b:c7:2a:3c:72:b0:c0:c4:95:f7:fd:b2:a5:
25:34:8b:a9:87:cb:c4:2b:15:64:01:d7:e0:39:f7:
1a:b4:b9:7d:49:a7:ad:f8:8e:fe:c8:f3:b5:16:5e:
6b:12:a0:a5:64:f5:66:51:6d:d9:ac:ee:56:8b:40:
a7:fd:bf:c6:e5:3b:d9:76:1d:ae:74:ab:c6:29:c6:
a3:73:21:fb:2c:af:3d:1b:08:ac:74:5b:2c:f2:28:
e8:1e:73:2a:64:65:7e:1a:0f:ac:31:76:d6:87:2a:
b8:50:a0:bc:f0:ad:b9:59:e0:76:86:0b:ef:68:2e:
7b:24:0d:e4:24:ab:9e:54:ec:02:ef:aa:35:cc:2e:
9f:39:74:dd:dc:de:d7:c2:e9:b6:03:c1:53:2e:44:
35:52:ed:64:98:07:21:8e:06:05:5a:b8:79:92:54:
50:56:73:81:66:2b:3f:8c:96:c0:e7:ee:d9:9c:87:
7c:d3:ca:8c:d7:a3:84:d8:a6:99:52:c9:35:1d:e3:
4d:cb:c3:cf:ce:eb:b5:26:42:ac:3b:72:37:71:70:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:22:88:C1:94:1F:14:D7:B0:E2:3B:55:CE:93:C3:CD:FB:AC:C7:F9
X509v3 Authority Key Identifier:
keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9a:26:ea:e9:88:41:ca:61:51:51:8a:20:a4:65:b0:a0:bb:
3c:30:a7:b0:1d:99:c4:0e:9e:19:e3:98:7d:ef:a6:15:11:fa:
82:d8:88:90:04:53:a8:2a:a1:91:4f:0f:2f:65:3e:39:fd:ef:
66:81:15:8d:64:c2:6a:9e:76:db:97:82:7f:72:ec:e9:fc:c3:
2b:10:e1:0b:ce:1b:24:9f:dd:98:51:04:6b:51:cb:21:d9:15:
38:96:7f:06:3b:b8:8b:55:d0:44:7b:0d:85:b4:8f:36:d0:d1:
bf:b9:1b:cc:f2:81:ae:bf:2c:01:a3:87:5d:10:2d:af:65:40:
fd:98:3b:d1:ae:d8:7f:28:97:d2:56:b1:24:91:7d:9b:f2:44:
16:71:9a:47:ac:35:62:9e:b6:8f:fe:71:6e:7c:ac:02:ce:e6:
37:e7:fb:e5:9c:a4:1c:43:93:db:9e:69:fa:b6:10:e4:d8:41:
81:da:b3:5d:eb:fa:6f:6d:f4:a1:32:eb:73:b9:65:b5:b9:7c:
3f:0a:76:96:f1:66:04:bb:de:12:ea:e2:06:e8:8d:c0:7e:51:
a4:be:a6:ba:18:5b:6c:dd:d2:58:5c:f1:81:75:a9:ce:04:c2:
2e:4c:f7:a9:8d:4d:25:51:b8:4b:fb:42:7f:1b:70:7c:ad:67:
28:b5:d6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:19 2025 by rpki-client