Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier: 5oR0Wn0z+cq6jZ3yuORpnsrb6cQQCzAJDoOr+AmTszc=
Subject key identifier: B4:F9:FD:3D:4E:4E:62:A9:10:93:50:F0:B9:EB:1A:EF:64:A9:E1:28
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 0197B6A228AD5F77F02D48286BAF2B5D3843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number: 12B5
Signing time: Sat 28 Jun 2025 13:02:49 +0000
Manifest this update: Sat 28 Jun 2025 13:02:49 +0000
Manifest next update: Sun 29 Jun 2025 13:02:49 +0000
Files and hashes: 1: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: r70jB03HxeDl6r8ECn1VU75wz4bttgAhDKSADZgrkV8=)
2: _3NEeq6GOXOiLdZdEWjfBKtdhh8.roa (hash: pTgzQ3b72uIy4BLhpeJN6uHM+SJH/WDu+3JWOoF47hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:28:ad:5f:77:f0:2d:48:28:6b:af:2b:5d:38:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Jun 28 13:02:49 2025 GMT
Not After : Jun 29 13:02:49 2025 GMT
Subject: CN=b4f9fd3d4e4e62a9109350f0b9eb1aef64a9e128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:f2:2b:1f:99:8e:8e:b0:11:8a:78:99:22:
d3:b8:05:7b:6c:e7:aa:23:04:25:9b:36:c2:ef:49:
4b:5d:b5:96:f7:cf:35:4c:df:bc:7e:ca:90:ca:99:
3b:7d:93:26:4d:c4:f3:76:5b:cb:27:bd:70:fa:75:
5e:f3:af:d8:b8:9d:ca:ee:0e:5b:55:a2:35:32:45:
34:de:14:a8:ff:44:c2:41:d5:74:d2:f1:6a:fb:07:
37:63:81:4c:84:b8:01:d6:a2:ec:42:ae:e7:9f:63:
39:95:d6:e1:00:fb:15:c1:ce:0a:8b:d8:87:7b:0f:
85:a4:fa:17:1a:50:07:71:7f:e7:27:c3:16:21:52:
56:58:b8:bf:07:44:f4:fb:87:8e:bd:86:b9:84:92:
89:e2:ce:03:eb:2e:4e:33:c3:29:3f:92:ba:61:ac:
92:51:c2:de:22:2b:fd:4c:36:6b:37:5c:7c:7f:26:
eb:ae:24:b4:c8:34:b2:f0:cb:39:d6:17:9f:15:82:
ce:2f:c1:7f:13:d8:57:29:26:87:ee:cc:d2:a0:6a:
32:1c:76:2d:5f:2d:2f:3a:2b:71:3a:dc:14:85:f1:
9b:55:38:90:00:df:ee:ba:07:87:9c:75:cf:a2:80:
c2:a9:85:fa:cf:cd:81:f7:f5:7e:7d:23:7b:9b:8f:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F9:FD:3D:4E:4E:62:A9:10:93:50:F0:B9:EB:1A:EF:64:A9:E1:28
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5b:2d:2e:28:dd:92:99:2b:fc:83:69:13:3c:a3:be:2a:b7:
b1:62:e8:de:90:c1:bd:4b:c7:f6:56:1d:b8:15:ab:c1:d7:f1:
61:07:b3:bc:aa:07:30:55:1a:98:13:10:f7:92:2d:54:0f:e4:
34:21:fe:ae:8e:d8:f1:54:45:07:ad:4a:c3:d9:f4:4f:ef:cd:
7c:0a:d8:6f:0b:10:86:b5:8f:d7:04:a4:85:a7:81:f2:64:28:
2a:fe:bc:ea:af:87:3f:a6:2d:0a:31:06:92:2e:39:8a:1b:bb:
81:31:08:b2:a1:d2:60:89:86:e9:82:ec:6b:5d:ab:d8:9a:47:
0e:17:41:91:98:b5:9f:90:01:91:3d:27:9e:a9:96:d1:c7:f6:
ae:44:98:25:ba:5a:ee:ff:98:eb:ec:9c:4b:6c:16:b5:fb:63:
a7:72:5c:9c:f1:72:1f:08:f7:2a:9b:de:36:84:64:dd:63:36:
95:cc:43:65:ef:5b:d6:16:c4:c2:4c:83:66:95:6c:fe:a7:c4:
5d:16:ae:36:2d:d2:00:da:67:d8:86:ff:a2:b9:3c:49:34:a7:
c3:8a:77:12:47:07:d0:bf:7b:61:e5:a7:20:46:b5:d3:c0:f8:
24:ef:e6:87:d8:a5:af:e1:2b:5b:74:6d:c3:0c:22:db:fc:f5:
e3:dd:7e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:51 2025 by rpki-client