Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: sLdeav6mJVouzTNEBXr0WOKfMsRGCxdkr4JFDsUDpKk=
Subject key identifier: 4C:C8:C4:4C:93:9D:11:58:6A:BE:1E:A2:B0:C0:40:31:E3:FA:08:D3
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 0197B89087CF6778E9A43D63C6248B29AC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:02:49 +0000
Manifest this update: Sat 28 Jun 2025 22:02:49 +0000
Manifest next update: Sun 29 Jun 2025 22:02:49 +0000
Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=)
2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: JviZDHHMaOn42VLla+12rIyTAfhkSzaFpOSmKnz480c=)
3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:87:cf:67:78:e9:a4:3d:63:c6:24:8b:29:ac:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Jun 28 22:02:49 2025 GMT
Not After : Jun 29 22:02:49 2025 GMT
Subject: CN=4cc8c44c939d11586abe1ea2b0c04031e3fa08d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:a2:4e:43:54:de:21:1b:c5:a7:49:3c:76:
9c:e1:db:31:21:2f:8f:e0:fd:84:aa:e1:48:e7:6c:
69:30:b9:55:f7:1f:7a:e1:55:4d:96:a2:b1:d5:cf:
78:b2:ab:57:e3:54:91:68:d2:44:37:c2:d0:41:10:
82:c8:33:4f:a6:7c:25:b7:9c:a5:39:2d:7b:0b:3e:
44:33:49:6f:87:dd:a3:f4:c4:41:20:35:1c:80:de:
b8:d5:1a:77:13:62:5d:e9:11:d3:27:fe:84:f8:35:
9c:10:85:32:39:59:2f:81:04:2d:22:dd:f2:b1:e8:
21:75:c1:52:32:35:22:9e:bc:4d:e6:dc:1f:5e:96:
73:f5:ae:f5:10:e2:0a:12:b7:b1:6c:cc:8e:c0:28:
72:3b:f3:98:fc:af:b4:71:74:8f:37:26:02:2e:eb:
b9:f1:72:c7:7c:a0:ef:13:65:c2:97:16:b5:14:9b:
e8:99:34:02:6f:d5:b6:e9:b4:be:17:1f:96:08:27:
f6:4a:4a:7d:2d:70:a3:56:9c:fe:b7:e8:8f:b3:1a:
ed:ec:41:e8:19:85:c7:ae:23:2f:9c:08:67:6a:cb:
cd:ac:76:d4:76:99:d1:26:48:dd:21:01:df:e5:13:
d1:fb:df:7b:48:90:35:a4:7f:2a:ec:f4:eb:33:b7:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C8:C4:4C:93:9D:11:58:6A:BE:1E:A2:B0:C0:40:31:E3:FA:08:D3
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:84:2a:a7:3d:20:33:bb:a8:24:a4:28:46:c7:83:22:56:13:
38:24:b4:08:88:2b:13:96:7f:f7:c3:e6:2e:11:30:64:05:6e:
d1:cc:e2:de:b2:c8:77:36:40:bf:9f:47:92:d9:df:5c:7e:3d:
9d:95:05:ca:ac:74:c3:f7:7d:07:90:b2:8c:5c:86:28:38:0b:
b2:58:f0:83:7e:63:a5:0b:4c:c0:a8:cf:c0:7e:c6:85:13:20:
ef:82:61:ef:52:3c:af:4e:21:2a:ee:61:d8:51:ee:d7:93:ad:
fe:0e:43:4d:b7:c9:26:a6:7d:52:e2:0a:86:a0:ff:c6:f1:02:
18:0b:12:e0:80:c6:7e:e2:1f:e4:15:92:75:04:a2:ac:9d:b0:
b6:79:48:3f:77:23:94:fb:54:76:15:fb:19:2a:4d:ee:57:57:
35:d1:ab:da:fa:94:3d:4b:d7:3e:7a:7c:12:6f:4f:d1:33:2d:
d6:1a:50:86:e6:29:41:c1:a6:44:ce:8e:88:69:72:25:12:5e:
93:a9:9e:5f:06:c3:cc:e2:e9:b3:3d:c4:d2:5a:7b:74:36:01:
c4:5e:f8:b3:46:3e:48:76:9b:9f:0f:df:2f:d4:0d:8d:53:96:
a7:11:32:32:af:17:2a:a0:67:4d:27:5f:aa:ca:38:cb:88:8c:
05:87:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:18 2025 by rpki-client