Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: keV7ANp/FnQX4JNwxXBXKP6VOkhvUD0a8BEM704xSgU=
Subject key identifier: 7A:0C:3B:2D:FC:2A:C9:C3:22:97:26:1D:4F:03:86:98:77:A8:0D:BB
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 0197B6A102F7BBCD8B0DD5FEF96FF10F8D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:34 +0000
Manifest this update: Sat 28 Jun 2025 13:01:34 +0000
Manifest next update: Sun 29 Jun 2025 13:01:34 +0000
Files and hashes: 1: XmInGKZQVpi4yiOnRct1YYYqWiE.roa (hash: R86EgdaEJJTkg9AcxCYcJUrFnlotYJxO2Dz2JbHzD6o=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: gtv91SixslEExJUXHJy6v9wZCihF6hpTLgilduwEvjk=)
3: quUKUBb4zZe6-7AC8l87cCVH0H0.roa (hash: GrPFGNPKw3mudZK+q8bDj+RCkl+C4u9ag/IOaEBEaJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:02:f7:bb:cd:8b:0d:d5:fe:f9:6f:f1:0f:8d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Jun 28 13:01:34 2025 GMT
Not After : Jun 29 13:01:34 2025 GMT
Subject: CN=7a0c3b2dfc2ac9c32297261d4f03869877a80dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:af:27:71:97:3e:02:d7:c5:31:54:77:2d:
68:6d:6b:6d:0a:7f:d7:7f:79:d9:28:cc:f6:13:c8:
96:22:05:91:57:82:0a:37:52:27:d8:e5:d2:e8:54:
94:e5:1e:50:44:9f:ea:5a:39:29:c5:0c:d3:85:c0:
d1:e3:eb:8b:58:43:59:17:3e:8c:a4:01:8e:e0:71:
0a:37:c3:fb:8c:44:6d:7a:c1:e5:6b:1e:00:73:05:
9c:67:85:25:83:79:2a:de:2b:41:c8:7d:0f:16:6c:
0f:5c:30:00:b7:f6:8f:55:d4:6e:24:0d:8d:cd:ff:
5d:37:8a:4d:d5:af:15:00:14:7e:42:fb:47:94:08:
12:6c:40:db:db:f0:25:e0:07:c0:1c:15:4c:94:14:
a2:4d:e1:59:70:95:06:97:15:52:81:ed:08:01:7f:
12:33:f6:c9:58:dd:8e:19:29:e7:f9:1b:a4:8d:23:
06:e8:b5:2e:19:4e:a8:4f:c0:ad:62:a4:d8:fa:f3:
43:a1:32:0e:4d:9c:73:7d:c6:b4:e9:1e:40:73:99:
00:a1:41:49:aa:4b:7d:b4:03:92:e5:33:65:45:49:
1e:cb:ff:00:6e:f1:f2:d4:bf:38:ab:ab:db:bb:04:
b8:cc:4a:14:58:95:dd:4a:3b:0b:6c:00:bc:3c:59:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0C:3B:2D:FC:2A:C9:C3:22:97:26:1D:4F:03:86:98:77:A8:0D:BB
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:17:13:e6:f2:a8:c7:4b:ba:29:a0:a2:94:83:97:86:fc:e9:
60:a4:71:db:41:6d:9a:3d:d2:c5:a3:e0:11:1e:59:a5:27:88:
55:bf:05:9b:43:0e:1a:b3:85:f7:39:88:5f:69:49:a8:a8:f2:
84:46:6a:87:bf:39:ea:b7:db:f9:02:dc:02:a7:c8:6c:27:b8:
f8:19:b2:e9:c0:c9:ae:e0:c7:ca:50:7e:67:29:10:ad:ed:30:
56:93:94:1f:e3:9a:c1:3e:03:bb:4f:ad:0c:c5:9f:83:39:41:
20:75:85:76:aa:81:83:19:24:a6:f1:8d:b1:d0:3a:76:b0:b4:
41:9f:9a:d3:e5:9b:c4:af:80:ae:6d:97:09:4f:9c:59:ac:23:
65:df:a4:30:bf:b5:11:3d:b5:9d:49:28:07:2f:f6:7d:50:dc:
05:f5:99:c1:82:82:91:ff:6a:50:7e:92:50:52:97:03:9f:23:
74:a1:70:ff:e4:81:69:cf:04:5a:ba:8e:04:bc:8e:f0:02:fb:
b9:3c:e4:b0:75:99:7c:f4:38:ed:14:d7:4f:75:3e:63:1e:a3:
00:b0:71:e1:99:1c:98:84:66:2b:dc:7f:a3:73:0f:2f:7b:c9:
ed:81:56:d1:0e:50:41:f4:24:94:20:4b:de:4c:16:6b:9e:b2:
83:43:6f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:28 2025 by rpki-client