Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
File: zgj-M6XwugsoYlNQW7-ykyIPWBY.mft (raw, json)
Hash identifier: 2QUB4+D4MC97R86Pgcav2ZU0Kix4QhJY0/ZuppI2epQ=
Subject key identifier: F8:A7:6E:3A:55:5D:16:86:B9:F1:63:99:40:9F:5C:4D:21:4E:32:C0
Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
Certificate issuer: /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Certificate serial: 0197B820EA57B03F0DDE0E974143C6267A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
Manifest number: 0B2A
Signing time: Sat 28 Jun 2025 20:00:54 +0000
Manifest this update: Sat 28 Jun 2025 20:00:54 +0000
Manifest next update: Sun 29 Jun 2025 20:00:54 +0000
Files and hashes: 1: B8TmpTIld46zLBK0-B3daz7YHhY.roa (hash: cFhKXA0OqtddifzterPyToaMFZ67uadtC/NjCzS5eJ0=)
2: zgj-M6XwugsoYlNQW7-ykyIPWBY.crl (hash: 2x8sYymKOcHlUCzqOasTJDuCd19ASWxna4NfLPzmVj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ea:57:b0:3f:0d:de:0e:97:41:43:c6:26:7a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Validity
Not Before: Jun 28 20:00:54 2025 GMT
Not After : Jun 29 20:00:54 2025 GMT
Subject: CN=f8a76e3a555d1686b9f16399409f5c4d214e32c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:59:ba:ad:bd:bb:35:0a:f1:48:8f:5e:4e:
6d:1b:b6:72:53:cf:b4:e2:b3:47:4f:84:1e:a4:75:
a1:45:05:90:e4:b1:12:ad:35:07:5f:c0:3d:48:f3:
05:5b:f5:8b:f9:90:5c:77:0f:46:e5:4f:f8:d9:7d:
05:4f:71:b9:7c:e6:b5:92:df:6b:2f:2a:ec:a6:f5:
8f:52:c1:fe:85:8b:67:a9:0c:cc:b0:ea:85:14:74:
93:62:0b:31:80:15:f8:90:0c:7b:25:10:13:b1:e1:
0f:e7:7c:3e:82:3b:c9:5e:eb:d5:88:a3:01:01:f7:
58:42:d8:ed:88:6c:8d:ee:bb:02:3d:77:0a:26:cb:
ce:f3:8e:67:e2:fb:ba:b1:2c:79:47:e5:3f:ee:76:
09:eb:1b:fb:97:4c:a6:40:4b:e1:f3:ef:4a:d1:13:
92:3c:98:f3:35:ea:51:76:ef:fd:b8:a0:17:c5:63:
26:40:a2:81:47:8f:00:ee:d9:55:6e:51:35:6d:a2:
32:d4:e2:21:9e:1b:3e:fc:3f:a2:71:74:d8:40:cc:
6f:9c:27:65:17:3f:8c:25:d6:a4:0f:98:42:2b:b7:
aa:a8:a5:6f:31:52:87:c2:ab:35:a0:08:f4:3b:de:
e9:1b:4e:ad:84:72:11:63:aa:d1:94:fd:30:3e:48:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A7:6E:3A:55:5D:16:86:B9:F1:63:99:40:9F:5C:4D:21:4E:32:C0
X509v3 Authority Key Identifier:
keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fc:15:a8:04:64:d8:e1:b3:bb:fa:a1:9b:f2:66:2a:40:0f:
b1:d9:a7:74:b5:9c:56:d0:cc:41:c0:39:a3:a6:5e:ad:e9:52:
cd:09:9c:b9:55:0e:03:6b:75:ba:12:b6:3f:c4:51:ee:e4:7f:
da:d1:fe:7f:00:8d:80:96:bc:76:b5:9f:95:64:a2:ce:c3:85:
f3:a4:ce:91:47:40:9d:00:4e:d6:f7:1e:38:ff:a0:7b:83:bd:
b3:e6:f4:0d:f7:9e:42:40:fe:0e:fc:da:c8:2e:17:ad:97:10:
0d:8c:8e:8f:d0:df:5a:60:da:68:38:11:9c:40:34:2f:73:bd:
40:02:be:5e:b2:33:1e:b7:96:52:db:89:85:36:f4:b4:f8:a6:
04:33:ef:21:ff:d9:86:ac:f8:16:35:34:82:b3:d6:eb:26:67:
f7:05:6b:15:5b:f0:b8:f1:41:2b:fa:e2:42:16:b7:45:6b:26:
b7:64:8b:23:1a:d8:7c:b8:8c:99:56:e4:87:e4:ed:5a:5c:4b:
c8:6d:fc:1e:aa:02:2c:e4:dc:e9:51:da:63:e7:ca:b9:d3:61:
be:99:40:44:30:4b:09:67:7b:76:79:53:59:d2:b4:63:04:d8:
2c:a3:be:98:1f:1b:d8:ca:6a:90:93:24:be:81:45:23:92:ab:
cf:78:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:07:29 2025 by rpki-client