Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
File: zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json)
Hash identifier: N4ouoq2CIudow9zbYJc155SkEeKqHp1rvKaRi2w3kvk=
Subject key identifier: 99:3A:CF:FA:CE:89:FF:63:06:73:1B:54:C0:A7:D7:55:A9:C3:D1:5A
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 0197B77C4057D312DDF58D82DBF8FC2252A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
Manifest number: 133A
Signing time: Sat 28 Jun 2025 17:01:02 +0000
Manifest this update: Sat 28 Jun 2025 17:01:02 +0000
Manifest next update: Sun 29 Jun 2025 17:01:02 +0000
Files and hashes: 1: gKb9DdcRj4oYqZaFfZwKZ6H8uc8.roa (hash: M1RBMZHaP3Km0XU28EIx6tbbE88px/SIXZiJC9Utof4=)
2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: nh2H2Lyz4k/HhH0+RLDXwS67SoNyW8su/x7hYLgjR8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:40:57:d3:12:dd:f5:8d:82:db:f8:fc:22:52:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Jun 28 17:01:02 2025 GMT
Not After : Jun 29 17:01:02 2025 GMT
Subject: CN=993acfface89ff6306731b54c0a7d755a9c3d15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:36:93:2d:fd:f5:c3:87:a1:24:37:9a:03:
e8:dd:25:a0:72:5d:e3:ec:bf:2f:ae:f4:d1:58:22:
37:d8:0e:2c:90:28:3e:75:22:35:1a:42:0b:47:d2:
b9:a9:aa:13:3c:d4:85:5e:6f:c7:37:27:31:98:ab:
be:eb:1a:f6:2c:0f:36:7a:c3:42:b2:f7:af:6e:db:
80:72:a4:29:9e:df:88:97:c5:20:0e:e5:bf:e3:d2:
89:e4:d7:5a:62:9a:ef:c4:f4:a5:73:fd:31:4c:fb:
36:20:7a:1d:4b:d2:eb:62:a1:34:0a:5c:b3:bf:0b:
5b:ec:14:36:08:94:14:98:b3:be:c5:ea:e3:61:50:
86:51:3f:c8:60:ea:06:ca:c5:f7:8b:46:f5:6b:42:
a0:2f:35:b6:a2:d1:55:ce:89:59:36:03:1f:2a:7d:
33:a4:c3:5d:cb:d1:3f:39:5a:0f:1a:d6:1b:09:49:
f6:db:6b:f1:54:99:aa:7a:d8:f9:c9:d4:88:c7:b8:
1a:4b:24:be:b6:07:7d:ca:10:d2:aa:99:d0:51:a3:
ee:ba:ee:f3:66:f6:2b:69:29:23:2f:4e:9b:f6:a8:
fd:d9:f7:52:84:18:b1:2b:c1:b3:1f:66:73:88:4d:
84:12:a0:62:94:c9:6b:cf:42:9f:4f:68:36:ce:1b:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3A:CF:FA:CE:89:FF:63:06:73:1B:54:C0:A7:D7:55:A9:C3:D1:5A
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:87:eb:ac:70:4c:71:a7:bc:21:c5:38:ca:3b:69:5f:58:4a:
1b:ab:a6:00:8f:9f:29:b4:f5:df:5e:92:f3:ce:e1:39:d5:6c:
ed:eb:d1:a8:2d:71:4f:d8:c0:81:e0:1d:fa:24:67:5f:eb:04:
9a:c0:04:20:0c:4c:43:de:df:54:1d:5e:d8:0d:75:ae:37:03:
7f:51:01:80:6d:c6:d4:09:62:f8:80:b6:fb:03:74:d9:2c:b0:
fb:e2:90:6f:8e:df:10:ca:db:67:65:01:e5:48:a3:af:4e:de:
40:54:09:f1:10:64:54:ef:82:d6:c3:5b:a4:a1:73:2f:50:6e:
62:7f:3c:30:67:4b:1b:bb:7a:8f:b2:fd:b2:70:53:4c:2c:d2:
9b:10:f5:df:a2:05:ab:17:be:b0:38:92:bb:ea:4f:47:ba:56:
6a:5e:59:05:69:f7:d3:37:76:cf:97:ad:f8:70:0b:b0:05:cd:
75:64:9e:cd:c1:51:b9:b2:e3:d5:a9:b7:a3:96:dc:87:e6:6a:
9b:cb:f5:c7:a6:0b:04:6c:ad:fe:c8:ca:cc:bf:58:9c:cf:c3:
c2:30:1b:1f:80:50:d0:b5:6f:1b:8b:6c:f8:f0:0f:e3:8b:f3:
ec:76:67:98:ba:50:fc:95:04:c9:85:4a:e8:54:84:f8:96:4a:
18:38:65:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:53 2025 by rpki-client