Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
File: ZGhabXP_WifhvB-WF9-1UIutKTs.mft (raw, json)
Hash identifier: imOLufJ8R1BsQdtVRgX84uMpuPIbwU9m4BQzIgS/uzI=
Subject key identifier: 27:63:29:AC:4C:EA:9E:14:C0:81:0A:87:77:24:47:DA:A7:AA:D6:7D
Authority key identifier: 64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B
Certificate issuer: /CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b
Certificate serial: 0197B5FBAC7EE9CF05F02E76BCFA8D024E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
Manifest number: 0C6B
Signing time: Sat 28 Jun 2025 10:00:59 +0000
Manifest this update: Sat 28 Jun 2025 10:00:59 +0000
Manifest next update: Sun 29 Jun 2025 10:00:59 +0000
Files and hashes: 1: ZGhabXP_WifhvB-WF9-1UIutKTs.crl (hash: gzcA2yOFQJPPGYUJJ9H+ek6s3/tL8Z4Y78yOLekBOgI=)
2: luEbamkkQ3JNKI_McJaQ-rwJjV0.roa (hash: ErxV+CJ+EDpVd4vCMZWyy26jRiSWzXrUb4kdxbwG3ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:ac:7e:e9:cf:05:f0:2e:76:bc:fa:8d:02:4e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b
Validity
Not Before: Jun 28 10:00:59 2025 GMT
Not After : Jun 29 10:00:59 2025 GMT
Subject: CN=276329ac4cea9e14c0810a87772447daa7aad67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d5:d8:f2:3d:2c:65:6d:74:ea:16:15:2d:24:
4e:4e:a7:b9:af:2f:62:59:9c:14:dc:3b:1c:e3:c9:
28:63:c7:16:9a:77:09:0f:4a:78:c3:bf:3f:ab:73:
86:71:32:95:6a:4e:a7:cd:fa:c6:e1:cd:09:be:8a:
10:b2:f2:b8:26:2b:cd:15:c2:0f:7a:8d:44:cb:f9:
0f:7d:5f:2c:34:c2:23:c6:d6:e7:32:b2:a2:ab:f5:
dd:b8:fe:15:52:e7:03:89:47:c4:93:5a:c8:66:90:
ac:17:c6:ac:a5:43:1a:d3:cb:ef:73:84:a5:6b:17:
53:4e:f5:60:35:0c:b1:4d:52:02:4a:c3:e9:1e:9d:
e4:e5:98:36:78:07:6d:16:3d:3c:7a:90:19:78:fb:
bf:c1:37:a1:a1:dd:d5:69:b5:7c:cd:0b:d9:60:81:
cd:7a:ea:9f:c3:c1:b7:79:5e:6c:bd:bb:98:32:54:
2c:bb:1d:fe:e5:19:44:3a:03:1b:13:c8:aa:de:38:
a4:6b:ad:da:fc:b1:75:8b:1a:a9:87:4b:5f:a1:03:
51:29:6f:db:25:57:fb:c6:5d:d9:6b:5f:ea:4f:4b:
f3:d1:76:66:c7:6e:d5:79:2c:01:a9:d9:06:f8:d9:
a4:04:b9:3f:2c:5a:9c:23:ab:35:b9:32:51:7e:23:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:63:29:AC:4C:EA:9E:14:C0:81:0A:87:77:24:47:DA:A7:AA:D6:7D
X509v3 Authority Key Identifier:
keyid:64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:11:dd:ac:0f:a0:b1:3b:5a:fe:42:19:6d:2e:2a:c9:d2:3a:
0e:03:5d:8c:ec:65:d3:96:87:82:f2:33:23:e8:92:61:ab:36:
69:46:01:7d:d1:b3:ba:01:bf:30:ed:b0:92:23:14:73:39:53:
8d:c9:66:c1:64:8f:fd:ec:10:bd:15:62:d7:b4:76:a5:98:d3:
74:23:ed:90:94:ea:e1:96:ca:66:1a:52:b5:f9:85:3c:ad:dc:
79:1a:68:f4:e3:93:91:7d:66:ef:37:28:36:2c:0c:1e:11:82:
b8:2c:a1:0e:22:06:51:a0:8f:15:f3:99:36:57:c1:7a:1d:ae:
31:21:65:41:a2:35:a4:fd:44:f0:01:20:88:fc:d9:4d:6b:7c:
ff:fc:5f:d4:fb:d7:bf:42:fb:a8:e3:93:bb:f6:64:09:bf:c7:
f8:30:37:01:df:a5:e1:08:4c:78:5d:da:2b:d5:d0:04:4c:11:
1a:8a:09:cc:50:f5:03:89:66:00:c0:8b:ea:00:a8:ca:ac:d6:
5b:bc:82:e7:5a:57:63:31:42:b3:2b:fc:15:08:77:ea:9f:12:
b8:db:f7:88:1e:4a:1d:e8:7f:bf:ae:3a:21:b5:fa:ad:9d:31:
37:1b:56:d7:53:4d:30:ee:31:9d:37:20:44:70:0a:32:4a:2a:
5f:20:87:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:39 2025 by rpki-client