Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: WI5tBb4G6eO4HWGrTkl5jpes7ZUNNWgw/1hhhaarENk=
Subject key identifier: C6:32:2E:00:24:76:69:1B:3D:43:4D:A4:AA:DD:8B:FD:3A:D3:6F:60
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 0197B77C76608509D69037B1D1B16220517D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:01:16 +0000
Manifest this update: Sat 28 Jun 2025 17:01:16 +0000
Manifest next update: Sun 29 Jun 2025 17:01:16 +0000
Files and hashes: 1: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: eo0jMUXN+c2FoPK1WuQjjqTB0YiIye3RLj4Vt6DC1ew=)
2: y6XKa07TTPMFsjvwx8e568cVXPU.roa (hash: C/iy2HFJBUXxZmfuDRQqFLZ88BpL9CevYMYDHGoS6P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:76:60:85:09:d6:90:37:b1:d1:b1:62:20:51:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Jun 28 17:01:16 2025 GMT
Not After : Jun 29 17:01:16 2025 GMT
Subject: CN=c6322e002476691b3d434da4aadd8bfd3ad36f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:6c:12:a3:6f:db:78:e5:15:d7:24:8c:6b:
bc:31:6c:14:f0:41:4b:8c:54:65:d1:34:b7:60:68:
1a:93:a2:1d:f1:80:f5:3c:9e:14:94:10:6f:05:d8:
ae:fc:3b:10:4d:9c:93:f2:31:92:59:ec:38:bc:04:
09:3d:05:0b:55:cb:3a:2f:fe:d0:84:51:9c:eb:22:
c9:5a:61:b4:6a:7e:a8:a8:4e:db:ad:08:0e:f9:45:
48:aa:f0:96:28:f1:1e:4b:be:7b:2a:22:e9:66:02:
0e:c1:83:bc:44:07:29:6e:72:18:40:f2:47:bd:a1:
95:bc:30:24:e2:91:f4:77:34:7c:e9:10:73:39:28:
03:22:c3:62:86:42:d5:d0:1b:d2:79:94:07:c7:11:
26:df:7e:10:5d:19:b3:66:26:e7:cb:ac:61:92:df:
3d:3d:cd:0b:1f:e0:71:80:23:fc:fc:10:cd:63:8b:
7f:7e:07:ac:06:e1:ad:05:92:53:85:0e:25:ce:84:
32:67:3d:f6:ce:cb:a2:9e:d1:9c:d9:af:1b:36:b1:
34:18:6d:82:37:f2:7c:a7:89:12:5f:7d:03:66:3a:
5e:17:d6:5c:de:06:bf:eb:dd:1a:00:97:8c:b2:24:
d9:b8:aa:67:8a:52:01:08:b6:26:b2:82:a2:16:3d:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:32:2E:00:24:76:69:1B:3D:43:4D:A4:AA:DD:8B:FD:3A:D3:6F:60
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f4:7a:53:c3:c0:3b:03:d2:3e:68:65:7a:6b:ea:f8:b1:e5:
cb:1a:9a:97:83:eb:fd:67:93:d6:f9:cd:3c:46:16:67:7f:de:
51:14:6f:e2:10:00:54:75:ed:73:82:8d:f2:01:03:3e:94:d4:
47:bc:23:e2:29:b6:a0:67:1f:dc:e3:21:01:22:35:32:38:3f:
08:b0:04:51:15:c5:64:2c:e9:68:a4:90:a6:55:d9:4e:93:0d:
27:8a:7f:67:77:e1:93:cf:1b:39:3a:86:fd:0f:30:b2:67:c7:
b7:80:a8:b9:db:dc:58:47:e9:ec:0f:1f:47:d9:74:2b:fa:9a:
50:8c:a7:b0:69:f4:db:19:9d:2e:b8:6e:fd:2f:b8:01:01:c4:
3e:6a:25:06:8e:6a:8d:bd:e7:ed:2a:5e:26:2e:36:82:90:3e:
ed:7a:fb:fe:3e:c9:34:4b:15:90:d6:17:9d:22:ad:57:a9:80:
eb:6b:44:7d:e6:f7:ec:38:aa:8c:e1:2e:50:71:58:66:7e:e5:
a3:92:6e:07:ba:12:02:ac:e8:18:4e:f3:e8:01:9b:b6:bd:ba:
f0:56:0c:c6:94:64:1b:88:ac:df:e9:63:88:4e:98:1b:a1:60:
f1:fd:43:1e:cc:d1:7c:e3:4b:ed:03:c2:bf:c3:af:e3:b5:9d:
e5:ae:cc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:18 2025 by rpki-client