Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
File: ZZbw3BZbfNIJAispZINMRedNISw.mft (raw, json)
Hash identifier: Bysu1juZyNvqjML6je8IlUUInp7uT5c33TozjSOgy/w=
Subject key identifier: 4F:1E:96:4C:CF:53:FD:0B:E7:E9:97:EE:A6:CF:BA:6E:C9:07:42:82
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial: 0197B6D7B53E6AD737D5D90E9A2B2D4ED1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:01:19 +0000
Manifest this update: Sat 28 Jun 2025 14:01:19 +0000
Manifest next update: Sun 29 Jun 2025 14:01:19 +0000
Files and hashes: 1: 2iga0nlk79hsiXYssBRVEJUMzCk.roa (hash: zNjDqRkr/NBAAcHU26E2dhZjP52AAgoYr8bc94c0dmE=)
2: ZZbw3BZbfNIJAispZINMRedNISw.crl (hash: hbSZbZpFVMCdHvZ7LS4AqAsF2olqfRD5zH0CFgYWe9U=)
3: fkt0k7xGZr7xPzs_ROD74bwXerU.roa (hash: ULOdEt3VdfcvW7gsCxZ+iNOypPoRvVALloBYfPcdh1o=)
4: v1YTSmOUHdktFqFZ-hI7t6WN2fU.roa (hash: tWh0zo1fGBbY4LR0IeI+HXzSMUKkzsrBwh77hMlS6LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b5:3e:6a:d7:37:d5:d9:0e:9a:2b:2d:4e:d1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
Validity
Not Before: Jun 28 14:01:19 2025 GMT
Not After : Jun 29 14:01:19 2025 GMT
Subject: CN=4f1e964ccf53fd0be7e997eea6cfba6ec9074282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c6:ac:a8:24:d5:c2:36:26:01:0b:32:03:c0:
6d:5e:70:4a:05:ef:79:08:d6:00:99:b5:6a:f6:bd:
24:c2:ca:22:ab:e5:5d:57:04:9c:5e:00:15:17:22:
d3:4d:a4:54:a8:03:e1:26:67:80:0d:30:bc:2a:5b:
b4:ff:08:57:5f:35:3c:21:ea:ab:3b:9d:b3:6e:cc:
37:87:a6:71:91:12:d2:44:85:b3:91:c7:e7:e7:22:
3d:34:5f:f7:66:12:97:13:ef:78:36:aa:93:52:bf:
d8:5b:b0:42:cf:eb:7e:74:c0:8b:ac:ec:42:72:39:
13:81:75:19:0e:39:86:84:47:b5:56:bb:81:dc:6c:
37:f5:90:f5:ad:94:a0:5c:92:c1:30:d5:b1:a1:53:
b2:c3:63:7e:33:e7:bc:8c:04:70:04:73:7a:6c:64:
55:f0:49:bb:82:21:bc:43:e8:5c:7a:10:e5:08:19:
c5:c5:e4:a7:de:d2:0d:ea:30:d8:01:d0:07:3e:e5:
19:61:85:f8:8d:c5:50:ff:b5:22:86:81:c4:b7:5c:
56:20:3d:dd:9e:b4:ec:b4:d5:87:70:c3:aa:d3:f0:
c2:70:10:97:9e:cb:c5:63:58:0e:19:46:e0:04:e2:
1d:97:4c:f1:a4:07:f0:1b:6f:ab:22:a3:20:1f:06:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1E:96:4C:CF:53:FD:0B:E7:E9:97:EE:A6:CF:BA:6E:C9:07:42:82
X509v3 Authority Key Identifier:
keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e5:35:de:aa:4a:22:46:6a:47:7b:1d:07:28:35:11:81:4a:
24:89:8f:0e:94:28:13:df:f6:f2:9b:82:50:1d:66:43:86:bf:
62:cc:2a:84:c8:fa:ac:71:58:c6:2c:6a:4c:3e:26:31:7b:c8:
ff:2c:3d:66:2d:84:99:f0:f2:02:b7:18:3a:64:54:9b:6a:2b:
3e:85:ec:a3:68:94:59:b4:72:64:d7:29:11:c6:85:ac:19:25:
a7:35:00:e0:5b:f7:27:de:77:e9:20:86:6e:39:55:8f:69:bc:
df:5a:1a:2f:32:b6:99:b8:9e:23:68:ed:1e:b1:12:2c:8f:46:
70:18:7d:b9:9e:58:c9:9f:bd:6d:66:e1:43:1e:b8:c6:95:19:
c1:0b:91:92:dd:62:ca:dd:53:4f:b5:52:f8:47:ac:43:52:58:
ed:21:3d:b3:77:40:87:96:0a:6c:82:33:a0:2c:f4:56:68:6d:
48:b5:3d:4e:a3:9c:4d:2a:71:ca:f4:b3:dd:d0:6a:45:61:f4:
0b:d8:3e:e1:78:bd:79:df:2f:fa:ac:a4:69:5f:25:0d:af:6e:
9f:51:29:e2:d7:a7:23:c1:13:e6:8c:7f:66:ad:a9:b2:e7:49:
69:27:83:98:6c:fc:2b:f6:0d:fd:ff:77:c4:7a:89:8c:9f:79:
c6:b9:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:20 2025 by rpki-client