Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
File: zeKPHxgJm6vwoZCIvqNboITskpc.mft (raw, json)
Hash identifier: E83VwU+qgOIGjOtR248/7D+x2D05UWBLSbGXBi9L90o=
Subject key identifier: 35:CA:44:E4:4B:4F:8E:3A:DA:F4:6E:C2:7D:53:91:83:23:5E:D2:26
Authority key identifier: CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
Certificate issuer: /CN=cde28f1f18099babf0a19088bea35ba084ec9297
Certificate serial: 0197B6A1F0F79356BA4A4839CEB677FB7F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
Manifest number: 0DA9
Signing time: Sat 28 Jun 2025 13:02:35 +0000
Manifest this update: Sat 28 Jun 2025 13:02:35 +0000
Manifest next update: Sun 29 Jun 2025 13:02:35 +0000
Files and hashes: 1: tODsj4wJmlLizDhD4zx5X4Q0kBs.roa (hash: 8ot7Ptkdu5uwMXdssVMoEe9aK4JBYnjK0TXriR+RS5I=)
2: zeKPHxgJm6vwoZCIvqNboITskpc.crl (hash: A2i3+JXVWAtobz9W6lEMFEj+zFQN/uWDM8FSeRVZOeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f0:f7:93:56:ba:4a:48:39:ce:b6:77:fb:7f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde28f1f18099babf0a19088bea35ba084ec9297
Validity
Not Before: Jun 28 13:02:35 2025 GMT
Not After : Jun 29 13:02:35 2025 GMT
Subject: CN=35ca44e44b4f8e3adaf46ec27d539183235ed226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:13:3e:d8:a9:2d:32:9c:41:08:19:8d:c4:
f1:e5:12:99:ec:d3:9a:3e:44:28:47:8b:b4:f3:0d:
4e:a6:dc:a8:62:12:8d:59:4b:9c:36:26:38:26:43:
c0:46:5b:25:3a:63:bf:bb:c7:39:7f:4b:c3:7a:30:
64:49:90:ba:41:4c:93:17:a8:5b:4b:1c:24:71:71:
66:73:b6:5c:56:a7:9c:e3:36:20:80:e7:75:d3:c3:
29:f0:d3:a1:ac:60:04:0f:f4:d1:9d:b7:03:3d:71:
a8:a3:d5:d9:ef:cb:1d:45:e9:d2:87:59:61:ec:a8:
43:1d:d0:b9:64:19:e0:bf:9e:c5:ec:20:44:48:f1:
65:cc:04:77:c1:ee:fa:2c:79:4b:32:90:46:55:3c:
bb:a2:b3:5a:05:fb:9a:ad:e6:29:78:59:6f:b5:96:
1c:94:fd:05:b9:74:7f:2f:b3:21:39:2e:a5:c0:c4:
cb:97:51:e6:02:3a:dd:14:89:a2:d9:94:3d:35:6c:
6e:20:2e:22:83:41:11:42:0a:e7:ed:0c:34:1f:b5:
b7:da:fe:73:70:12:f8:96:b2:38:bf:98:a9:c0:f1:
a1:1d:ba:d0:11:94:28:4c:c6:e0:06:8a:01:68:bf:
4d:2e:14:f7:1a:f8:d6:3b:25:18:87:23:13:d5:db:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:44:E4:4B:4F:8E:3A:DA:F4:6E:C2:7D:53:91:83:23:5E:D2:26
X509v3 Authority Key Identifier:
keyid:CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7a:bd:9c:67:cd:7c:94:a5:b9:a1:4f:10:79:12:08:71:99:
7c:3c:b1:91:a2:6f:f2:f5:0b:56:67:be:20:46:07:5c:e4:49:
3f:0a:19:d9:53:0d:3b:eb:2a:aa:cd:10:f0:7d:ce:0a:0c:0e:
01:8e:c4:a8:12:35:bb:1d:10:31:94:b2:0d:af:b1:f4:b3:53:
b4:12:10:0e:95:8b:ee:56:77:d5:32:0d:f0:1e:47:23:20:78:
b5:06:25:83:30:b5:37:f6:27:b0:2e:17:16:41:35:93:1a:02:
e1:b3:bf:34:d1:a8:b1:2c:5a:b0:01:4d:3d:a7:ca:76:b8:52:
6b:51:7b:7e:86:43:00:6f:fd:2c:3e:dd:34:0c:61:16:4b:33:
a1:d4:c7:05:fe:2c:da:07:88:cd:a0:79:2d:1e:fc:89:46:06:
2b:eb:05:aa:1d:46:c6:65:ea:3f:b4:05:37:bf:66:f0:3d:0a:
87:2c:fd:b9:fb:55:1d:1e:d2:8a:f2:11:9b:0e:3e:db:a2:0d:
21:09:8f:f5:db:ac:02:6d:fa:60:48:f0:f5:07:7c:b3:6f:a9:
bf:81:f2:18:ec:1d:12:99:a2:dc:74:0a:d6:68:c2:40:94:87:
f5:ea:db:00:ec:31:f3:c6:0f:6c:c9:75:73:a0:a5:18:8c:c9:
28:c4:53:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:05 2025 by rpki-client