Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
File: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json)
Hash identifier: t8wYS7Uhnr3KVDolWH+Ng2mPDUbQAB+GLqQM5V82dAI=
Subject key identifier: AC:5E:54:88:99:50:E4:97:1A:C5:68:84:E7:A5:BC:98:BC:81:0E:6A
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial: 0197B58DC760775F5578E0F6667671135658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
Manifest number: 11BE
Signing time: Sat 28 Jun 2025 08:00:57 +0000
Manifest this update: Sat 28 Jun 2025 08:00:57 +0000
Manifest next update: Sun 29 Jun 2025 08:00:57 +0000
Files and hashes: 1: ID_lbNPN5Y-E-d8mbQhTW4YaucM.roa (hash: pqF3+TVfZVLtWeeY0X/7rX4dAra1r0f5BNTNZcfYgyw=)
2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: fH5mFnM0IqmdNji0x19fOI5nVxNUwWzjeNdXX9TEMeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8d:c7:60:77:5f:55:78:e0:f6:66:76:71:13:56:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
Validity
Not Before: Jun 28 08:00:57 2025 GMT
Not After : Jun 29 08:00:57 2025 GMT
Subject: CN=ac5e54889950e4971ac56884e7a5bc98bc810e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:d6:d2:f6:76:da:10:94:56:6d:56:e6:99:
45:cf:7e:eb:b1:49:4d:b2:fb:6a:a1:80:a3:38:39:
57:45:6c:69:be:c8:4e:fe:77:e8:f2:33:25:26:10:
b3:8b:23:75:5f:e5:47:1a:55:c3:fb:51:e9:de:ef:
5d:95:c2:d2:25:33:21:12:14:25:17:8b:d5:5c:0e:
23:12:fe:8b:95:e8:14:ca:69:01:4d:2f:f3:a2:98:
ad:89:aa:7e:76:60:62:24:6e:7f:e2:e5:2c:a4:35:
32:73:af:5b:11:6e:ee:2c:4c:3e:4a:d3:08:8c:37:
4e:6b:4a:b2:4d:7e:6a:d7:96:67:53:5f:d7:0f:2c:
c6:49:88:28:bf:7b:cc:e1:13:a4:a8:70:cd:5e:eb:
57:2f:40:7b:19:da:15:23:0e:ab:51:b0:c7:a3:09:
46:c0:e4:90:24:7e:ac:36:f5:e9:22:9a:79:ea:cb:
12:98:2b:1e:d7:b3:d9:b8:0e:c3:c6:39:c1:c7:c1:
10:24:d8:ee:f0:54:05:53:c7:e2:f9:b9:f8:72:6f:
9e:cb:c1:3d:d2:9b:7b:0a:e7:84:46:ee:11:a3:6d:
5d:4d:70:79:e7:bc:83:4c:9f:de:ed:9b:aa:78:5f:
78:c9:41:d4:1e:2c:08:74:e8:4a:b3:ee:c7:a9:7c:
49:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5E:54:88:99:50:E4:97:1A:C5:68:84:E7:A5:BC:98:BC:81:0E:6A
X509v3 Authority Key Identifier:
keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1c:8f:02:d7:61:5b:1a:4d:51:bc:0d:3e:88:42:01:5c:98:
c5:a8:4a:05:5f:3b:31:72:57:4b:be:61:08:04:36:e8:14:e4:
2c:3c:9b:1c:ca:5b:54:8c:92:b6:16:f3:bd:7d:19:9f:77:c8:
3d:09:13:a8:89:e5:9f:a7:7f:e6:1a:99:8d:93:0a:ea:71:46:
5d:f4:5f:d0:ec:8d:7c:ad:d1:ee:2d:5a:25:19:02:6e:11:0c:
f0:20:b0:2d:77:a7:b7:f0:c9:4b:c7:de:d0:9f:af:83:6e:20:
27:c5:8b:66:52:8b:1c:c0:1b:cc:44:62:ed:7e:1e:67:86:62:
76:31:d9:69:dc:5f:60:2d:59:7a:b5:1f:d6:dc:62:0b:8e:d5:
ee:96:9e:f3:13:57:f5:02:ed:b2:7d:58:26:2b:a2:a2:57:8b:
fc:64:84:ca:f4:40:42:3b:1e:18:cd:62:8b:8d:09:0c:9b:5b:
cf:5e:b3:9a:32:57:8e:3b:86:93:42:30:c6:d0:0a:03:53:77:
f5:52:8c:82:ee:b3:46:54:f3:a2:b9:5a:06:21:5c:6d:a8:58:
99:9e:64:ff:14:fa:db:6c:6d:25:04:11:5f:90:b1:ce:30:d2:
d7:5d:83:3b:3c:dd:0a:cf:85:cb:63:22:20:b5:8a:50:85:34:
34:cd:71:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:12 2025 by rpki-client