Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier: PHDCHBV9nnBDX5d6rBrQwVV1tXJpBTd5lYYlf9RLK/c=
Subject key identifier: DE:AE:4C:3D:42:91:0E:3F:5B:D8:02:10:6E:FB:87:5E:DE:C1:58:ED
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 0197B632F5F145B154C21C0CB5C27E327E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number: 091E
Signing time: Sat 28 Jun 2025 11:01:22 +0000
Manifest this update: Sat 28 Jun 2025 11:01:22 +0000
Manifest next update: Sun 29 Jun 2025 11:01:22 +0000
Files and hashes: 1: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: 90acsOawojkEi21y+GnT3a40LXki02Z6XkNEYsy44r4=)
2: paYy_Hhxnm4PBAs2Lf2_YVwZO6U.roa (hash: ATfmnjPDFCrMSy8LdJNeeiWeAqOBvNXLV0H5uqzb3IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:f5:f1:45:b1:54:c2:1c:0c:b5:c2:7e:32:7e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Jun 28 11:01:22 2025 GMT
Not After : Jun 29 11:01:22 2025 GMT
Subject: CN=deae4c3d42910e3f5bd802106efb875edec158ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:62:b0:cc:f8:9f:35:e6:fa:53:7b:41:2f:
87:e1:73:5f:77:a4:31:06:f9:8d:a3:ee:95:63:85:
53:d2:65:7e:01:ef:e7:14:c6:94:48:73:3e:9c:04:
e5:d4:ca:32:19:33:d4:74:a8:2a:7d:3f:53:c5:b5:
79:e9:35:36:c2:14:c0:35:b1:96:93:26:5c:ca:c6:
dd:27:d5:63:50:0c:07:80:1d:0e:1f:7f:43:4f:4c:
89:e4:55:fb:23:91:8a:b0:32:25:86:bd:81:d5:e4:
d4:d1:e7:5a:69:82:93:58:0f:24:44:3b:0b:98:5b:
ef:cb:3a:a5:87:8b:c8:37:e2:f6:d1:f9:3f:32:10:
f5:fc:62:52:a6:88:2e:43:45:f2:42:03:4a:da:91:
62:52:5d:a4:e9:29:49:87:05:ed:9d:cd:18:3f:ff:
37:68:dd:5d:7b:67:82:21:47:a5:07:97:f1:a4:79:
07:26:9a:a6:8f:3f:f0:fa:b9:5b:04:d8:63:d1:76:
56:cd:25:b6:f5:d1:58:93:aa:71:c7:c0:8d:1a:2a:
c1:58:ca:d5:d0:b1:2a:e9:91:a3:de:6b:80:ca:80:
5a:67:36:aa:12:8a:48:cf:e8:d8:85:b4:3e:e9:b5:
20:92:bd:1c:89:6e:10:79:17:46:5b:58:10:2b:46:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AE:4C:3D:42:91:0E:3F:5B:D8:02:10:6E:FB:87:5E:DE:C1:58:ED
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8f:64:cf:24:4d:07:c0:e6:6c:86:d1:d2:80:08:81:72:ab:
01:36:30:61:14:1d:28:fd:fb:b1:21:b1:f8:fc:71:1b:72:9b:
6d:34:3e:e7:3d:56:d6:8f:d8:b7:8f:e2:8f:ba:6e:cb:54:2e:
42:8a:e1:5c:a2:33:ee:b3:8d:56:6a:b6:69:78:d1:bf:5a:6c:
55:04:f2:c0:8a:ca:a5:1f:eb:7f:e2:c9:52:bc:68:18:ab:ce:
5f:62:d7:34:1e:69:1b:c6:c5:86:2a:39:18:7b:e2:9c:db:a6:
6e:8b:00:33:f3:11:a4:3e:c6:79:50:ff:86:25:aa:fd:88:67:
bf:37:a0:e3:f1:1a:1b:d5:3d:39:59:24:c1:b3:f0:f9:66:28:
94:5b:d3:9f:86:50:fd:56:69:56:7d:df:af:41:71:6c:1e:28:
68:86:fd:60:79:c6:7e:66:36:18:9a:e2:7b:be:af:25:a5:98:
6d:67:71:73:a9:49:fa:c9:3f:6e:d0:05:e2:d5:7e:cd:ca:97:
1f:c5:f5:42:bd:35:8a:cf:2e:9a:d6:6c:9f:dd:42:c3:d2:d5:
e5:6b:f8:d0:ff:5e:f2:a4:1b:66:45:d0:f3:e3:33:64:51:9b:
0b:8d:89:08:83:d9:b7:a8:a2:92:98:6c:8e:72:99:4d:3b:93:
fc:ef:24:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:50 2025 by rpki-client