Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: 4G0E2uo7H3d9ejIyvErZIOOLLE5Ar3GZ1UWBnUVe9Nw=
Subject key identifier: AD:33:E1:6B:3B:08:CB:FB:B0:8E:81:F5:76:09:F1:A1:25:53:DA:C3
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 0197B70F143C33B892B41A4A102AFB497524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:48 +0000
Manifest this update: Sat 28 Jun 2025 15:01:48 +0000
Manifest next update: Sun 29 Jun 2025 15:01:48 +0000
Files and hashes: 1: 85tLColHz2gs1kcjcHIOLXPmYtQ.roa (hash: 51Me4gSLKgXfTiir1H4AL3W1LXbfR1eI6xG1CchHRO8=)
2: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: tW4DGiK84gd72DLXTvKD9Twje5NOJl3i7VyDe8pcoHw=)
3: b6QMF74wF01wlBWgUywRsmP3cGw.roa (hash: mCNVR2N9fZow4RurrMaom9Uu+qamMdZIjWplYZcfRCk=)
4: gVLVKsEHBgFO0HBzlpPgO1QXFuY.roa (hash: fKAtB5hizqASF48vAvN9nOmMRZOKAzC8UCmGWDZ4vi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:14:3c:33:b8:92:b4:1a:4a:10:2a:fb:49:75:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Jun 28 15:01:48 2025 GMT
Not After : Jun 29 15:01:48 2025 GMT
Subject: CN=ad33e16b3b08cbfbb08e81f57609f1a12553dac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:a0:81:56:a7:f2:73:9f:2b:9d:f3:b9:8d:
35:11:7e:36:15:d6:d7:3c:2e:5c:4d:a7:42:05:94:
20:ef:d3:65:76:92:b1:29:24:82:05:50:9c:51:0e:
4a:97:89:36:0b:93:03:cf:53:e8:b5:5a:55:ec:3f:
29:3a:51:91:d5:8d:5a:20:4e:c3:ce:c2:03:57:14:
be:f4:9c:ab:bc:6c:dd:cb:5b:20:56:e2:86:60:b9:
60:0f:09:b2:51:78:21:7c:ce:84:3c:a1:40:6e:fc:
6e:95:07:13:e3:8e:32:38:87:e0:90:f2:3e:57:48:
82:7e:ce:52:71:ed:51:39:38:0d:2a:aa:c0:0e:b9:
f3:73:30:54:78:b6:20:29:19:83:66:44:b6:6e:05:
17:50:a0:8c:6d:02:78:4e:eb:86:29:2b:06:1d:7e:
99:e4:9e:88:8b:f8:c6:98:8f:01:14:9f:15:e2:69:
e2:aa:b3:ea:15:3e:4c:bf:5c:73:e0:65:cc:86:05:
1d:d9:80:71:1f:73:88:ae:8c:53:c0:85:ff:fe:eb:
60:0a:b0:d8:1d:fe:db:44:5a:9e:ba:55:36:52:f0:
b7:17:54:88:0f:de:5b:5e:d0:35:6b:af:93:d8:0f:
03:10:16:da:5f:63:9f:1c:b8:ba:59:d6:09:62:1e:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:33:E1:6B:3B:08:CB:FB:B0:8E:81:F5:76:09:F1:A1:25:53:DA:C3
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e8:f6:5d:4e:3a:65:3f:f2:5c:7e:78:6a:2a:7b:4e:e2:f2:
42:72:1a:0b:e3:f0:f9:b3:d9:53:b6:ea:73:4b:3f:5d:46:54:
86:ca:7f:20:35:c0:62:10:f6:b2:8f:3b:9a:78:7a:6b:33:0e:
52:a7:50:05:37:9b:aa:12:35:99:7b:09:e3:b6:12:0b:16:6c:
17:d2:8e:b0:49:19:8b:4e:f8:4a:a2:ba:f9:5e:40:48:0a:0e:
db:a3:89:e8:82:ab:12:28:74:6f:4b:a9:3b:a1:12:ca:35:fe:
0c:3d:48:b1:a2:7f:58:46:e0:cf:29:21:97:bb:21:0d:ea:db:
74:3a:d7:64:20:15:d0:32:4d:4b:57:c8:17:96:c5:0f:4b:8d:
fd:30:b8:7f:64:22:aa:d2:a5:12:e7:74:e5:63:d0:47:61:4a:
c4:bd:fb:d9:ad:c7:80:8d:38:d2:b7:d5:2b:cd:c4:7f:45:2e:
49:3e:79:02:45:4b:08:46:72:c3:c5:94:a2:23:fe:4d:e2:da:
10:10:1b:b3:08:46:81:99:32:f2:c1:fa:3b:c8:55:4a:21:17:
79:5c:fa:23:e9:65:ba:96:0a:08:a8:f1:c6:c5:9b:ed:04:4e:
09:20:88:97:36:50:47:0c:6e:6f:89:de:da:18:64:96:0c:8f:
3a:12:b3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:23 2025 by rpki-client