Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: 88935wwegIZSiM3KxphlRHrktLMdAxg6Mr1eFH0cFwM=
Subject key identifier: 90:C3:86:4D:65:18:29:E0:5E:2F:4D:1F:A7:D4:C2:63:44:3D:3F:58
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 0197B77BF8F6B38838FB90A7427D616EFEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 0538
Signing time: Sat 28 Jun 2025 17:00:44 +0000
Manifest this update: Sat 28 Jun 2025 17:00:44 +0000
Manifest next update: Sun 29 Jun 2025 17:00:44 +0000
Files and hashes: 1: 3tamc3sOw67HPVcPTfi-B2O8yU0.roa (hash: VKiy/+EDaLvbaW8IRlukGidMdNs6XDi7iV1i6VLWYS0=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: j/IwTIJPOBdDbrq8gWbExmTX/UyrtUFpYKT9KVCLA5k=)
3: oMFhnG_2Z4roWQc3WgoG1HgKdEc.roa (hash: QGs1HFAKixXlw1vT4Oet6ENYZoHU7usshB/hp90M1GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f8:f6:b3:88:38:fb:90:a7:42:7d:61:6e:fe:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Jun 28 17:00:44 2025 GMT
Not After : Jun 29 17:00:44 2025 GMT
Subject: CN=90c3864d651829e05e2f4d1fa7d4c263443d3f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:c5:7b:e4:c3:f1:89:74:02:9d:8e:99:f5:
50:45:c2:aa:d3:bd:9f:93:fe:b6:67:e3:ce:12:77:
a8:65:cc:af:95:79:47:86:22:5b:4c:de:e0:b8:2d:
83:6f:48:cf:8b:5a:21:5a:6c:b2:db:f2:fb:6d:35:
dc:2c:94:86:51:0d:2e:08:b0:d5:1e:f6:f4:b3:f9:
28:33:ce:eb:e5:e3:e9:8c:ca:3b:60:7a:3f:8e:19:
32:3e:c3:d7:2b:0a:f8:b1:88:c6:35:d3:4e:85:be:
00:85:af:d9:34:42:eb:ec:53:2d:f4:80:af:c8:b3:
97:7e:3b:82:d7:57:f0:63:ed:b7:1f:56:2b:db:0e:
50:3a:f1:0a:29:99:c3:6d:46:b7:8b:06:a9:3f:39:
6b:cd:f5:bd:7c:3b:f2:1f:f9:12:0d:0d:9d:02:2a:
2b:7f:7b:76:66:4b:46:05:63:10:5c:98:20:69:c8:
38:76:78:47:23:c4:c6:b6:c3:b6:64:2d:a4:65:8d:
93:51:85:ea:95:9e:36:e0:7f:c3:08:67:12:de:16:
9f:21:77:35:69:16:eb:4c:e0:d4:9d:51:84:d5:b5:
34:9d:69:36:d2:a3:44:92:58:43:bb:80:be:f7:f4:
9f:12:97:a4:b2:c0:b7:ba:b0:e8:b4:b5:98:2b:7b:
da:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C3:86:4D:65:18:29:E0:5E:2F:4D:1F:A7:D4:C2:63:44:3D:3F:58
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:46:e1:60:64:18:ef:95:6b:d5:39:fd:10:0a:6c:b7:ec:a6:
29:6f:96:7a:02:3b:0a:cc:17:ee:42:47:1a:c3:e1:b6:a4:c7:
68:17:5f:f5:f2:16:81:36:e6:0f:f0:6b:65:5b:64:f7:2a:e8:
8a:5a:b7:f3:c0:9c:cf:d1:7f:5b:2e:58:f2:f7:da:43:28:39:
e4:66:95:b8:06:cd:33:44:04:d4:d0:5e:05:73:ca:95:97:07:
2c:35:29:77:c4:48:68:2c:b3:7c:b2:c3:84:cc:fe:c7:74:46:
96:ef:a1:82:38:dd:f3:9e:7c:12:c2:15:fc:b5:46:94:45:b8:
93:c2:46:84:8b:4f:47:bc:6d:4f:4b:1c:be:03:ac:9a:a7:7f:
bf:a5:95:99:b3:63:ac:bf:d0:75:10:64:7e:00:6d:a6:09:96:
9a:a8:7f:ee:12:09:1e:1e:b5:fa:db:d5:4c:87:cd:dc:36:e6:
8e:1b:02:af:18:54:1e:37:21:4a:bf:49:ae:b2:d5:be:f3:48:
d3:7a:f5:5c:b2:df:0d:ea:e3:e4:e3:f2:aa:a2:1b:2e:c3:26:
5b:6e:b0:88:40:03:54:48:4a:f7:7d:c0:c5:e9:79:73:b5:f4:
2f:03:06:9d:b9:b5:da:5c:58:ad:d2:31:67:cd:22:dd:68:2b:
cb:ab:69:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:36:53 2025 by rpki-client