Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
File: ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json)
Hash identifier: NulsWBcjxEQ027KFeNW2XkC8fZYXSvdP7cG7rjGOqS4=
Subject key identifier: 5A:38:57:93:37:ED:75:51:8A:FC:99:B3:53:FA:89:4A:54:4A:5D:25
Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Certificate issuer: /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Certificate serial: 0197B70EBEC37609213D5F936557ABE771A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 15:01:26 +0000
Manifest this update: Sat 28 Jun 2025 15:01:26 +0000
Manifest next update: Sun 29 Jun 2025 15:01:26 +0000
Files and hashes: 1: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: N1HuhLnHbIO0wu9cjXerLudpzgC108V9aE0odjHV6TA=)
2: jl2QMltgucjm6DsSRtvejzHwgVk.roa (hash: 2ICsrOX/Ng80gGFWmU3eag4CX8TEZwSeNwBpo27725Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:be:c3:76:09:21:3d:5f:93:65:57:ab:e7:71:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Validity
Not Before: Jun 28 15:01:26 2025 GMT
Not After : Jun 29 15:01:26 2025 GMT
Subject: CN=5a38579337ed75518afc99b353fa894a544a5d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:68:78:3d:4a:ea:66:08:7b:06:e8:a8:b7:
e7:ee:5d:2e:3e:79:af:8f:31:44:58:ab:c9:8d:53:
11:b1:94:b5:f0:15:6b:50:93:3a:96:2d:22:df:d3:
1d:99:f3:eb:d3:65:83:34:01:c6:27:d8:32:87:bd:
79:af:b2:89:bb:61:18:b6:8e:cf:cf:47:c1:6d:09:
61:4a:ab:c6:c7:46:05:8f:fb:ab:87:82:c4:3e:ef:
01:9e:d1:2f:1e:ec:6d:a4:ed:62:c3:6d:3b:81:45:
fe:b1:92:cf:e0:a6:56:30:06:ca:13:0a:2a:db:e4:
d3:53:63:b2:8b:51:62:5e:3e:48:2d:f1:0d:23:17:
6e:02:74:a0:0a:4c:84:5f:88:82:2a:af:50:a7:09:
d4:27:18:7d:bc:e7:0c:d0:ec:92:b0:a4:c4:a2:62:
2d:df:cc:db:06:c1:9e:9b:14:6c:64:a7:45:f4:d6:
b7:f9:88:34:6e:a9:04:54:4b:0c:66:86:71:42:4d:
73:60:cb:8b:35:0c:a1:06:e1:03:00:2d:1a:57:82:
fc:54:84:b2:ce:a4:62:dc:bc:d1:f1:14:19:d0:aa:
55:b0:1a:36:a4:87:34:a7:66:5c:98:eb:bf:31:b7:
60:0d:8d:e6:a0:e6:37:75:81:da:21:e2:21:c3:d2:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:38:57:93:37:ED:75:51:8A:FC:99:B3:53:FA:89:4A:54:4A:5D:25
X509v3 Authority Key Identifier:
keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bd:e1:4c:76:1e:9e:ca:80:2c:92:c1:df:d9:33:2a:61:a8:
8d:c8:77:4b:74:66:49:f7:c0:b1:2b:1f:9a:eb:c4:91:47:4d:
5f:d5:74:25:4a:ce:8e:77:e2:be:f9:4d:72:17:1f:97:10:a9:
fd:db:8f:a6:2b:27:dd:fe:b1:4e:1b:f1:1f:f3:cc:23:fd:d9:
91:85:16:8b:db:9b:26:41:f6:90:47:5a:10:53:24:11:6e:4c:
40:69:bf:72:1a:17:39:9d:53:8a:62:05:fc:a7:70:e1:e8:ae:
57:ed:98:fb:98:7e:e1:6e:17:1d:02:a0:3d:aa:21:d7:fa:7e:
25:d5:b5:38:5b:62:67:b9:db:01:44:2c:2a:ff:33:cc:26:1e:
e0:23:a7:97:36:1f:91:76:54:15:bd:a5:9c:a8:b2:3b:6e:56:
35:5e:ff:5c:c9:a2:08:d4:b5:99:27:98:39:27:0e:97:64:29:
4e:5f:19:5e:80:7a:a6:e4:60:1a:7e:2c:02:ad:a8:cf:1a:c1:
af:8f:6d:64:19:72:00:b1:cc:b2:c3:96:5e:3f:63:04:aa:ac:
3e:9e:34:a1:03:bd:2a:a3:f5:2b:51:dc:c8:b5:a3:09:95:b3:
f6:1e:76:c5:9c:5d:35:cc:94:e3:31:32:e7:19:0c:50:3a:0a:
37:ed:00:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:33 2025 by rpki-client