
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
File: ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json)
Hash identifier: i3u6Ti5YMGeen55GT2bS8eK5eRNXIinY0IO7EIYnKro=
Subject key identifier: 23:80:7C:D9:78:D5:9C:C5:E1:8E:04:C1:30:5F:10:40:81:28:1C:45
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial: 019849664B85C13F0CD028FC6F63BFF3C7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
Manifest number: 0B54
Signing time: Sun 27 Jul 2025 01:01:37 +0000
Manifest this update: Sun 27 Jul 2025 01:01:37 +0000
Manifest next update: Mon 28 Jul 2025 01:01:37 +0000
Files and hashes: 1: LsPOYMRIkwCviikK1SggYlQsE6c.roa (hash: C4ntpCFi4UgQNTh+MTX375uysoH85gdlFAEV6hZ2Gtw=)
2: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: dDTeSjCXJ+5gPsk+9Lx1OpZDWfDhrRYYAu7wA3QYuwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:4b:85:c1:3f:0c:d0:28:fc:6f:63:bf:f3:c7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Validity
Not Before: Jul 27 01:01:37 2025 GMT
Not After : Jul 28 01:01:37 2025 GMT
Subject: CN=23807cd978d59cc5e18e04c1305f104081281c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:fb:33:12:74:37:95:4b:ce:c4:14:c4:67:
bb:4a:79:6a:54:cc:b9:59:d2:36:20:ac:bd:6e:9d:
8a:7b:93:ce:f4:3f:10:1c:54:44:fe:ea:69:8b:17:
48:1e:e1:a5:ac:14:16:db:28:86:65:cc:e0:e7:40:
ce:36:fa:99:bf:7c:ae:d9:df:f4:70:36:2c:0e:72:
e7:6a:c1:a1:01:06:fa:0a:14:89:64:fc:b2:fc:91:
2e:f8:4a:02:be:be:b5:6b:0d:bf:54:4a:7c:da:52:
b2:9f:70:6e:e3:14:34:0b:24:e6:d0:65:e7:83:49:
64:b0:c6:5f:4e:e8:09:d0:42:47:e9:1f:77:ca:b8:
71:31:38:45:c3:cb:f6:05:ba:87:c4:7f:f9:63:97:
d3:c1:da:74:63:39:8f:89:89:37:d0:bf:b3:92:b2:
90:28:d9:51:9d:2e:e4:7c:36:8f:bb:82:94:d5:ee:
fa:8c:5b:2d:61:82:1b:4b:25:0e:ce:a7:20:ed:5d:
55:23:97:1d:95:c5:4b:72:40:3b:52:82:87:a9:c6:
cf:50:1a:2f:c5:c0:71:77:7f:fe:b3:dc:f7:b4:a3:
ef:9d:ce:42:5d:22:2c:d0:9f:83:e5:24:44:80:a9:
ae:33:32:ff:01:aa:ea:ee:2c:03:8c:f6:87:2d:27:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:80:7C:D9:78:D5:9C:C5:E1:8E:04:C1:30:5F:10:40:81:28:1C:45
X509v3 Authority Key Identifier:
keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:87:83:86:55:35:4b:ae:82:1e:52:30:ec:62:7c:5b:6f:3a:
99:bd:b3:b8:c0:ec:f6:8e:38:50:3b:e5:94:dc:50:5c:f7:fb:
0c:ba:8f:a5:4f:b9:c3:75:aa:21:25:35:c3:28:e9:05:6e:81:
7b:07:bc:8f:67:10:96:b3:7d:62:ee:e8:f3:f9:e5:a4:9d:a5:
de:97:ee:d2:f2:7a:ab:ea:0c:80:3a:9e:fe:8f:50:30:5e:18:
72:3c:90:af:39:3c:24:4d:2f:ec:92:ef:08:cb:dd:d6:3b:d5:
d3:a7:a7:e3:96:fa:4e:f7:ec:84:b8:54:7a:9d:f9:21:25:9e:
46:f3:42:68:9b:c3:d7:dd:77:b2:ee:fb:3e:53:dc:77:12:15:
b0:c1:65:bd:b4:c2:d6:fd:fe:7e:69:cc:d0:15:3c:3f:51:40:
9c:e2:2a:1d:d7:97:53:84:aa:1f:d2:2b:f5:da:9b:fb:42:cd:
ce:86:93:96:e9:78:ba:8e:0f:30:80:9d:56:07:6e:1f:1e:e1:
36:e7:2f:a1:db:18:ac:a0:e3:0f:fb:28:9c:37:76:89:5d:94:
9f:7b:76:0d:4a:34:b8:3d:c6:d5:4f:b5:56:0f:ac:8f:eb:35:
27:8e:c6:d7:d9:75:f9:7d:57:7c:35:7d:b9:2a:a3:e2:f5:2c:
65:0b:cf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:38:48 2025 by rpki-client