Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: 9GKZBvw3vAe1xExghDeci9I69LptT8xqlV2OV5ls7a8=
Subject key identifier: 04:14:48:14:3C:DC:BC:1A:8B:BF:6D:8F:06:52:AF:EB:4E:CF:ED:A4
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 01985CB6BF1EEADC70A9E1689C4D98F30E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 159D
Signing time: Wed 30 Jul 2025 19:02:16 +0000
Manifest this update: Wed 30 Jul 2025 19:02:16 +0000
Manifest next update: Thu 31 Jul 2025 19:02:16 +0000
Files and hashes: 1: 4Oh7XZMGUvgYsZH7CZdGUoLIrDw.roa (hash: h4FhAkel555dNYUyqzqCdfQBJmgL5LydnG571p+4BQM=)
2: NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa (hash: EZzv8aq1wUrfRrM9fo8iLug2Yq9YGVoqZENURQoeQj4=)
3: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: axpaVVJcVyYJg6h9IOWi1rPW14GQTx6IvZV6eDwD28M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:b6:bf:1e:ea:dc:70:a9:e1:68:9c:4d:98:f3:0e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Jul 30 19:02:16 2025 GMT
Not After : Jul 31 19:02:16 2025 GMT
Subject: CN=041448143cdcbc1a8bbf6d8f0652afeb4ecfeda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:dd:bf:10:9a:6e:40:ba:b2:f9:33:77:1f:
10:ba:95:e1:e8:a7:6b:99:b3:15:81:b0:e1:dd:d9:
c1:5f:0e:2d:b9:cb:0a:b8:42:82:04:73:8e:2f:21:
1c:6c:01:20:51:5d:d5:67:54:36:66:e8:43:c6:97:
7f:02:b5:9d:71:5b:60:c3:48:71:a9:bf:e2:59:96:
8c:80:04:f2:2e:4e:2d:6b:0c:bd:46:91:5a:ca:2e:
d5:e3:a0:c3:15:35:2c:72:7d:0e:a6:fc:55:a3:88:
d1:77:f9:e5:c0:33:52:e9:e5:1e:a8:b7:18:6a:39:
30:98:e0:1f:dc:9a:c1:e9:c9:9a:df:20:0e:50:d1:
a8:51:ee:04:c1:99:a0:dd:25:0e:23:a0:ef:52:e1:
b1:7d:9d:97:98:69:f2:a5:69:a1:d7:e8:4a:4a:e3:
0b:18:cb:d6:55:26:60:a2:90:3c:a4:17:aa:52:13:
79:94:88:f1:ee:a5:52:18:64:1c:24:04:d4:18:36:
3c:d7:a1:08:24:8b:43:41:0f:eb:74:a5:60:ed:1c:
8a:60:5e:73:55:06:8a:01:5a:34:b2:4a:95:6e:c1:
5c:10:3a:e3:f1:01:d4:d2:11:29:d0:50:28:77:e9:
b0:15:60:19:5d:bb:54:7d:21:3c:9d:2f:4e:49:90:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:14:48:14:3C:DC:BC:1A:8B:BF:6D:8F:06:52:AF:EB:4E:CF:ED:A4
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:e7:7f:8f:53:b0:9e:2f:42:2f:d1:c8:02:4d:4b:57:58:b0:
04:3e:73:0b:cb:a3:9b:a5:9b:a3:52:07:c2:20:f9:2f:54:ee:
96:dd:4e:21:dc:5b:05:de:d6:35:89:14:35:3f:bf:eb:5d:36:
ed:bd:06:94:5c:c7:16:37:c5:07:e6:c1:3d:57:e2:06:9e:22:
bd:01:77:2a:36:78:29:0d:3d:38:00:14:bf:f1:a8:aa:73:2b:
0d:82:51:53:00:86:a5:42:4e:ef:65:3f:fb:4c:80:d8:20:4f:
d2:d2:af:29:44:2e:9d:12:c6:60:06:0c:20:7d:6a:8a:10:63:
0d:3e:be:10:9e:8a:0e:32:73:d6:50:90:ce:23:b8:c5:cb:3a:
6d:d8:1b:ff:80:9b:fb:b5:17:38:a0:32:bc:75:2a:c8:e6:de:
11:e1:45:12:b7:2b:c1:40:54:c8:41:22:8c:ee:52:7e:bf:59:
ce:15:1b:9e:7c:be:2d:c3:bd:10:a3:18:5e:fa:69:16:d9:b2:
f1:e2:92:68:07:18:21:97:75:1e:03:51:11:98:ae:ba:e7:81:
9c:19:cf:ce:78:e0:f8:ba:de:14:29:19:e6:50:59:d7:a8:e9:
be:8a:27:e0:96:40:2f:29:c9:97:ef:83:af:b1:29:b5:cb:2b:
f6:7a:dd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 22:09:01 2025 by rpki-client