Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier: gaY//tKBV/xEyKLBl/XbI8AKvqNkVPHqB/I48+3LRE8=
Subject key identifier: C2:F6:D3:9B:79:9C:76:A3:43:98:31:1F:FA:7B:BB:68:7A:79:82:D9
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer: /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial: 0198496534035A2462CB36EBF2153165BC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number: 12BB
Signing time: Sun 27 Jul 2025 01:00:25 +0000
Manifest this update: Sun 27 Jul 2025 01:00:25 +0000
Manifest next update: Mon 28 Jul 2025 01:00:25 +0000
Files and hashes: 1: TnfRZZa2DEP319r9F-J1M2uX-bg.roa (hash: 96MJ1Ftk1CjXiFA2P/QFgrE4MRV/eyv9dtWF5pRgqI0=)
2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: tUacs1daHMs6sIX1Q1fhZIaMAxHN4Wu1VA9Y2QrdHyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:34:03:5a:24:62:cb:36:eb:f2:15:31:65:bc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Validity
Not Before: Jul 27 01:00:25 2025 GMT
Not After : Jul 28 01:00:25 2025 GMT
Subject: CN=c2f6d39b799c76a34398311ffa7bbb687a7982d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:f5:a9:1c:49:b3:d5:a6:b8:a9:1a:e5:f9:
12:60:a0:89:c9:76:af:f4:90:d4:f5:e3:eb:a1:e1:
89:98:d1:cb:29:52:36:fc:f5:e8:9b:15:a5:c9:4b:
e0:ce:48:c0:06:66:00:3f:08:e6:95:29:e1:2f:df:
ca:13:98:c3:8f:68:c1:c6:47:8b:6e:92:b8:49:b0:
13:e3:01:9a:19:ca:fb:83:01:21:88:09:45:8d:d5:
2a:27:3a:79:d6:c9:f7:83:8e:5c:1e:ac:f1:fc:9e:
b6:36:03:fc:1b:88:35:c6:c6:9a:51:66:c5:a6:c3:
52:18:9a:ac:0b:33:0f:da:9b:f7:94:d8:c3:ae:b9:
1f:40:0c:01:9f:b4:2c:3c:d2:ff:09:53:f6:05:03:
d1:13:28:e8:42:da:82:33:36:3c:a1:a3:46:c9:77:
81:ed:11:ed:f0:47:33:30:1c:a0:57:cd:35:fa:02:
ad:fa:35:3f:7e:ab:e9:81:ce:3a:43:a8:06:f0:16:
c5:d6:0c:5f:b4:6c:23:5c:ff:65:81:22:d5:a1:e5:
50:79:c5:24:d3:39:49:2f:e1:bc:b8:92:9f:f3:3d:
04:34:b3:f1:04:34:17:44:87:d9:6c:c5:f9:1e:72:
d2:d4:a2:2b:d7:be:a1:b1:2c:b4:7b:eb:4d:f5:67:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F6:D3:9B:79:9C:76:A3:43:98:31:1F:FA:7B:BB:68:7A:79:82:D9
X509v3 Authority Key Identifier:
keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:68:60:cf:cd:07:6c:4b:67:3f:13:c2:d4:01:c6:95:a9:01:
62:53:0c:d7:e7:ed:71:6c:05:dc:92:49:27:81:ed:15:e0:2a:
e8:30:d7:34:ae:d4:db:f2:4a:c7:a5:91:f9:1b:0d:f2:76:a8:
f9:7a:f1:40:a1:ef:b9:7a:f9:5d:71:8c:0e:40:4b:72:62:71:
31:08:34:30:fc:f5:c3:2b:94:cc:ca:35:65:db:10:10:ab:80:
31:a1:29:8d:1f:65:95:28:7f:08:55:f3:2b:b8:47:55:76:a8:
78:56:ec:94:e8:36:ef:c7:cb:11:84:4b:11:30:91:6e:86:7b:
b1:5c:e5:47:71:d9:8c:1f:ae:3d:69:d4:41:c9:79:0d:00:42:
86:d2:35:cb:06:9f:11:a0:f2:0b:d7:c0:bc:f1:c9:f3:7c:5b:
f4:17:41:6a:d1:85:76:af:15:5f:fe:d5:23:2a:de:6d:e5:e1:
80:d1:ff:f8:55:da:70:12:49:69:2f:ce:23:93:80:ea:04:ee:
67:6a:e0:86:86:18:9c:a2:df:35:d0:9f:ed:d5:2a:e7:3a:1b:
b5:05:5e:45:42:62:50:b6:8f:f4:1a:70:4e:ed:43:17:e5:50:
9b:55:7a:db:c3:3d:84:04:29:57:c6:df:e6:20:1f:51:3b:f8:
3b:62:d4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:17 2025 by rpki-client