Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
File: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft (raw, json)
Hash identifier: Zmjq+wTOc3JHPGtKprjwH3cLzQRaqrMEz+1Pb7PiJgk=
Subject key identifier: 13:86:87:32:E8:03:AD:9B:B8:7E:00:55:6E:FA:24:63:B8:16:AC:5E
Authority key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
Certificate issuer: /CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Certificate serial: 01984777A2787903716CABAA27B3B8878910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
Manifest number: 1540
Signing time: Sat 26 Jul 2025 16:01:19 +0000
Manifest this update: Sat 26 Jul 2025 16:01:19 +0000
Manifest next update: Sun 27 Jul 2025 16:01:19 +0000
Files and hashes: 1: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl (hash: PJx4Ck63lo1oTRBYGjDzFBmEt74DyxR8yscaUnpt3N8=)
2: _4Ndkg3UKi9vHxY0SVHFR9i7YHI.roa (hash: gVwQ/KDnz7z975mDXEiOOePjhBe/QBZrgXsjy6HuzNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:a2:78:79:03:71:6c:ab:aa:27:b3:b8:87:89:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Validity
Not Before: Jul 26 16:01:19 2025 GMT
Not After : Jul 27 16:01:19 2025 GMT
Subject: CN=13868732e803ad9bb87e00556efa2463b816ac5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:c8:59:e5:2c:9b:a1:3f:e4:cd:9b:63:47:
28:04:d8:0e:7a:01:d5:24:07:0a:83:82:48:60:47:
ba:14:1e:af:62:63:5b:85:cc:9c:fc:a2:2e:b7:1b:
b7:ce:67:9f:9a:c2:f3:bf:49:50:3e:34:94:88:ce:
1b:06:ce:36:35:cd:bf:11:7e:69:d0:98:b2:43:73:
a3:0d:d5:24:40:29:a2:0c:56:c8:ca:c8:ea:ea:12:
aa:b0:7d:c3:7b:41:b2:75:2c:80:91:a3:57:51:93:
30:29:78:c7:84:2f:28:00:83:d3:a7:1d:50:86:73:
0f:0c:e6:85:02:02:bc:b6:f7:3d:08:12:52:a5:88:
63:b1:80:fe:b1:95:7e:ca:e8:32:52:b3:0e:36:d2:
1c:37:3e:1f:18:79:97:40:38:5e:81:5a:0f:22:a3:
9a:52:c6:28:7a:66:b9:b7:a1:79:e1:18:af:af:a0:
72:2a:7e:31:d0:6f:df:a4:b7:9c:24:12:a4:0e:16:
a7:a5:34:19:05:43:fe:bf:cc:ca:f8:b7:fb:a6:d7:
13:54:3d:33:e2:a9:bc:1b:5d:ad:0a:7f:03:bb:5e:
41:8b:46:e9:bb:14:e1:65:7a:75:95:de:f0:c5:e5:
79:bb:5d:c5:a9:cc:53:85:f9:f4:c2:b6:4b:8f:ae:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:86:87:32:E8:03:AD:9B:B8:7E:00:55:6E:FA:24:63:B8:16:AC:5E
X509v3 Authority Key Identifier:
keyid:65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:52:15:0f:cf:46:8c:20:5e:28:23:29:dc:56:47:b5:af:72:
59:7d:32:40:30:0e:4c:82:71:b1:78:d6:ef:5d:c8:ce:71:ef:
37:d7:27:d0:14:52:b9:e1:02:56:dc:74:0e:94:9a:fe:53:a1:
4b:b7:ce:46:07:af:02:28:93:d9:6b:95:b2:2c:54:05:64:dc:
e6:8f:be:cf:85:41:54:dc:e2:1c:3e:de:07:21:b8:73:f2:fc:
7b:bf:51:f6:ac:b8:c1:9b:c6:0b:d4:84:ea:cb:ef:3d:31:8a:
46:d0:23:b9:91:50:81:dc:65:41:bf:4a:ae:af:31:74:e8:55:
34:22:bd:f1:2b:34:58:96:96:85:8e:67:c0:48:59:09:a1:37:
c8:0a:55:27:c4:2b:76:c3:75:8b:6e:00:87:fc:f3:4a:29:de:
ab:c4:cb:62:09:2e:32:c0:82:6d:55:be:74:28:a5:72:be:89:
38:92:cd:76:66:45:00:d1:53:c2:79:e4:3b:e1:59:3b:b9:52:
3e:05:41:b3:51:a3:2a:ff:c9:7d:2d:da:12:70:68:cc:ca:6e:
c4:c2:7c:1e:ae:52:05:90:4d:41:de:65:db:10:11:8c:51:37:
04:9f:33:8e:1e:8c:64:18:41:fa:7f:6e:7f:1b:a7:0a:a5:f1:
6a:56:c8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:21:21 2025 by rpki-client