Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
File: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft (raw, json)
Hash identifier: Ld5aQ5MsVuWHBWcoKAdKb7z+UV7DG8hqMODSXHIyOx4=
Subject key identifier: 0F:C9:C5:7D:8F:95:49:E3:E2:8B:E1:D9:A8:DD:40:50:9A:9E:B9:4F
Authority key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
Certificate issuer: /CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Certificate serial: 01984965F6D55DC89BDAF80A75483206B5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
Manifest number: 1142
Signing time: Sun 27 Jul 2025 01:01:15 +0000
Manifest this update: Sun 27 Jul 2025 01:01:15 +0000
Manifest next update: Mon 28 Jul 2025 01:01:15 +0000
Files and hashes: 1: 1DNJXUdN9aHYwhJ0OLj39VSopnQ.roa (hash: QBTrHThXdQY8h/nmwy8ckGzuWyt8cYLb33EN8JyG6aE=)
2: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl (hash: CexhQabQnk9FPfqi1TBeQb3VgNEU8vmZPiynVNoHiRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:f6:d5:5d:c8:9b:da:f8:0a:75:48:32:06:b5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Validity
Not Before: Jul 27 01:01:15 2025 GMT
Not After : Jul 28 01:01:15 2025 GMT
Subject: CN=0fc9c57d8f9549e3e28be1d9a8dd40509a9eb94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:dc:d2:c0:bc:a0:df:e7:9b:a5:98:c0:27:
fb:83:0b:26:bb:2e:11:e1:2b:49:a7:78:c3:26:a1:
59:71:8b:62:9c:12:31:dd:2a:f6:97:d4:bb:77:74:
84:42:ba:dd:b3:75:4d:85:95:b8:a7:1c:17:50:94:
48:a7:34:20:97:6a:a7:24:64:68:f0:e0:0f:39:b5:
08:b1:24:6e:6a:8e:71:13:ca:c5:3c:b5:87:c5:cf:
c8:33:76:db:a4:5b:f2:3f:f0:f4:bf:a2:5b:29:42:
70:b7:1e:23:95:56:b4:4c:75:81:f9:a9:31:de:94:
86:38:d9:cf:5e:e1:e3:a1:33:25:ed:d5:b8:6a:10:
70:f2:09:6b:57:96:59:97:d5:5d:c1:9e:d7:39:79:
d9:4e:0f:9b:a6:32:e8:4b:f3:cd:83:a4:94:9a:63:
10:13:be:9c:f7:ca:3c:28:60:39:61:05:1e:28:d8:
9d:fa:08:55:86:3f:26:64:86:92:bd:7c:d1:76:df:
b4:e2:49:da:bb:28:56:35:79:19:7f:bf:b7:d1:03:
eb:6b:01:ce:fe:f1:3a:95:09:a5:1b:9d:9c:9e:44:
c0:34:aa:80:4d:c8:76:4b:a3:ee:65:70:30:17:97:
57:ae:38:57:e3:7a:ff:54:27:b3:c8:af:31:19:5e:
bd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C9:C5:7D:8F:95:49:E3:E2:8B:E1:D9:A8:DD:40:50:9A:9E:B9:4F
X509v3 Authority Key Identifier:
keyid:65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:50:56:f8:6a:54:6a:15:87:fb:bd:b1:34:f4:01:86:e8:cb:
83:23:8b:ae:37:08:91:b4:bb:55:5f:c7:10:aa:a1:42:92:da:
89:c9:a6:d1:c2:fb:38:94:8f:df:9a:b7:9e:63:c5:29:4a:c2:
d4:ef:50:92:a8:92:b4:c0:67:69:d5:bc:0c:f1:04:7a:f6:03:
a3:ec:41:d4:ce:79:81:f3:45:c3:6d:af:26:e3:df:b3:ca:a9:
e2:bf:34:e0:b1:1f:6d:96:61:a4:d2:0a:cf:89:9a:b2:b6:c7:
2c:22:35:88:91:62:98:30:bd:8e:e6:fd:80:99:a6:4b:e3:20:
fd:11:f6:97:58:a6:fb:3b:99:b6:28:77:3b:02:93:88:87:97:
a7:56:d9:7f:eb:57:43:87:f2:1e:e1:aa:85:c7:b4:1b:28:d7:
ca:35:70:f9:ae:3a:8d:09:91:82:8f:d0:6a:51:92:2e:e9:14:
5f:46:0a:3a:2a:77:6c:1c:8b:7c:2d:72:f9:f4:02:bb:19:20:
b8:a6:ed:04:e8:11:6f:23:d9:e9:e4:36:aa:1b:d7:3d:9b:84:
21:15:ac:6e:d4:d5:03:cf:85:73:a6:1f:fa:fe:8d:8b:7f:18:
a5:e5:30:ad:75:fd:c8:40:cc:93:bf:83:a9:05:63:0a:ef:5e:
3c:c1:3b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:07:43 2025 by rpki-client