Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
File: ZdqE27TGoS08m44ht3MEVooD21A.mft (raw, json)
Hash identifier: UzHfJGcAFG7BBubmP+UNlWfun+3ESIfasFJ+KWpmEfQ=
Subject key identifier: 31:2E:AF:BF:A9:91:24:93:B2:03:E8:66:18:4C:47:D0:9E:77:F1:5B
Authority key identifier: 65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
Certificate issuer: /CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Certificate serial: 01974E574CEC66CDE5ECDCDDA7EC76BD9DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
Manifest number: 1584
Signing time: Sun 08 Jun 2025 07:00:33 +0000
Manifest this update: Sun 08 Jun 2025 07:00:33 +0000
Manifest next update: Mon 09 Jun 2025 07:00:33 +0000
Files and hashes: 1: ZdqE27TGoS08m44ht3MEVooD21A.crl (hash: pS1N3T3+BZ9H6WCyIF51NRSsqDk0hmg+YcnYmkbcN9M=)
2: _rRQdKAM7uxfZ2rXreMkfx0DeSU.roa (hash: 1S9r9dgtBtjJtT3hRQaeliv6L2sNDV6BEV+j0Jy6Qn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:4c:ec:66:cd:e5:ec:dc:dd:a7:ec:76:bd:9d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Validity
Not Before: Jun 8 07:00:33 2025 GMT
Not After : Jun 9 07:00:33 2025 GMT
Subject: CN=312eafbfa9912493b203e866184c47d09e77f15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:d8:2b:ab:7e:93:da:9b:bf:3c:0b:ca:f6:
a2:b5:49:96:bf:45:37:09:54:33:40:24:4d:e3:a4:
cf:05:24:27:96:bc:f5:5e:d2:99:18:43:59:ab:18:
aa:de:37:58:cc:b6:6c:ca:6f:90:c8:82:e3:7c:fa:
fa:fe:4e:97:93:e0:e1:ff:f1:4b:4b:c4:06:5c:70:
c4:22:c7:4d:e8:90:09:83:ea:4e:74:d6:2b:dc:51:
24:14:ca:66:4c:4e:3b:d1:26:74:ff:05:33:8f:2d:
92:be:d7:18:3f:c6:41:f6:f5:9d:82:6d:8f:62:79:
2b:d2:32:88:25:82:c0:c5:15:9d:72:da:68:ab:d5:
0e:2b:c1:52:36:40:43:ad:9f:11:b3:34:e4:e3:cd:
32:d7:1f:1f:c4:df:64:d9:b0:5f:18:69:5a:5f:d0:
e1:34:cf:f5:09:35:84:90:28:51:59:ff:46:24:3d:
f0:ee:95:6e:5f:da:e0:a5:0a:71:8b:a8:ce:ef:ab:
cf:90:b6:7e:31:4c:e3:e9:10:f1:4e:1b:4a:05:14:
a5:5d:8d:6e:1f:ca:4a:28:05:7c:de:84:4c:72:77:
64:f0:6f:df:ff:83:87:dc:9e:f1:e6:3c:7e:9e:bd:
5f:ed:f7:c9:e4:cc:63:9a:ab:77:55:b4:79:9a:66:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2E:AF:BF:A9:91:24:93:B2:03:E8:66:18:4C:47:D0:9E:77:F1:5B
X509v3 Authority Key Identifier:
keyid:65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a0:de:ff:0d:38:38:44:c6:34:5d:14:7b:90:a6:22:6d:20:
96:b7:db:87:9d:48:d0:00:9e:8a:99:e7:d3:6e:9b:01:66:f1:
38:4e:48:75:a8:2b:8f:0a:4c:06:f2:9d:f9:62:d0:56:80:fc:
b6:28:a7:f7:51:aa:4f:cf:ca:fa:97:7f:e0:42:fc:25:77:fb:
ca:d6:d7:01:ad:76:f7:de:dc:2c:e4:70:d8:8a:8b:b5:a7:42:
04:b0:50:30:02:d3:f5:fd:77:47:91:53:a2:e2:cc:4d:65:a5:
e0:41:46:c2:1c:ba:49:1d:ee:e6:c4:7f:e8:a2:78:2a:52:e2:
7c:c0:75:1e:eb:61:a3:7b:fe:1a:21:59:56:dc:03:4d:e0:63:
0b:c2:01:8c:3b:01:6e:bc:a0:d8:9f:6b:84:70:f2:cb:d1:87:
9e:aa:4e:2b:15:c3:14:57:e7:05:d0:0e:e8:a0:a9:6c:63:4d:
7d:7f:8d:14:8c:7c:f8:e6:20:59:8d:a4:ff:0d:77:53:bc:17:
86:38:b4:c2:94:a2:d7:a0:d3:37:24:61:fa:9d:f0:83:03:13:
d4:60:bb:3d:ca:d7:42:3d:b5:dd:c3:03:6d:ef:d6:5e:69:62:
6f:2e:46:07:03:f9:59:33:1f:ae:c8:62:9c:9e:8a:f7:cb:84:
7f:80:31:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:00:53 2025 by rpki-client