Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier: LeYyFij3THihYsT3TZ+5F9agkvwn/1lcZkn7JuAiRlY=
Subject key identifier: 98:77:B9:31:A2:F6:0B:C9:A5:EE:6E:78:E2:EF:8E:01:72:F7:CC:45
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial: 01974B8D49E884E4DF9D8312CABB4B1872C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number: 0365
Signing time: Sat 07 Jun 2025 18:00:39 +0000
Manifest this update: Sat 07 Jun 2025 18:00:39 +0000
Manifest next update: Sun 08 Jun 2025 18:00:39 +0000
Files and hashes: 1: TbjsUDhMP9oiyRFzkMf_XEJ0_gs.roa (hash: N0QojbQjnjXATXQxNe2ZVC9V9rik44C7TlWbUv97jVE=)
2: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: 3P+uugufXnyut53M+7iDMpDsD+ONVNUfkgiFpSY/rpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:49:e8:84:e4:df:9d:83:12:ca:bb:4b:18:72:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Validity
Not Before: Jun 7 18:00:39 2025 GMT
Not After : Jun 8 18:00:39 2025 GMT
Subject: CN=9877b931a2f60bc9a5ee6e78e2ef8e0172f7cc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2a:46:ab:10:a0:8e:c0:0e:4d:78:3e:69:80:
7e:f7:c8:10:6a:ff:e1:96:b7:57:5d:b6:04:ba:34:
4b:42:aa:2e:42:74:e0:6a:f3:11:11:5b:18:c7:fc:
be:04:75:5e:6d:b5:c3:22:de:88:e2:26:81:e8:ed:
d9:27:76:ed:1c:9f:ac:44:c9:cd:7c:cc:fe:c0:94:
64:ed:14:e0:64:76:fb:58:ae:b8:72:9c:43:31:f9:
28:6c:2a:c8:9c:98:b9:52:01:1e:39:b9:e0:57:83:
4b:2d:2e:22:7a:2a:02:23:ad:0b:49:c3:6b:0d:4c:
d5:e5:94:8b:3b:69:ba:1c:ac:ba:39:48:74:e6:9c:
61:82:0d:92:5e:50:40:47:ad:6a:2a:de:fe:31:c3:
42:6f:be:ee:7a:6d:a2:eb:6f:d2:46:6c:10:56:80:
7f:82:7b:e9:fd:10:66:e4:02:51:15:c2:3d:2c:f8:
d2:01:88:bd:d0:60:40:53:7a:a2:7d:8c:58:fc:e1:
08:ec:30:ba:e6:1a:55:a8:5c:30:f2:81:67:7e:09:
cb:62:b9:e3:e9:f8:34:d7:29:0b:1f:7d:4f:70:5e:
c8:4f:8c:74:38:90:3d:26:ed:be:d4:34:32:d8:1d:
a2:d8:31:04:ba:e7:b9:9a:25:b4:59:2a:e6:e7:61:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:77:B9:31:A2:F6:0B:C9:A5:EE:6E:78:E2:EF:8E:01:72:F7:CC:45
X509v3 Authority Key Identifier:
keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a4:3f:a8:99:4f:36:6d:b2:17:74:f4:a8:06:5a:1e:d8:6e:
82:63:63:12:81:13:af:a8:71:f0:50:6f:1e:41:71:3f:de:cc:
73:3b:ce:82:15:d2:18:b2:02:ef:09:c5:d0:7f:e6:63:07:b4:
a0:c5:b1:28:c8:e2:68:6a:d7:af:60:d3:20:02:50:20:7d:1f:
68:2b:fd:f7:5e:15:b1:aa:eb:e7:1d:a6:1b:ff:64:f1:b7:94:
c9:bc:36:4e:53:e4:34:30:ac:86:de:84:06:77:0e:6e:a1:b3:
54:8a:25:d5:e5:6e:fb:89:9d:74:63:88:b5:fd:4c:34:7b:e6:
6c:4c:10:98:75:04:6f:c7:11:c8:83:c5:a0:1f:ec:4f:cf:3c:
da:99:b5:14:55:bb:13:48:57:65:73:44:4f:a5:1e:30:5d:cf:
c3:35:26:12:53:db:5c:0f:00:bb:87:e0:fe:5b:19:81:b0:15:
1a:cc:a9:ef:25:77:4f:d8:c4:a8:08:9c:f9:85:73:5e:9a:3d:
8e:05:d5:e3:93:ec:9f:c0:83:c0:e4:23:f2:4a:58:11:67:82:
58:ee:aa:3c:0a:31:d5:8c:da:3c:d8:6b:c9:ce:f5:e4:b5:6f:
63:8e:55:ca:93:cb:6c:2e:6b:73:8c:10:ce:c9:b9:d3:92:72:
ab:e8:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:06:55 2025 by rpki-client