Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json)
Hash identifier: 3x/8ABKLbelKXOoquHXy4Pb1DBUKLOWVlcfeXk0RchI=
Subject key identifier: 3E:9D:6B:9A:08:95:43:28:D4:4C:9E:36:87:79:54:FE:0D:31:E1:8C
Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Certificate serial: 0197692997DD9356FF79D84467B5F93E8FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
Manifest number: 0EF9
Signing time: Fri 13 Jun 2025 12:00:22 +0000
Manifest this update: Fri 13 Jun 2025 12:00:22 +0000
Manifest next update: Sat 14 Jun 2025 12:00:22 +0000
Files and hashes: 1: i-wVHRnuTYtFq7EOptpWJBt3Mdw.roa (hash: dyBwX82dFdjJwih5rdCwN8ZxNRpPJvl5rysORp718qc=)
2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: z+M1bYymeu7dQwwkXpBoBF9hirVjw0/TrvGGO8m9Moc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:97:dd:93:56:ff:79:d8:44:67:b5:f9:3e:8f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Validity
Not Before: Jun 13 12:00:22 2025 GMT
Not After : Jun 14 12:00:22 2025 GMT
Subject: CN=3e9d6b9a08954328d44c9e36877954fe0d31e18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:ee:fe:7a:2c:5b:66:5c:64:cb:45:ef:a6:
67:1c:aa:29:60:80:4c:b0:39:05:42:25:c2:78:f3:
c6:9a:a1:57:1b:ac:c6:bb:4b:60:d9:db:93:e8:21:
7e:ce:16:b3:38:da:1d:2e:a5:3d:29:5d:8f:9f:5c:
c4:ec:dc:aa:18:cf:24:86:3d:3f:2b:7b:52:13:b0:
7d:26:a9:52:2f:4a:d8:95:71:f6:45:c0:b0:1b:52:
b3:f3:cd:75:e7:7e:94:5b:be:3c:cc:dd:06:17:14:
9c:5c:ff:29:92:3e:c0:6a:a5:50:e4:df:9b:9d:cd:
77:92:aa:72:64:92:39:26:de:b7:7e:56:40:0d:d4:
dc:09:dd:ca:45:cd:7b:65:52:cd:fe:99:c7:47:7d:
d3:d4:1d:3e:94:12:14:06:1e:f2:49:83:f0:13:28:
11:ad:0b:a9:c8:58:ed:75:31:a0:ab:53:67:bb:e8:
fc:b9:c9:71:a9:1d:00:a2:96:12:1b:c9:fa:df:dc:
3f:b0:05:ec:4b:a8:cf:ec:7a:16:c6:c8:2f:5c:0c:
37:cf:e5:7b:0e:04:dd:82:f3:19:4f:3f:65:e9:e8:
24:dc:a3:29:2c:1b:13:8b:03:be:3a:9e:1e:dd:75:
4e:66:60:b3:6b:1b:3c:0e:ab:7d:d3:8e:3f:ae:09:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9D:6B:9A:08:95:43:28:D4:4C:9E:36:87:79:54:FE:0D:31:E1:8C
X509v3 Authority Key Identifier:
keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:13:c7:55:de:7d:b3:23:97:70:89:1c:9e:18:43:c3:15:a2:
82:29:a3:4a:95:eb:b7:a4:cb:ba:47:52:f0:a7:e8:d2:0a:e0:
44:c6:54:b4:31:13:7b:df:a6:17:cd:8d:4a:4f:81:35:0b:67:
be:45:ac:b1:36:46:d1:09:bd:7f:1f:85:c2:3c:27:76:bc:0b:
6b:77:a6:6a:9d:7d:a5:52:53:92:ce:51:50:bc:28:71:18:e9:
41:1b:9a:9b:29:c7:cb:f5:f2:d9:d4:0f:10:53:7c:9a:53:c6:
e3:0b:c4:84:f1:67:cb:2a:7b:8c:5c:65:10:b4:6c:7e:c5:8e:
d3:a1:32:b1:a7:be:c6:3b:e0:0c:88:a1:a6:1d:14:23:91:e5:
e3:d5:5b:b3:a2:ab:bd:40:29:3a:a3:5c:1f:29:02:a2:1f:e6:
23:8e:47:77:b0:55:6f:5f:84:3c:f1:03:e1:d9:8c:0f:51:f6:
73:13:78:23:d7:36:83:97:47:86:81:4a:05:78:2f:95:e4:6b:
e3:ab:9b:b7:4d:58:40:a9:2b:aa:d6:72:8e:e5:c8:33:fa:ee:
83:33:fa:67:8b:f9:6c:24:7b:5d:39:ad:78:9e:43:1c:79:2b:
f4:d3:fa:dd:48:cb:9d:1a:9c:ec:f9:a4:90:8f:27:fa:c0:57:
37:c3:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:49:13 2025 by rpki-client