Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: A+jFDt9Vvv1XqAipBqEzT4j3c+6kcb5JN7R3VWkq+NM=
Subject key identifier: E9:16:60:82:EA:E5:F8:9C:4F:2E:B1:2E:A9:D8:2F:C9:E5:80:79:4D
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 0199228CE757FA298D5F91283D94A5F6F382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 06EF
Signing time: Sun 07 Sep 2025 05:01:23 +0000
Manifest this update: Sun 07 Sep 2025 05:01:23 +0000
Manifest next update: Mon 08 Sep 2025 05:01:23 +0000
Files and hashes: 1: 59hx8MiVy0L5bbCsrmz6L5yJrmQ.roa (hash: tUrCnGXwIpcsX6KWOsldh7ImOj30jilIGBTNNVRq1UU=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: qDBh6RRwDjnuMcGcIkudO6GQenrEWvDWfFdFkK/CwgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e7:57:fa:29:8d:5f:91:28:3d:94:a5:f6:f3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Sep 7 05:01:23 2025 GMT
Not After : Sep 8 05:01:23 2025 GMT
Subject: CN=e9166082eae5f89c4f2eb12ea9d82fc9e580794d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b9:55:c6:e1:84:ce:8b:9e:be:4e:05:a5:d4:
71:63:1a:44:68:0c:2e:cf:5d:18:13:b5:bc:7f:fb:
3b:5c:4d:0e:81:1b:cd:aa:e4:c5:9c:bc:17:ff:1b:
6d:53:e6:e0:8f:d7:b5:06:2e:0f:43:d8:d8:87:50:
ce:84:2b:16:28:ff:97:92:a5:c9:2c:66:cd:00:a9:
a4:85:ef:b8:5f:c8:ba:99:af:13:6d:2f:ea:4b:39:
3f:46:4c:db:ec:ad:36:13:d8:33:f3:55:78:ca:48:
05:fb:e4:fc:1d:ab:cd:88:c7:e7:7b:cc:84:37:2e:
82:5a:dd:e7:7f:e0:ef:b2:56:2f:ce:66:eb:50:4e:
76:ca:10:e5:d8:d1:09:f6:01:3a:17:cf:2c:72:08:
48:eb:81:46:44:d5:03:4c:bd:6a:7d:46:d9:62:be:
0c:8f:a3:b7:57:c0:60:51:4f:b2:35:16:11:75:f2:
9d:d4:d8:bf:f3:bb:9e:88:e4:71:e8:23:11:1a:f5:
60:1a:20:79:33:bf:03:02:6f:1e:b8:fb:76:fb:f7:
97:8e:80:85:cf:63:30:10:de:01:65:94:6f:88:58:
ad:db:ea:37:e8:c2:b3:de:8c:b9:7e:3b:fb:4c:e6:
5f:6a:0e:8c:9e:f2:a5:64:24:36:a2:56:a5:9e:9f:
a3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:16:60:82:EA:E5:F8:9C:4F:2E:B1:2E:A9:D8:2F:C9:E5:80:79:4D
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:14:a8:70:4d:86:1d:a1:b5:f7:b3:f5:55:ee:20:33:6d:b8:
c6:ad:f6:1d:f8:30:d6:90:2b:c3:7a:3d:3b:8d:66:d3:7c:35:
0d:1f:dd:a2:e4:f3:71:2c:e0:f0:7c:1b:eb:a7:5c:72:c9:71:
39:b4:bb:44:18:34:ab:18:91:aa:62:87:d2:e5:60:c6:bd:8e:
8e:9a:7c:47:0e:81:1a:45:ab:1e:e0:a0:ef:00:62:d8:e4:c1:
77:cc:f6:be:e3:71:7a:be:da:92:64:71:64:2a:f0:bb:df:9a:
49:4d:02:d9:c9:91:c0:d4:e5:21:46:ad:10:82:ca:08:1c:01:
b0:40:ab:b2:70:c2:ae:69:d1:91:07:eb:1f:6b:10:7e:e0:23:
8a:d0:51:c3:ed:bc:dc:d3:c8:1f:6c:57:4f:24:99:4c:fb:73:
c3:7d:5f:b6:48:0e:41:01:33:67:82:9c:0e:be:67:ee:57:53:
d3:a8:ce:1b:f9:a9:8f:31:f7:95:e3:37:ce:45:11:04:ab:28:
43:34:43:52:81:c3:52:ae:e8:d9:cb:b7:3a:55:4e:dc:93:c1:
96:3d:23:73:ea:12:db:b0:ec:7a:56:58:8a:1e:3b:9b:7f:a0:
ba:93:56:9f:ed:ec:f0:bc:2f:1b:19:b8:3b:47:3c:b9:23:d4:
5c:a4:52:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:43:32 2025 by rpki-client