Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: U6tgGLtG4gC6JjMV4VGOWT9t2ctJ1T3IBNjCRzeHchU=
Subject key identifier: 79:3D:CE:CC:66:03:7A:AA:37:96:4C:4D:D9:FB:5F:E2:1A:A2:4B:53
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 01974F332C6049F43CA984E14D92C6824881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 05FD
Signing time: Sun 08 Jun 2025 11:00:43 +0000
Manifest this update: Sun 08 Jun 2025 11:00:43 +0000
Manifest next update: Mon 09 Jun 2025 11:00:43 +0000
Files and hashes: 1: 59hx8MiVy0L5bbCsrmz6L5yJrmQ.roa (hash: tUrCnGXwIpcsX6KWOsldh7ImOj30jilIGBTNNVRq1UU=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: T5fKChGVM4JxJRd+TSGNs4iWzyZSlEiz29+glWw7aIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:2c:60:49:f4:3c:a9:84:e1:4d:92:c6:82:48:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Jun 8 11:00:43 2025 GMT
Not After : Jun 9 11:00:43 2025 GMT
Subject: CN=793dcecc66037aaa37964c4dd9fb5fe21aa24b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:64:13:b8:17:30:ed:48:4f:ae:a8:36:10:
d4:7a:bc:32:e2:c4:6b:66:c4:83:a4:fa:0f:e8:36:
75:15:7f:2a:bc:61:7a:02:f4:d9:bd:31:16:d6:1a:
d1:7d:f4:64:0f:48:ca:c3:32:ab:f7:04:6e:51:ce:
04:af:ea:03:a9:54:3b:70:35:95:cd:5a:c8:11:86:
52:02:2a:5d:d7:62:2d:00:f5:8c:92:ec:ab:1a:d8:
28:6c:ca:dd:11:dd:d9:5b:65:f5:6c:e7:6d:4c:c2:
33:ba:3a:25:29:e9:d5:aa:e0:57:7d:df:32:e5:7c:
b0:c3:73:62:fc:27:ff:b9:88:c5:bf:e8:b1:8e:99:
e6:59:35:ff:8b:d1:88:ff:db:3e:fc:72:cd:41:81:
14:91:f7:14:36:70:db:fa:f4:06:55:ed:e8:f5:8d:
52:14:8f:6a:74:9c:7d:3b:e0:58:a1:7a:ac:a4:43:
2e:28:1b:c0:06:e4:ff:0d:a9:ab:51:37:f2:a0:40:
cd:1f:f2:e6:87:bd:dd:87:2f:4c:e1:e4:19:4b:23:
4a:48:ee:02:6f:51:81:ce:99:71:de:d2:81:86:a0:
d1:b0:9c:dc:f1:43:c2:44:91:18:50:19:78:30:4c:
92:45:ea:ad:71:5e:8b:c2:2a:f9:88:71:9d:fa:99:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3D:CE:CC:66:03:7A:AA:37:96:4C:4D:D9:FB:5F:E2:1A:A2:4B:53
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d4:45:c4:cf:9a:be:55:e2:69:24:27:c7:22:e4:b3:76:a8:
d4:ed:33:b9:37:8f:b5:7a:28:e6:64:db:03:45:8e:67:b7:03:
5a:41:e9:2f:c3:e8:cb:60:8c:a4:91:93:18:ac:33:aa:fe:8d:
b1:6a:2e:04:ad:d8:92:3e:52:14:69:6d:a6:d6:14:d2:a5:3d:
9b:d5:65:c8:fd:ef:39:cd:23:49:e0:b2:ea:4a:14:89:f0:c5:
08:cc:55:be:4c:f0:7a:dd:d0:a1:a7:3e:54:b6:40:04:78:a8:
77:32:6f:df:d6:ba:6d:0c:2d:d2:d1:79:f6:6a:69:fc:d3:cd:
f8:28:bc:f8:11:8e:90:01:21:7d:02:f1:3c:96:e9:5a:94:a3:
11:e9:91:f1:60:99:a7:a6:c6:83:31:0e:e1:5b:85:53:65:d4:
6f:9d:92:f9:df:92:f6:c4:4a:9a:da:61:b1:55:0a:75:9c:be:
aa:a6:9c:f4:5e:04:3a:55:79:ee:3b:f4:85:51:56:8c:d9:d5:
5c:6f:7c:6a:e8:41:43:c0:f1:75:05:54:b7:a6:ca:05:8b:3b:
24:3f:47:42:4a:ea:4d:67:f0:4d:34:a0:72:30:32:32:38:d6:
39:f2:4d:28:34:3e:73:cf:9f:e1:f1:7e:76:b6:b8:25:41:15:
6a:73:9c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:54:38 2025 by rpki-client