Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier: hqZ3OcHQ1bwDFU0POoks5l/GNuLF/SkjlCOgirolpQM=
Subject key identifier: D7:1A:15:8D:CE:06:00:BC:B8:1A:EE:B9:01:A9:C4:89:A3:2D:89:B9
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer: /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial: 019748C30853714ECF0A3C8204A6F4D4EBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 05:00:30 +0000
Manifest this update: Sat 07 Jun 2025 05:00:30 +0000
Manifest next update: Sun 08 Jun 2025 05:00:30 +0000
Files and hashes: 1: CHPWlUWLkhhN8KqcQvdgSIi7nSQ.roa (hash: oTR4o/Lu/P2pP/jqKMJRfshRV5ap+zULnMucNhK6ij0=)
2: D4kPuzxI99LO9za1uzpIOKYzyZk.roa (hash: c+Ehw1XN1UBVbiuLbeIY9bu5RDnn9bT1POuqZJ3ek+g=)
3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: fAQ6NyDTrqdAowTERCtGqKTpidv6Ok4Qeyr+QdlepIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:08:53:71:4e:cf:0a:3c:82:04:a6:f4:d4:eb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Validity
Not Before: Jun 7 05:00:30 2025 GMT
Not After : Jun 8 05:00:30 2025 GMT
Subject: CN=d71a158dce0600bcb81aeeb901a9c489a32d89b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e7:51:db:fb:71:3a:f0:60:1e:46:87:8b:e7:
c5:85:b1:e9:d6:f4:eb:0d:94:12:c8:bc:e2:c8:99:
0d:2c:9d:51:d4:87:d8:5d:f4:13:ea:13:de:2a:50:
8d:e4:5d:3a:53:73:67:bf:84:45:03:d3:c7:81:43:
71:5d:c8:43:9e:d1:21:ee:bf:a6:af:4a:96:b0:65:
b7:67:f4:58:a0:c2:9a:67:6d:e3:22:0e:33:f1:b9:
76:ce:2b:86:d0:b5:54:7d:02:15:56:47:4a:1a:51:
4e:66:9c:b8:79:52:d7:ca:ab:98:36:44:01:1e:54:
81:62:e0:b7:db:b6:19:4f:f6:d4:9c:ff:6e:f0:2f:
e5:60:f4:a5:4c:0c:11:37:6d:a3:91:c4:91:e1:82:
2f:10:f4:1e:85:0e:88:c4:e2:6c:cd:71:cc:f1:6a:
a0:86:49:b0:a1:72:f0:98:04:e1:23:a9:22:a0:1c:
d0:db:30:51:b8:5e:28:32:8e:a0:4d:af:a0:9c:49:
0d:73:eb:1f:2d:4a:c0:fa:f4:6a:1d:3d:a6:64:71:
bf:fb:47:bb:06:b3:38:98:06:dd:d6:22:22:58:d5:
da:76:e2:36:05:a4:3f:9d:33:c6:44:50:99:3b:b8:
b2:ee:aa:19:d9:87:ab:7f:19:e6:ff:89:3e:93:78:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1A:15:8D:CE:06:00:BC:B8:1A:EE:B9:01:A9:C4:89:A3:2D:89:B9
X509v3 Authority Key Identifier:
keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9d:bd:f1:e2:58:d2:ea:d4:24:65:fe:62:16:01:fe:c4:ef:
ba:b9:3f:26:60:ef:b3:98:c7:e0:a9:ca:f3:10:90:e3:6b:9e:
2b:4c:c8:d4:06:bc:9e:14:68:74:14:23:d1:27:66:f4:ce:b3:
6f:b3:43:64:43:24:0e:fb:6b:23:08:9c:18:69:bc:e5:25:b1:
60:65:07:95:27:80:d4:e0:b5:d9:49:9f:1e:6c:4a:c9:7a:1e:
2f:47:ad:f5:60:1e:cb:62:9e:99:5f:86:40:28:ab:c6:17:40:
8d:13:7c:04:77:9e:83:4c:36:f1:ee:c1:96:3c:5e:d5:b5:81:
2f:2f:35:32:30:6d:8a:43:e4:5a:99:e1:fd:00:e7:3f:a2:fe:
e9:82:49:d3:32:9d:2d:35:67:ea:0e:eb:ef:9b:85:81:5e:75:
dd:54:ce:a6:8a:eb:a3:ad:5b:7c:27:81:39:48:b5:e0:34:ea:
83:2b:c1:34:4d:3e:78:ef:cc:40:85:64:c4:40:25:fe:67:62:
1f:02:aa:84:75:f6:cb:9d:df:a2:5e:8a:34:9e:58:0f:77:31:
e2:ce:8d:b2:22:bc:94:ca:80:ef:1c:fb:29:0d:a7:28:75:dc:
72:bb:b5:18:08:24:2f:ea:54:ec:cd:c1:f2:7d:1f:ba:a3:a9:
73:8b:1c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:32:58 2025 by rpki-client