Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier: pjLqsP8jxcmaaC9KJrPczOFC1Hdp4bzKZT6t57v+diU=
Subject key identifier: 6A:8A:53:60:B4:D3:D9:47:EC:D1:2A:7E:5A:B5:D8:75:06:5D:49:E3
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 01974E207F00558C53F2FCD22CFB8C1C3625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number: 12EC
Signing time: Sun 08 Jun 2025 06:00:41 +0000
Manifest this update: Sun 08 Jun 2025 06:00:41 +0000
Manifest next update: Mon 09 Jun 2025 06:00:41 +0000
Files and hashes: 1: 37BH2BbkewJajf7AdygbF5Ybmow.roa (hash: MUXiTIQEk3N6SMfHkWKTmXV6HOZLx5S5G+E0pT81UGY=)
2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: KqmgK80E85CRmuYGd4e+xKohBWQfD+3hB3RHrWASgxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:7f:00:55:8c:53:f2:fc:d2:2c:fb:8c:1c:36:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: Jun 8 06:00:41 2025 GMT
Not After : Jun 9 06:00:41 2025 GMT
Subject: CN=6a8a5360b4d3d947ecd12a7e5ab5d875065d49e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:5b:ba:2a:14:01:9f:23:c2:13:29:95:8c:
c8:c9:ea:20:51:ba:d1:da:37:78:79:ee:2d:0a:1b:
08:a4:35:68:9a:78:a0:91:70:28:98:3c:23:4c:e8:
e1:5c:63:f7:f8:2d:53:a4:75:54:82:95:cc:79:22:
95:80:66:c4:b3:bc:f8:87:4a:6e:22:23:e0:0f:e5:
3a:6c:7e:45:b0:8d:ea:ff:64:e3:2d:50:17:5d:e0:
2f:dd:60:d3:5e:08:fa:9e:4c:41:61:7d:bb:46:87:
b6:08:e9:43:81:67:0f:34:5c:ea:7c:d1:47:7e:3a:
61:d2:df:fe:ac:a2:32:38:04:33:2c:d7:d9:e0:7b:
e9:4b:40:8b:f4:02:cb:a8:a9:a9:24:b9:e7:f8:8c:
57:48:7b:4c:89:30:67:d0:52:49:bb:61:c2:9f:0f:
4e:e3:79:cd:f3:b1:32:bc:d5:4c:c3:05:bd:35:2c:
f1:87:03:bb:84:e8:4c:9d:94:8d:e2:5e:20:85:ac:
64:d1:f6:5f:fd:ad:8a:11:c9:1d:5b:8f:b8:00:60:
79:de:13:86:47:2f:6b:4b:f8:1d:b9:09:50:59:c3:
26:b6:a0:0b:7b:e2:0b:4c:4e:b1:f9:9e:ca:da:4d:
0c:88:97:35:76:e2:fc:7a:1e:3a:69:8b:9d:06:8d:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8A:53:60:B4:D3:D9:47:EC:D1:2A:7E:5A:B5:D8:75:06:5D:49:E3
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f9:ec:8d:1d:92:83:92:4d:68:37:4a:76:0d:9c:e7:9a:14:
42:89:50:25:1e:3e:b7:ed:fb:f2:32:9e:a4:1a:1d:b9:04:64:
c9:32:86:b2:58:9e:a9:1a:58:e6:d6:8d:b1:00:f5:b4:0b:a2:
19:b9:29:eb:6e:40:dc:dc:fe:b3:fd:0a:c6:84:85:de:67:60:
88:b5:18:1d:51:df:76:7f:be:0d:a8:a6:cc:18:aa:3b:e8:52:
0a:8c:3e:66:ce:45:2e:a0:20:74:ac:5e:9f:eb:d5:93:b1:e4:
fd:7a:41:f3:e3:9a:76:93:f2:69:31:6a:27:37:a5:11:5c:e6:
a2:4e:74:e0:af:8f:f9:69:09:57:2b:f0:a1:2b:76:05:19:7c:
f5:cf:69:b1:6f:1b:36:c3:4f:87:f2:0d:19:14:d4:aa:68:4b:
2a:23:0b:2f:4f:28:19:44:83:0b:e2:6f:28:0d:c9:4f:84:c4:
c8:3d:9c:89:78:9f:92:bb:b0:33:f8:2b:07:63:64:9b:38:38:
63:cb:71:06:9a:4e:79:87:06:b1:de:53:d0:56:d3:bd:24:09:
1e:24:d2:ce:4f:b3:32:85:56:1e:43:34:e6:01:c9:51:7d:f9:
2e:f8:58:1b:b8:b6:db:6f:44:1c:3a:f7:e0:96:95:75:dc:74:
bf:92:b5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:23:18 2025 by rpki-client