Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier: G05KGZXpfhfJbgbwFbHDDBVOYh+EOWdLqjEXwMHw1QM=
Subject key identifier: F3:C2:20:B1:A7:2F:C1:91:48:7A:46:80:29:00:B8:FE:CB:3C:32:01
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer: /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial: 019748558E19EA9CB9D9CF5C9E6E0DAEB098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number: 1236
Signing time: Sat 07 Jun 2025 03:00:55 +0000
Manifest this update: Sat 07 Jun 2025 03:00:55 +0000
Manifest next update: Sun 08 Jun 2025 03:00:55 +0000
Files and hashes: 1: TnfRZZa2DEP319r9F-J1M2uX-bg.roa (hash: 96MJ1Ftk1CjXiFA2P/QFgrE4MRV/eyv9dtWF5pRgqI0=)
2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: yqa4o/mQ36AuVCt0twdB3TObc5ehZS76LPB/ArG1B14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:8e:19:ea:9c:b9:d9:cf:5c:9e:6e:0d:ae:b0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Validity
Not Before: Jun 7 03:00:55 2025 GMT
Not After : Jun 8 03:00:55 2025 GMT
Subject: CN=f3c220b1a72fc191487a46802900b8fecb3c3201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:e1:b6:cc:39:16:c0:27:ea:e4:d3:19:da:
e0:dd:29:74:9a:75:59:51:ee:28:24:57:c9:a6:87:
1a:a3:83:7b:48:c0:99:89:25:0f:63:a5:8d:a3:0f:
f3:eb:6a:6b:f0:f6:2d:f4:39:e8:b0:69:26:d8:72:
b3:5d:8c:57:36:1b:e7:61:3a:e9:a2:12:03:7f:40:
3f:8c:20:17:df:16:ac:e5:71:ce:1c:ec:16:4c:a1:
c6:93:91:6e:c6:f4:b0:5d:7d:97:1c:2f:77:8c:1a:
e8:6f:c9:f8:d1:1d:b3:8d:08:d1:56:2a:83:74:2c:
26:cb:83:61:97:f9:4f:2d:bd:dd:76:40:43:03:70:
5c:96:a8:ef:a3:35:1b:f0:df:43:4c:c1:4e:89:4e:
ed:dc:dc:d0:89:07:b7:cb:c1:90:50:92:fb:e4:fd:
16:0c:28:de:31:f1:33:e9:2b:db:2b:f9:e2:fe:23:
05:00:45:d1:2a:fc:51:b7:41:9b:64:27:a7:4c:68:
aa:b4:08:8f:d5:a1:86:85:db:f6:65:51:1d:75:50:
6d:c1:80:f6:cd:06:8a:85:6c:d3:46:81:37:19:be:
17:9a:b1:fc:42:de:cc:76:8e:12:8a:07:bf:21:b7:
b6:eb:2d:dd:a3:af:f3:d3:66:5c:81:b6:14:fe:69:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:20:B1:A7:2F:C1:91:48:7A:46:80:29:00:B8:FE:CB:3C:32:01
X509v3 Authority Key Identifier:
keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ca:a7:85:65:dc:5c:7c:c1:e0:fe:4c:03:6e:f9:a0:c7:49:
e9:8d:48:32:8f:d2:e9:63:f4:94:b9:b5:a8:4c:39:15:0f:d6:
b6:3e:10:80:a3:3c:20:bb:5b:8a:b7:c8:04:45:3e:2e:1d:ed:
ee:e1:bd:9e:9c:b1:96:84:9b:47:5a:ea:02:d1:37:d8:94:2f:
3c:46:10:1b:fe:ba:cd:ef:c2:a6:51:6d:ff:c5:d3:75:93:28:
16:09:35:c0:7f:21:f6:a9:20:d8:16:a1:52:3d:3c:e7:07:93:
85:95:5a:a2:91:64:b7:f8:b0:db:9f:e9:9d:57:c1:5c:d3:cc:
70:1c:cc:38:c4:62:eb:17:f6:8b:dd:34:4d:0f:82:be:4a:ea:
79:f6:6c:d1:ef:b5:10:be:33:40:04:f7:2c:1e:a0:ea:b1:c9:
70:d2:c9:c1:d2:01:2c:b8:c3:40:60:87:d2:5a:e4:d3:b7:d1:
e4:f9:e8:2f:44:a6:af:36:79:45:6b:42:33:c9:74:a8:1c:30:
c0:6e:cb:83:8b:5e:b1:d4:82:02:4a:ae:3b:15:c2:78:6d:77:
44:5c:f3:52:90:66:4f:da:3d:56:ab:d0:94:17:41:4d:91:84:
2d:22:8a:cb:b4:c4:1c:b8:76:91:7a:45:01:90:ec:d7:cf:d7:
82:2d:ad:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:10 2025 by rpki-client