Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
File: ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft (raw, json)
Hash identifier: 5WWp4ZUG/rwKBUJdeeYDv+KAyXZ8rpw2SW8GxCL3h1A=
Subject key identifier: 05:35:30:BC:F2:47:E6:52:94:B0:39:41:9D:AB:7B:6C:F4:E7:43:B2
Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Certificate issuer: /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Certificate serial: 0197488CFAD8D117FF914A85654FCB4A28CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
Manifest number: 10AA
Signing time: Sat 07 Jun 2025 04:01:28 +0000
Manifest this update: Sat 07 Jun 2025 04:01:28 +0000
Manifest next update: Sun 08 Jun 2025 04:01:28 +0000
Files and hashes: 1: ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl (hash: Oj3d4Jp0pTacGt03whTioyZe74uggptHklVPACAsehs=)
2: duKwaDi_zRpAEa-uPqbKM14YVII.roa (hash: TetSzhXv2DRZxntyXp+bNMJwwDRAUYL5O4ug5nil6iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:fa:d8:d1:17:ff:91:4a:85:65:4f:cb:4a:28:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Validity
Not Before: Jun 7 04:01:28 2025 GMT
Not After : Jun 8 04:01:28 2025 GMT
Subject: CN=053530bcf247e65294b039419dab7b6cf4e743b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1d:63:e4:8e:a9:c7:52:81:a1:75:37:02:c1:
62:95:62:fd:35:59:d7:da:85:8f:bd:8f:2e:da:f0:
3f:e0:34:57:13:d4:4e:4c:9f:54:5a:a5:1a:d6:60:
14:ee:89:f9:93:0d:da:35:74:e4:b8:61:1b:4f:e1:
e4:ee:d9:1b:82:23:e5:48:30:2e:6e:8a:af:3f:9f:
29:81:69:9d:5d:bd:28:a4:82:16:bf:b3:3c:30:e0:
6b:1e:9a:92:2a:fe:19:37:c1:b6:52:cc:58:7e:77:
59:7b:5b:1e:a2:c3:7b:03:5d:ee:b2:81:2f:52:73:
5b:40:cb:ef:64:8d:55:df:4e:33:0a:08:02:3c:16:
8c:1f:1e:7e:7d:26:4d:7d:89:68:a1:9a:ce:1e:41:
90:c8:e9:0a:cd:22:cc:32:27:8b:6d:72:42:6d:ec:
a1:ee:6e:13:b4:89:f5:36:17:b8:cb:a7:b8:ec:3d:
55:e8:9e:7e:ef:fc:b6:9c:e2:1f:87:06:b2:3d:89:
86:e5:61:76:db:92:8a:d2:d0:37:a9:60:6d:60:40:
24:34:d8:ec:66:9e:9e:93:68:4b:85:0a:cd:e0:eb:
05:b0:86:16:95:31:15:7a:68:08:98:58:74:af:ae:
5f:68:64:1a:37:70:26:92:ca:88:9d:08:7f:86:13:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:35:30:BC:F2:47:E6:52:94:B0:39:41:9D:AB:7B:6C:F4:E7:43:B2
X509v3 Authority Key Identifier:
keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:41:3b:d2:36:b3:0e:7d:5d:01:5e:a8:3f:1c:bd:11:02:c6:
01:5e:71:59:ab:26:d4:2f:cf:2d:7f:db:f6:a6:7a:d4:25:94:
06:0a:a2:7f:9a:ea:f6:3a:47:51:3d:8f:36:56:ad:00:59:47:
b1:2d:27:30:d7:70:f7:fe:ad:57:d0:87:2e:34:de:e0:8b:ea:
f1:26:8a:56:5a:2f:5e:98:b6:6c:1d:9f:53:27:c3:81:0b:e3:
5a:5c:fa:e1:c1:a6:82:fd:e8:b2:74:6f:f7:ae:3d:82:93:45:
b7:22:90:16:e9:e6:88:b6:7a:bb:2a:c9:82:01:8e:76:a0:0a:
19:a7:33:44:92:2a:03:c9:12:f9:05:16:ec:25:c5:e7:96:ce:
9d:9a:f2:32:96:3c:78:1f:93:18:0e:8a:8a:a2:b4:00:7e:f1:
87:d9:ca:09:8a:4d:a3:6e:b0:97:69:9c:50:f3:47:41:c5:f8:
5f:67:a0:f2:15:fe:41:9b:dc:9c:56:35:bb:44:87:b0:70:de:
4b:a2:57:d1:45:93:aa:ef:43:08:15:21:90:7d:b8:ca:4a:78:
27:bf:05:0b:12:98:29:07:7c:78:43:9d:b3:9d:55:07:4c:2d:
32:7e:db:0c:6c:42:1f:af:9d:9f:04:3b:6a:35:6e:e1:4f:4a:
77:5d:cc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:26:30 2025 by rpki-client