Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
File: ZrB43tN1kjDKLho76QZjjRMGuQg.mft (raw, json)
Hash identifier: 6aHmtZh1DC7mZTpU69rbRDu0XHchBJ4tqXFFqRayHiQ=
Subject key identifier: 3D:12:89:89:5A:81:9A:B8:90:2C:ED:65:A8:B0:39:82:DD:4C:51:C7
Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908
Certificate serial: 01974D7BFA33729C101960F52AC795C5E264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
Manifest number: 08C5
Signing time: Sun 08 Jun 2025 03:01:00 +0000
Manifest this update: Sun 08 Jun 2025 03:01:00 +0000
Manifest next update: Mon 09 Jun 2025 03:01:00 +0000
Files and hashes: 1: ZrB43tN1kjDKLho76QZjjRMGuQg.crl (hash: Bed6Z7l/AHb6Dri+yrhjhyy2/v49zw1ilhDomO2ChAk=)
2: mHxy9rJdZpH5hrd46ZQbudzuLF8.roa (hash: xwokQPLLEdy+DbSgYqJ8Dht6nsu849d5eiNxGGm9TUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:fa:33:72:9c:10:19:60:f5:2a:c7:95:c5:e2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908
Validity
Not Before: Jun 8 03:01:00 2025 GMT
Not After : Jun 9 03:01:00 2025 GMT
Subject: CN=3d1289895a819ab8902ced65a8b03982dd4c51c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:fd:36:4a:69:96:e0:9e:59:9d:80:7c:d8:
4b:ec:2c:03:2a:4a:66:0a:00:bc:ce:29:45:ca:e9:
e5:97:89:a6:fd:2d:31:c0:37:cc:17:d6:bb:44:40:
d8:51:ef:34:8c:ef:91:bc:73:3f:8e:f5:20:bd:1d:
e7:89:31:de:31:4c:f7:1a:3d:d0:19:06:5f:f2:65:
11:60:d8:fe:c0:08:6f:fa:b0:ef:06:c2:1b:1d:6d:
58:2d:c0:08:03:15:b0:b4:24:a3:c3:1c:21:3f:75:
a5:63:43:1b:9c:ca:2b:0e:1a:ca:8a:ac:f8:27:6c:
8f:13:15:b1:df:c1:90:9e:74:ff:db:13:62:50:d6:
67:16:a9:d5:c5:c1:6f:28:11:59:33:b1:8c:a4:a4:
64:17:bd:e9:b0:51:fd:2c:a7:20:db:79:bc:fa:de:
d8:32:f6:fc:09:2d:50:e0:5f:69:b6:80:3c:83:e9:
89:c9:e9:91:61:c4:da:d6:50:54:ce:a5:de:b0:e5:
20:fe:c4:1f:9e:64:48:eb:4d:f4:e3:40:05:db:d7:
5f:be:83:2e:dd:53:c6:0a:ec:2b:2a:68:0e:8d:9f:
48:66:22:86:e9:af:2f:32:63:b6:4f:a2:af:61:8d:
28:0e:d2:de:4b:bd:2c:1a:c6:b3:98:0b:aa:af:e8:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:12:89:89:5A:81:9A:B8:90:2C:ED:65:A8:B0:39:82:DD:4C:51:C7
X509v3 Authority Key Identifier:
keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e4:28:99:f4:8f:4b:8c:1f:83:74:b3:6e:8a:22:e5:d1:ac:
4c:80:a9:b6:b7:73:0e:bb:d5:29:b5:18:b0:7d:7f:95:a9:47:
de:89:4e:42:f5:82:82:b4:ff:eb:a5:92:f9:7c:98:49:9e:b3:
aa:75:62:e9:f6:81:e3:c1:b0:d1:8b:4d:a2:34:ee:8b:1a:0d:
90:9f:b3:d8:34:ec:3a:fa:7e:7e:2e:a8:74:0e:c7:4e:73:c4:
76:b1:47:08:90:54:2d:1f:02:44:3e:05:d5:7c:17:d6:3d:4e:
89:f5:7e:87:0a:ab:98:14:18:cf:ae:af:d5:82:f4:ec:47:6c:
6e:c3:a3:23:c4:e5:23:4a:83:df:7e:12:ac:03:9b:0f:80:24:
82:99:89:85:81:cc:56:50:5e:57:7e:1b:bf:45:57:36:bb:c4:
50:7c:72:36:f5:ab:84:29:9b:a3:7b:cc:49:b0:ee:04:1e:86:
cc:79:4b:9f:27:af:8f:21:84:db:f0:c6:c3:89:6e:0f:5a:6c:
6c:dd:f5:93:e1:17:94:bf:48:f2:74:fb:68:d6:94:7c:99:0f:
e6:3c:a0:c1:d3:6a:0d:97:70:75:5f:11:a4:0f:82:91:b5:18:
f0:fa:3a:cd:09:7e:06:89:21:d6:8f:a7:9c:c1:8b:ac:98:b2:
1a:3e:a5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:50:56 2025 by rpki-client