Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: tHew34k9y9axYmP2QasILzPXvlLjKrveFGz+Ri3HSOc=
Subject key identifier: 8D:34:23:B7:5A:3C:3C:39:A7:13:DC:B2:DB:BC:5F:15:3B:3C:EC:93
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 01975BA52D4343E42EBADD69E84917948245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 158D
Signing time: Tue 10 Jun 2025 21:00:41 +0000
Manifest this update: Tue 10 Jun 2025 21:00:41 +0000
Manifest next update: Wed 11 Jun 2025 21:00:41 +0000
Files and hashes: 1: 4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa (hash: 188bZwTUrt3prH8kliJVWf+ZzLbMtaC8U5VcRX/YSdk=)
2: 6To_-SlMxz3YG0ptLY8TCmc3uqU.roa (hash: uJB/UZHKN4C9IojJMtedYn8sR+djAWZ0k/CyzWBoJ6E=)
3: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: MRL9kSxqfzGUQSM9yeVEni7U8P9vReDnx/mvYdpLIsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:a5:2d:43:43:e4:2e:ba:dd:69:e8:49:17:94:82:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Jun 10 21:00:41 2025 GMT
Not After : Jun 11 21:00:41 2025 GMT
Subject: CN=8d3423b75a3c3c39a713dcb2dbbc5f153b3cec93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d2:6b:e2:24:a8:da:c3:9a:db:63:dd:9a:11:
3d:9e:ee:f8:b6:f7:02:86:70:00:18:81:2a:43:70:
96:a5:9d:cc:3a:c7:0f:2f:ea:a2:27:6f:6b:75:22:
e2:39:23:38:da:d7:82:18:4f:4d:93:95:bb:d5:49:
6a:2c:e9:d4:46:70:d4:4b:c0:f7:09:6a:cc:96:db:
cc:0c:c7:78:3d:e8:c3:8c:d9:ea:3e:84:2c:71:dd:
41:df:15:cd:c9:8a:ae:5e:36:83:a8:f4:cf:be:d5:
91:19:aa:bb:e3:f5:b2:c5:20:77:b2:c9:72:e6:37:
70:fe:4f:31:04:b4:e7:27:f6:b3:7a:b6:40:a8:60:
e4:72:33:fd:04:88:d1:c6:d4:fd:1c:3f:4d:b8:6e:
58:e6:f7:77:51:36:5c:24:53:bd:bf:48:fe:09:34:
56:5a:8c:a7:44:c8:c8:cb:0e:80:ad:6d:06:2b:38:
ce:2c:1a:c5:df:4f:ba:a2:50:ac:a0:d1:4e:9a:92:
38:b5:38:de:05:c1:16:42:7f:ec:52:36:e1:3f:7c:
99:6e:3f:b1:7c:72:f0:2b:5a:1d:a2:5e:9f:ce:25:
78:cb:38:b0:d0:07:f3:0a:8e:c7:1c:42:de:b3:0a:
61:03:1f:3b:d5:8d:5d:b7:d6:a5:4e:23:58:e8:2b:
25:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:34:23:B7:5A:3C:3C:39:A7:13:DC:B2:DB:BC:5F:15:3B:3C:EC:93
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:35:d8:48:b0:50:2b:79:9c:9b:c2:bd:28:08:4e:2f:b0:14:
82:5e:ff:bb:b0:ec:c1:17:53:f4:c9:32:c1:e3:71:21:0e:a8:
ef:3e:64:97:d1:2d:a4:f3:d9:b2:c7:6d:45:cc:87:64:8a:30:
44:be:83:54:77:48:4c:7c:71:b9:eb:cb:71:e8:15:ca:41:75:
94:39:ab:7f:7e:e4:b4:7c:b1:f7:a1:5a:23:12:8c:f8:25:5e:
3a:24:cf:ab:19:6d:f1:3c:99:5e:89:1c:5b:c3:ca:f8:2d:e5:
94:34:8c:7a:36:f0:5b:80:79:11:60:7b:f1:5a:42:b4:35:48:
93:ec:17:4c:e9:0e:1d:0a:31:70:74:40:43:04:6a:ce:1f:56:
b3:fb:51:3b:60:40:84:81:f6:58:0d:b6:58:17:ce:47:af:d4:
16:58:2e:dc:59:d1:a9:23:13:87:fd:25:1d:c0:cb:7e:2f:7b:
c7:94:a7:ba:43:bb:62:95:66:53:66:94:87:75:87:d7:9d:71:
b5:bc:aa:21:02:4e:5d:14:05:a5:2c:aa:85:bd:da:b9:f9:9d:
2e:89:45:6d:df:a7:8c:86:a9:d7:ca:f7:a3:64:34:a8:47:69:
0b:b8:cf:c4:2b:96:10:df:71:bd:8c:0e:11:dc:74:35:85:04:
37:81:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:23:16 2025 by rpki-client