Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File: ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier: EyoxKJE4DPViw7abvLa8mvC/9yT8bZwO+goT90xZvD8=
Subject key identifier: E3:2B:7E:94:00:6F:EB:B0:5F:28:52:C1:94:12:EB:E4:D3:D9:68:E5
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial: 0197469EA2C939D2521A4ADDC8DC2C332595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 19:01:30 +0000
Manifest this update: Fri 06 Jun 2025 19:01:30 +0000
Manifest next update: Sat 07 Jun 2025 19:01:30 +0000
Files and hashes: 1: 4D_rZ45BYofG_PKX7NdD5oQoUdM.roa (hash: 8wujCBX6hI1Ut+YVGttUi2MlgiyCoDf/nLWfLC5wQhA=)
2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: 0muIVkUzhN+0cr8PPC/NIeKcKxjf6bXjuF4j98R/0a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:a2:c9:39:d2:52:1a:4a:dd:c8:dc:2c:33:25:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Validity
Not Before: Jun 6 19:01:30 2025 GMT
Not After : Jun 7 19:01:30 2025 GMT
Subject: CN=e32b7e94006febb05f2852c19412ebe4d3d968e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:6d:46:e5:23:d1:e1:86:e4:03:59:d9:79:
1f:85:a5:89:10:6d:f0:ab:7e:03:70:3f:24:87:09:
b2:b3:f4:c7:be:35:c4:ba:fb:fe:20:a5:b1:d0:21:
6d:ad:05:1f:05:1b:19:83:ad:ca:ba:16:d2:7f:ed:
c2:cb:ca:81:1e:22:ae:8a:c9:e3:14:1f:82:43:94:
42:2e:f7:2b:e6:e2:86:e3:09:69:d6:0b:70:b2:c0:
b9:f0:9b:d1:b7:b8:a8:39:d9:53:9a:0c:fc:c5:5c:
da:ce:ac:2b:fc:30:32:70:5d:1a:d6:90:84:93:40:
16:aa:f4:72:ad:dd:69:c1:11:d5:45:1a:f3:ea:5d:
99:9a:1b:e0:08:d0:16:da:8c:48:22:e1:30:39:f1:
8e:1f:67:48:f1:a5:ec:99:0f:02:db:4a:8a:1a:3a:
a1:e5:5b:4d:89:cb:12:c0:3c:a2:05:98:b9:bd:5f:
ce:d3:21:88:c5:cb:78:33:95:59:3e:a6:e0:a9:2d:
16:11:4a:e3:08:eb:12:a6:6b:f4:09:b8:4c:50:42:
05:25:22:c8:a3:df:80:aa:f5:66:da:64:e9:aa:ce:
df:8d:fa:cb:4d:4d:aa:85:36:63:57:79:f5:49:16:
d2:40:29:5e:b5:ad:59:d2:7f:aa:c8:49:ae:89:12:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2B:7E:94:00:6F:EB:B0:5F:28:52:C1:94:12:EB:E4:D3:D9:68:E5
X509v3 Authority Key Identifier:
keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0c:ec:47:fa:c2:c8:f5:91:53:d6:78:c9:02:c5:4d:1b:98:
59:ab:73:b0:f1:cd:0a:9f:d6:fe:54:d5:1a:b2:51:f7:dc:e9:
c5:65:87:71:86:19:c2:e0:46:86:03:ef:02:b7:88:b6:6c:8f:
19:49:42:22:f3:60:43:d7:65:20:48:c0:a8:e8:34:15:ed:75:
25:1b:31:89:46:49:8b:43:c8:4c:52:9a:99:b8:10:57:ea:7a:
cc:28:03:ea:ae:8a:fd:cf:79:ce:d1:0f:79:46:a3:8a:0f:d5:
c5:c2:8e:0a:54:6a:42:7c:ed:a6:9c:33:b0:6f:ed:4d:57:4a:
43:b1:58:c5:a2:35:c4:da:16:fc:18:ce:3b:ce:3c:63:b2:c3:
72:1d:71:fa:c8:97:d2:f8:6a:95:be:af:e5:97:e3:55:86:e2:
0a:0a:7a:4d:9a:69:0a:f9:c7:74:ca:f7:3e:dc:06:7c:7e:48:
d0:b7:bb:37:8e:af:49:a2:de:10:26:cb:b1:71:81:2c:4b:50:
71:03:9f:a1:12:ca:b6:69:22:4b:47:b0:be:f6:ab:f5:92:18:
f6:63:a9:53:a7:fb:de:9a:08:54:5b:fd:6f:f5:4d:69:c0:37:
af:a3:9e:e3:df:07:c5:81:12:ce:6f:63:00:87:e4:9d:13:22:
56:58:52:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:06 2025 by rpki-client