Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
File: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft (raw, json)
Hash identifier: nM2KdMScTRQOMkqN4D+7UOBSg/Ut6irsliqyyPdXzdo=
Subject key identifier: 3D:15:08:63:4D:D4:F2:60:43:2F:4C:FF:F3:87:45:80:22:FF:6B:2F
Authority key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
Certificate issuer: /CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Certificate serial: 0197469E9428E2AE9F0988FDF83ECFBC6F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
Manifest number: 10BC
Signing time: Fri 06 Jun 2025 19:01:27 +0000
Manifest this update: Fri 06 Jun 2025 19:01:27 +0000
Manifest next update: Sat 07 Jun 2025 19:01:27 +0000
Files and hashes: 1: 1DNJXUdN9aHYwhJ0OLj39VSopnQ.roa (hash: QBTrHThXdQY8h/nmwy8ckGzuWyt8cYLb33EN8JyG6aE=)
2: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl (hash: L7xXM6PS9YFQCSh6uCjPJW8+7Bi0j1YntaDhGgmEpUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:94:28:e2:ae:9f:09:88:fd:f8:3e:cf:bc:6f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Validity
Not Before: Jun 6 19:01:27 2025 GMT
Not After : Jun 7 19:01:27 2025 GMT
Subject: CN=3d1508634dd4f260432f4cfff387458022ff6b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:f9:78:d5:d7:f7:51:9c:fa:d6:2f:1f:bc:
d0:df:0e:56:40:e2:6c:13:bd:30:66:74:b3:37:09:
56:9b:41:ab:c5:b5:2b:40:80:42:81:3a:18:7a:d1:
43:b2:65:88:09:30:9d:97:c2:97:2b:7c:13:a2:f9:
63:43:e5:99:1d:19:20:b8:ff:c6:1c:7b:06:c6:34:
f7:dd:89:cb:03:04:6a:53:35:b6:5a:3c:eb:be:45:
56:4d:c1:50:3f:01:d4:9b:00:da:56:c8:83:51:ec:
68:00:b5:bc:40:a6:6f:37:c3:ab:cf:39:e6:30:6d:
7a:24:8b:eb:87:4e:9a:5d:c7:6e:2e:bc:41:b9:3d:
25:1e:4d:a2:48:b2:96:16:da:ed:d9:5d:04:3d:23:
41:3c:dd:fe:de:f9:c5:77:c1:3d:12:dc:79:08:30:
1f:c6:d9:f4:a8:c0:1f:81:94:a9:d7:91:f5:fb:1c:
10:04:4d:4e:64:6d:df:9f:7a:89:ce:9d:a3:77:98:
7a:ed:38:62:bd:81:76:30:b2:7d:77:d3:64:33:3e:
aa:f2:93:f3:76:29:2b:b4:57:4a:63:6f:55:6c:d5:
96:ec:d5:c2:3a:48:ca:7e:e5:bb:85:7c:f9:45:0d:
c3:5c:bb:ef:66:98:e7:ec:cf:8d:ca:b7:5c:a3:41:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:15:08:63:4D:D4:F2:60:43:2F:4C:FF:F3:87:45:80:22:FF:6B:2F
X509v3 Authority Key Identifier:
keyid:65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c9:62:ce:17:72:ba:59:94:03:b9:f6:86:10:fa:b2:88:2c:
cc:b3:47:4c:59:be:c0:49:a5:13:17:f5:78:2e:e3:84:78:56:
df:90:d3:d6:f7:56:ca:b6:55:41:1d:3a:ef:52:8d:f1:e3:5d:
70:d8:1e:76:42:a6:94:32:d4:06:92:83:79:ea:b2:c1:88:a8:
66:4f:4c:73:36:85:5a:c0:c7:fd:40:27:71:66:8b:39:d0:df:
94:c2:49:67:96:42:51:cd:e1:03:78:e3:aa:93:f0:c0:ad:43:
b1:bf:f9:89:4b:e1:5d:ec:9e:c2:e9:6a:5f:3d:c3:b6:b8:ad:
6f:44:94:a3:44:a0:e2:96:43:8b:e0:ce:60:3f:07:0a:90:aa:
4a:bf:1b:bd:f6:f7:b6:22:5a:42:55:cd:2f:7a:8d:d4:29:e3:
4d:2d:34:56:5d:bd:31:1f:62:90:9e:f9:cb:a6:f5:12:5a:46:
19:32:af:6d:de:74:03:18:4d:57:73:18:1f:9e:d9:e7:15:09:
39:9b:e5:71:64:fd:95:1e:2e:8a:14:a3:40:fb:fb:a4:15:e2:
17:50:67:55:09:f7:bd:09:ec:0f:be:a4:c9:83:1f:3d:85:83:
ee:75:8a:02:ff:05:a6:5f:8d:31:89:b8:9a:26:d3:28:22:eb:
0d:ba:00:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:28 2025 by rpki-client