Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
File: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json)
Hash identifier: iklcws2SRQNBSUQvPDXR7GXdoRwXEaMco9njcGPWUeQ=
Subject key identifier: FA:3F:40:2D:BD:E5:69:CA:DE:B7:DF:B8:CB:2D:89:13:00:08:A2:01
Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
Certificate issuer: /CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Certificate serial: 0197488C83C39FA6BC52824F2560133A7158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 04:00:57 +0000
Manifest this update: Sat 07 Jun 2025 04:00:57 +0000
Manifest next update: Sun 08 Jun 2025 04:00:57 +0000
Files and hashes: 1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: Ttv8KZU6T0M7CbiS6uWFDzjCTbkQvsI+6y6vVPMhamg=)
2: qoiJ2dkjuPKR2DINrHtiZnfckMQ.roa (hash: LgXeymWOOJplKwnla/9DQkVIgYhvAdLAg89NuJpLJ/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:83:c3:9f:a6:bc:52:82:4f:25:60:13:3a:71:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Validity
Not Before: Jun 7 04:00:57 2025 GMT
Not After : Jun 8 04:00:57 2025 GMT
Subject: CN=fa3f402dbde569cadeb7dfb8cb2d89130008a201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:df:b6:68:76:cb:c5:b2:46:a9:89:41:65:
a7:7a:1e:77:8d:32:00:9d:ef:1c:7f:2c:3c:fd:99:
56:fc:d2:75:79:ed:54:3e:0a:fd:4e:52:d1:ef:98:
b9:f0:8d:60:20:95:24:aa:10:83:d1:f3:1b:b1:75:
5a:72:19:9a:67:cc:e5:81:af:35:2a:14:29:54:57:
43:80:49:67:d3:34:70:77:d4:02:1b:8f:07:56:17:
cc:d0:30:e0:70:8f:a7:ef:d5:bc:3e:48:0b:26:7d:
c7:59:e4:3b:a1:8b:66:e2:33:cd:25:4d:d3:56:37:
e2:2f:a1:de:98:58:9e:eb:25:9c:0a:1b:38:75:49:
1a:20:45:09:7c:18:e4:05:45:c8:1a:f8:70:51:f6:
5c:03:ca:c3:83:d9:70:8a:65:81:70:ad:56:2e:cd:
de:7a:1a:8b:76:65:bf:b4:d6:0b:8f:ac:f5:07:d4:
e7:cd:6c:75:8b:e8:c8:ec:c9:5f:07:3b:a4:38:49:
db:00:1c:cb:11:ef:d6:7d:11:54:96:83:c4:46:55:
bd:aa:68:2c:8f:86:91:36:c4:46:f0:75:bc:43:73:
1a:44:c0:9a:fa:74:78:f6:b0:35:ac:a1:be:fe:e3:
b9:fd:95:de:9d:8d:b3:e9:19:62:21:b9:93:da:b0:
3c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3F:40:2D:BD:E5:69:CA:DE:B7:DF:B8:CB:2D:89:13:00:08:A2:01
X509v3 Authority Key Identifier:
keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5c:61:94:b7:48:0a:70:7b:e1:d9:8c:f3:9e:7e:38:ab:01:
6a:8f:6d:16:b4:ef:e9:3d:f7:b0:b7:90:cd:2b:68:48:eb:5d:
d3:d6:8a:15:29:b9:a0:d9:ac:0f:54:22:1f:c0:c1:a7:6a:98:
5a:9c:7a:c8:41:ce:15:de:61:2e:0b:91:48:f4:7c:25:af:17:
9b:87:0c:17:6d:2c:fe:f6:5c:7c:3b:46:69:72:7e:22:92:9a:
a1:74:3c:53:d8:7c:f0:47:86:98:c7:63:67:97:a6:71:99:c3:
70:95:e0:ab:00:54:21:2e:e7:3f:cb:23:f4:9a:d2:f3:db:26:
c0:8a:b9:9f:b0:99:48:e1:cb:4a:7e:3a:cb:8b:00:12:e4:54:
7b:39:28:ec:7d:8f:fe:e0:03:32:04:4c:34:01:5a:bd:d3:c5:
a5:28:ef:a3:bd:a8:03:d4:e1:85:8b:d5:05:c3:5d:95:d0:37:
2a:1d:26:66:70:36:c1:b9:b6:39:42:72:b1:cb:36:31:cf:51:
3e:12:51:12:b4:ff:be:e2:15:08:40:4e:3c:0a:1b:2e:e3:83:
e8:90:fd:8f:b4:57:1f:96:ce:7e:5b:6d:df:c8:e3:38:69:cd:
b8:2e:82:5d:9b:8f:95:3c:5f:8b:3f:88:d9:fc:bd:da:84:bf:
ef:06:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:36 2025 by rpki-client