Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
File: ZAD5U62_21K3iBX-z8DozeCXYsM.mft (raw, json)
Hash identifier: r1fdatcUnk6Vvnm7sy0g58jbT0CMXdF1dzHp7+OuSp4=
Subject key identifier: 61:59:00:75:8F:52:5B:47:88:94:9B:CE:61:25:88:82:84:59:C0:14
Authority key identifier: 64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
Certificate issuer: /CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Certificate serial: 01975423595DBE41D38A06D1A66718856C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
Manifest number: 1071
Signing time: Mon 09 Jun 2025 10:01:32 +0000
Manifest this update: Mon 09 Jun 2025 10:01:32 +0000
Manifest next update: Tue 10 Jun 2025 10:01:32 +0000
Files and hashes: 1: ZAD5U62_21K3iBX-z8DozeCXYsM.crl (hash: xzV7VQjPEXDqNnwjcQDE05vi0QIgW43oMjh2qa4e1kw=)
2: v8jGZZ2sPrkxPTZ3eZtK4NYbA6E.roa (hash: 0l4hT05AEA8nsr6nY5F6IkEiZ/ck5kp606jyOTBkkrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:59:5d:be:41:d3:8a:06:d1:a6:67:18:85:6c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Validity
Not Before: Jun 9 10:01:32 2025 GMT
Not After : Jun 10 10:01:32 2025 GMT
Subject: CN=615900758f525b4788949bce612588828459c014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:84:c1:11:f6:66:0f:1d:14:a1:c6:14:20:
ac:10:ce:70:25:f2:b7:52:17:a8:6d:29:2b:2b:74:
72:91:28:2a:e9:b7:02:15:8d:17:bc:98:a3:1b:1c:
6c:d6:2c:9c:06:0e:89:d9:83:d7:d3:e4:46:87:e1:
5a:4f:78:35:12:5c:07:d9:ad:99:a9:cc:4e:7e:97:
a4:c2:25:a1:3d:81:fc:8d:50:ba:de:2f:05:0c:fc:
cf:5f:34:b1:18:82:19:35:b9:0f:9d:27:da:4b:6d:
3e:c0:56:b6:4f:42:e3:91:1b:c9:6b:3b:3b:cc:d9:
b0:bc:b7:22:9d:5c:66:9e:0c:f0:47:81:68:88:4a:
0b:17:82:46:ba:38:7d:da:aa:f2:f4:02:69:b1:5d:
73:75:eb:6e:2b:a4:3c:04:2a:b8:29:fb:64:7f:9a:
00:95:71:ee:81:80:96:a5:0f:41:e2:bb:f8:f8:98:
ba:ce:71:15:8b:d8:a6:68:76:32:a3:df:3b:0f:05:
29:22:10:1e:b4:1b:42:1f:e1:29:8e:b1:a0:49:d3:
b0:bd:2e:83:75:f3:f8:6a:ee:eb:f1:54:fc:22:ed:
1f:64:50:cc:f7:88:77:33:e0:b4:1b:61:a4:50:f7:
f4:03:d2:da:02:db:f6:15:65:4a:24:bf:a4:61:27:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:00:75:8F:52:5B:47:88:94:9B:CE:61:25:88:82:84:59:C0:14
X509v3 Authority Key Identifier:
keyid:64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:64:5b:40:41:22:fb:2e:a6:79:86:91:75:2f:69:ad:bb:0e:
fc:2e:ad:97:f1:87:23:2f:5d:11:51:1d:bc:df:8a:34:86:ef:
d9:8c:d8:29:6e:70:70:77:6e:d4:6c:6f:98:35:dd:2e:9e:d9:
56:12:16:40:99:5e:cd:aa:bd:2f:e2:52:e3:de:f8:2b:71:0f:
3f:23:82:47:50:71:cd:85:ef:12:75:d8:ba:b0:91:0e:9b:b8:
5d:3c:ef:5a:19:37:aa:ec:d2:37:0e:06:7b:ec:bd:23:9a:4c:
b2:f1:da:c7:c8:0d:5a:47:9d:7b:1e:e8:21:26:2c:fb:37:08:
5d:9c:c6:33:ec:b4:5a:4a:f2:25:34:22:d4:3d:b9:8a:b8:06:
c4:62:2d:25:d1:84:12:e7:9c:25:bc:a5:33:3a:f6:3d:41:8b:
15:2b:8f:9f:10:14:72:98:59:89:3f:4f:c7:cb:22:b5:43:46:
cd:a5:50:49:54:fd:a1:d4:0e:72:d0:86:d2:3d:74:1c:48:e4:
01:f8:1d:c1:8b:9a:f7:58:ce:e5:af:94:84:06:91:38:f9:05:
8a:fa:de:d1:39:ae:d7:c8:48:ff:fd:ea:1a:bb:1c:5d:a0:80:
14:10:01:0f:49:a8:01:0a:6a:2f:f2:50:0e:74:f2:d2:b8:2b:
4d:94:2e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:38:49 2025 by rpki-client