Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
File: zl1FYESPeKTc3LeRoH2tIWOgjN8.mft (raw, json)
Hash identifier: oYAnqCe7PCB5L3EQRFNJ8S7LM2eNu8rggLiYX5EhOv0=
Subject key identifier: 7E:F0:56:FA:E3:BE:02:5E:3C:3E:3F:4A:32:7F:1F:85:5D:AC:87:ED
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Certificate issuer: /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial: 0197C80224ABBAE81C0CD7BE851071A55250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
Manifest number: 1551
Signing time: Tue 01 Jul 2025 22:01:12 +0000
Manifest this update: Tue 01 Jul 2025 22:01:12 +0000
Manifest next update: Wed 02 Jul 2025 22:01:12 +0000
Files and hashes: 1: DnVFEpYRkYdsvx6fTEjYM0mnXYg.roa (hash: Q/XnpIbexx4X2BOItVZgFWxgUIF3KGLUNsRlADlMLPI=)
2: zl1FYESPeKTc3LeRoH2tIWOgjN8.crl (hash: TiProAWTX3Xgv/SB0oYQAK92Do/ieai1UzdyK+9leJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:02:24:ab:ba:e8:1c:0c:d7:be:85:10:71:a5:52:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Validity
Not Before: Jul 1 22:01:12 2025 GMT
Not After : Jul 2 22:01:12 2025 GMT
Subject: CN=7ef056fae3be025e3c3e3f4a327f1f855dac87ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:94:a1:36:90:61:22:11:ec:7e:68:6e:59:
4a:cc:f6:b8:21:42:39:28:fb:0f:0b:35:a3:39:e4:
dd:86:c1:94:84:d7:28:94:41:a0:b0:c1:1b:88:ed:
81:e4:9f:b4:28:9c:ee:9e:33:d7:31:87:d1:56:37:
60:20:a6:8c:ea:5b:17:4a:d0:22:53:45:22:6d:0c:
47:87:93:78:2d:f7:82:83:34:4a:ab:b9:0f:2e:aa:
2e:c5:cb:34:ad:92:47:15:1c:bc:d7:67:9e:22:a7:
41:7a:d5:d6:bd:81:bd:8e:fd:5d:92:a2:74:16:e7:
1c:b6:69:59:24:c6:3e:ff:dd:f9:bf:99:af:28:d5:
86:ff:79:ed:f8:d5:40:cc:61:fb:af:3b:5c:c7:46:
be:f5:b3:e2:43:13:62:f3:3f:8c:b7:1d:f8:c6:37:
dd:13:1f:86:f6:cb:99:ca:f1:f5:bc:e7:a0:1b:0f:
3f:92:ae:d7:2c:44:65:66:b2:e3:04:1d:df:b1:a0:
62:6f:dc:a6:6a:52:c0:f6:df:0b:75:4a:43:26:ea:
b8:fb:35:d2:85:67:04:83:be:8e:c7:4c:69:ee:a5:
5f:cb:c3:bc:12:bf:50:3f:f3:52:2a:e8:18:31:9c:
ec:d3:9b:dc:c3:8f:29:4a:67:4e:b5:e8:7f:58:1b:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F0:56:FA:E3:BE:02:5E:3C:3E:3F:4A:32:7F:1F:85:5D:AC:87:ED
X509v3 Authority Key Identifier:
keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fa:6d:10:48:a8:14:6d:1c:0c:1f:f4:0e:53:a5:0f:f0:64:
51:27:d9:a5:df:a5:1f:b1:28:50:1c:c8:84:fb:d9:5d:94:ea:
1e:02:02:06:1e:bc:cc:66:8b:63:a4:8e:15:21:6d:46:18:cd:
09:37:b6:14:ca:ff:66:9a:7a:ba:f2:fd:b0:44:84:29:8c:b9:
59:32:e6:30:66:bd:c7:e3:39:57:ff:d3:11:0b:3b:77:57:9d:
98:80:67:2f:a5:8b:c0:05:9d:36:8c:22:9a:17:ab:dc:ca:e0:
61:6c:77:6c:a8:fd:55:28:15:9a:64:12:a6:a6:73:ad:a4:83:
f6:4c:ae:19:e9:b3:10:2f:fc:6b:f6:4a:65:4e:7c:1d:bc:19:
06:c8:be:10:32:1d:1c:1c:0c:96:a8:07:0f:c6:ce:49:f3:09:
88:7f:73:9c:1e:a2:9c:6c:f2:09:41:a8:27:ec:a3:5a:40:2d:
b3:53:b2:26:c6:09:6b:90:ad:67:0e:1f:fe:e0:4f:a4:3b:1b:
94:bf:39:da:42:a2:5e:42:f7:b4:e5:5e:1e:19:77:42:37:3b:
68:f7:6e:6d:d7:14:07:01:ea:7a:cb:0d:0d:44:f3:39:f2:26:
07:38:ec:39:ac:1d:8a:38:9f:f3:e9:65:d1:70:49:4f:ec:38:
6d:07:22:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:32:36 2025 by rpki-client