Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
File: ZVrvPO89mvoCfbM1efSh_orZHG8.mft (raw, json)
Hash identifier: 5IZNxYCYNG47wM1OFjMXCzHBcQYpN5b9uj65vTtF0KM=
Subject key identifier: 8E:F7:82:BD:6F:AE:45:23:5D:9D:B7:AD:CF:22:94:97:83:3E:4A:23
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Certificate issuer: /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial: 0197B6A20CA19A2007A41FF2DBFB8FF15244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
Manifest number: 10FE
Signing time: Sat 28 Jun 2025 13:02:42 +0000
Manifest this update: Sat 28 Jun 2025 13:02:42 +0000
Manifest next update: Sun 29 Jun 2025 13:02:42 +0000
Files and hashes: 1: 6awQ5vvLp2COkdyExVIfOWpcf0U.roa (hash: x8eRoJ1IMK9tcKhwbrAHFnXzsVa+tGQZBHOMDWjY4g4=)
2: ZQpO1aPpN8R6g2nPkZCJTaDtLDo.roa (hash: jW7tnAUthIc+57WN8d2CU9YQ1bHY6ehX+0z6UW+dFyI=)
3: ZVrvPO89mvoCfbM1efSh_orZHG8.crl (hash: RZLad0d6Pztyn1Spo0uW5Xjcb7dEFEOw46Q//rOJqg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:0c:a1:9a:20:07:a4:1f:f2:db:fb:8f:f1:52:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Validity
Not Before: Jun 28 13:02:42 2025 GMT
Not After : Jun 29 13:02:42 2025 GMT
Subject: CN=8ef782bd6fae45235d9db7adcf229497833e4a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:73:c5:0f:0f:b6:45:09:ae:42:86:47:b3:
10:0f:c6:63:1f:61:77:3d:4d:32:b9:ae:e9:d4:09:
44:46:4f:cd:c0:89:83:1c:3a:cc:cd:0c:33:6c:8d:
7e:e0:4e:58:2b:fb:7f:9f:0d:a5:a3:d3:b1:de:23:
de:cf:05:d6:9b:94:fa:57:67:b2:3a:a5:a6:26:88:
46:96:b4:48:a2:8e:9f:d7:0b:4f:d3:ab:71:61:e5:
64:d3:19:69:67:05:51:2b:67:5e:fe:d1:11:61:04:
84:e4:db:d2:dc:c1:74:15:80:92:7c:34:46:84:f9:
83:1a:72:fe:67:f1:41:62:63:fa:d6:9c:4d:14:f3:
46:5a:e1:2a:90:32:42:9f:57:3f:ff:6c:1b:ad:4c:
a3:fd:82:c1:78:fa:5f:bf:79:bd:7e:c0:54:84:93:
48:f3:f0:5a:49:7d:a8:fb:8c:14:2b:94:54:f0:7e:
63:27:a5:c6:1f:4b:42:5c:3d:4c:f3:8d:ca:9c:a0:
4e:5e:39:a4:46:0e:f0:df:7a:3a:e4:cd:30:3b:51:
12:e1:96:ea:aa:75:03:8e:40:73:06:4f:cd:6b:8a:
8a:c7:15:b1:cc:0c:b9:a0:79:01:78:a1:9e:cd:e9:
d9:8c:86:33:4d:89:99:6e:c1:ba:11:24:03:ec:89:
1e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F7:82:BD:6F:AE:45:23:5D:9D:B7:AD:CF:22:94:97:83:3E:4A:23
X509v3 Authority Key Identifier:
keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ad:02:bd:0a:53:2a:93:8d:2b:3a:c5:21:24:2b:cf:c0:71:
29:af:6b:a4:8c:43:d5:99:f1:b4:91:e9:5c:16:db:d4:a2:23:
c4:41:e8:df:38:ac:ca:34:78:2a:97:3d:b3:e1:75:55:11:66:
31:bc:50:aa:27:22:91:f4:fe:af:10:5f:fc:ee:2e:55:fd:49:
d3:da:74:c2:9c:10:7b:83:1a:e5:f4:b8:76:0a:8f:91:7d:17:
65:fd:bd:5f:ee:11:6e:67:d7:85:a6:d5:57:f0:7d:d3:bf:1b:
42:9b:53:f7:49:83:4e:37:9c:2c:ee:b7:e4:5b:ce:b6:2c:0e:
f7:6f:8a:5c:f5:b4:1a:60:18:3b:ba:e1:89:db:b1:6c:dc:de:
cb:e6:46:a4:ff:41:8c:f3:15:62:84:e9:a7:28:fc:92:bb:0c:
f2:3a:8e:9f:9e:0c:59:d9:56:7d:ba:1c:df:b9:8a:88:51:06:
56:bd:93:2e:cf:3c:0f:2d:93:12:37:11:38:5a:0b:65:2f:b3:
fa:3f:7a:6d:1d:b8:48:6e:41:a8:42:64:68:f5:57:13:0a:0d:
9a:93:48:f8:fd:63:3c:1a:89:5a:76:2f:71:e4:77:17:5a:23:
58:83:0c:c5:e6:a0:c3:d9:4c:95:e6:e8:46:2b:e6:0d:d0:b6:
ae:de:0e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:23 2025 by rpki-client