Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
File: ZVrvPO89mvoCfbM1efSh_orZHG8.mft (raw, json)
Hash identifier: hqWJ106XXDGIJyRqNfLJs7hqrSJZOnT6+cfV2ecIcnU=
Subject key identifier: DF:41:9E:FB:79:23:55:CA:D9:1F:44:01:F7:23:85:4E:04:9C:7D:1E
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Certificate issuer: /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial: 0198D47412FE3A074F14EB78CDF632BB7A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
Manifest number: 1192
Signing time: Sat 23 Aug 2025 01:03:53 +0000
Manifest this update: Sat 23 Aug 2025 01:03:53 +0000
Manifest next update: Sun 24 Aug 2025 01:03:53 +0000
Files and hashes: 1: 6awQ5vvLp2COkdyExVIfOWpcf0U.roa (hash: x8eRoJ1IMK9tcKhwbrAHFnXzsVa+tGQZBHOMDWjY4g4=)
2: ZQpO1aPpN8R6g2nPkZCJTaDtLDo.roa (hash: jW7tnAUthIc+57WN8d2CU9YQ1bHY6ehX+0z6UW+dFyI=)
3: ZVrvPO89mvoCfbM1efSh_orZHG8.crl (hash: KaXpzvURPuY0xX4lOtIg61hUmLvckJkj1HJ1yTeVn3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:12:fe:3a:07:4f:14:eb:78:cd:f6:32:bb:7a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Validity
Not Before: Aug 23 01:03:53 2025 GMT
Not After : Aug 24 01:03:53 2025 GMT
Subject: CN=df419efb792355cad91f4401f723854e049c7d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1f:b0:da:e9:df:f5:35:83:a4:fe:64:6e:21:
5f:3a:a1:ba:8d:01:f7:04:fb:6c:b1:60:60:25:e6:
7e:2d:62:9e:14:04:1f:79:fa:24:7b:29:21:e9:46:
3c:40:d3:dd:21:a1:01:a1:5e:92:31:73:0f:75:5f:
2e:0e:0e:c9:fa:5e:79:21:f8:9b:15:5f:8d:e2:56:
4b:cf:7a:c9:9b:c0:57:fe:45:f6:42:c0:36:75:c5:
f6:ea:89:28:42:60:4b:95:f8:92:96:25:10:eb:21:
cc:da:f3:d3:36:e8:21:11:ba:91:62:71:fb:1c:c1:
b5:f2:ee:bc:41:7d:fa:23:4d:a6:7f:a6:b7:fd:a3:
2a:f0:9e:eb:01:18:4e:05:a5:18:3a:6e:f0:04:cb:
38:5b:04:1d:10:c8:4f:60:aa:5d:b7:59:b2:34:82:
43:92:36:2c:c8:ec:94:22:f5:4d:ff:01:43:e4:cd:
f4:6a:a3:46:16:8d:9c:73:aa:b6:8b:b1:73:31:66:
98:dd:65:a5:3c:9f:52:b2:f7:35:29:3b:06:ee:38:
a7:0b:3e:9b:db:69:29:ed:97:dd:9d:2f:d6:c7:71:
df:79:d1:70:e7:2d:05:ca:00:24:80:fb:95:a8:d5:
3d:96:b1:d9:ef:2b:2f:0b:c6:8f:d4:de:21:78:20:
66:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:41:9E:FB:79:23:55:CA:D9:1F:44:01:F7:23:85:4E:04:9C:7D:1E
X509v3 Authority Key Identifier:
keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:07:c6:c6:82:44:41:27:3d:50:d8:7d:84:d5:a1:51:59:ac:
a7:54:ef:7b:ef:fa:d1:0a:d7:fd:0f:67:e6:49:0c:bb:a2:6f:
2b:46:f4:c5:f4:7a:f7:0a:78:4c:25:16:f6:62:a5:67:af:4c:
59:c3:70:5b:c3:38:69:92:bc:32:a8:dd:a8:bb:36:1d:0f:d8:
8d:9b:d9:f5:d2:b7:ad:32:37:8a:82:04:98:af:4d:b1:75:1c:
30:f1:5d:a5:d4:85:28:1b:5a:4d:99:c6:15:f7:42:f1:36:26:
42:ea:2b:36:3a:88:3e:7a:d1:cc:4a:6a:1e:ed:e3:3f:c6:76:
fc:3d:79:52:2b:ad:a2:29:1b:9d:83:ca:ac:fe:09:97:27:70:
84:3b:e4:a2:8f:cd:ac:64:61:7d:7d:94:42:3d:cd:79:ce:0b:
30:1e:76:5c:ab:1f:22:7a:79:b1:f0:56:0a:03:01:ba:91:74:
86:14:65:0d:1e:7f:49:a4:1c:72:84:c8:1e:29:07:63:3f:7f:
00:2a:d6:00:b0:40:6c:9a:b1:31:e6:44:8c:7d:37:63:68:28:
bf:5e:1e:26:1d:0c:59:68:ad:a5:bf:9e:4f:c7:14:f1:36:bf:
b8:bb:4d:6b:7b:e5:67:b3:85:6b:50:12:8a:a3:45:28:b3:75:
d9:ef:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:44 2025 by rpki-client