Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json)
Hash identifier: sjAeO2KYMtFlJZ7ahPsG7gu3IMr5moouYmKADLshBvE=
Subject key identifier: 09:04:F0:65:C2:CE:68:73:B9:4D:B6:A2:0E:3B:9B:F7:49:CE:91:EA
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial: 0197B70E80F7D80BEE6D04F0EA0FD11D3507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa (hash: wRoePPTw0QAoUH4ArBeWw9mmFYBdS/sgugaB1c1wFFw=)
2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: 21nxCHrhWI27dq/93Kh2kF4McLRU2WIiQemzOLWhpT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:80:f7:d8:0b:ee:6d:04:f0:ea:0f:d1:1d:35:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=0904f065c2ce6873b94db6a20e3b9bf749ce91ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3c:7d:31:cc:8a:99:5a:25:91:60:0b:48:73:
9d:c1:59:99:3b:11:d9:74:a4:d2:e9:90:2b:41:df:
cb:cb:1e:18:c3:58:d2:2b:61:75:3e:3a:9a:06:ef:
20:a2:3c:57:99:7a:5e:58:8a:2c:5f:04:55:1e:28:
7e:d3:25:76:04:cd:6b:75:18:16:66:cc:91:dd:6f:
96:f6:10:33:c7:95:c7:4c:ec:ed:42:5d:96:d1:b1:
5c:86:70:76:ae:26:f3:3b:a3:d6:37:dd:8f:03:1c:
8c:bf:23:4d:c8:28:5b:ee:32:c4:d8:db:17:7f:62:
0a:5b:e4:b9:a7:70:8f:0d:84:ef:c7:47:58:a9:1e:
e4:50:a3:d0:53:4d:56:51:cf:6e:06:7b:a7:bc:01:
30:e4:dc:64:6c:9d:71:d6:ce:00:ea:ce:7d:ef:9c:
45:6b:f9:76:65:a4:dc:97:44:30:9c:7c:81:89:88:
4f:7e:47:0d:c3:2b:6e:00:e9:da:1b:4f:b1:b0:e6:
06:21:e6:b1:44:b9:23:a7:2c:02:d3:9f:1b:4a:d3:
c3:df:43:22:f7:b6:e2:50:9b:b8:5b:c6:de:5d:69:
29:95:8d:0c:c8:a6:a3:30:bf:8e:91:c3:28:98:3b:
f5:83:47:e7:5e:e8:f6:5e:ca:c6:f3:c7:05:47:1d:
95:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:04:F0:65:C2:CE:68:73:B9:4D:B6:A2:0E:3B:9B:F7:49:CE:91:EA
X509v3 Authority Key Identifier:
keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:89:93:1b:e1:44:7d:69:28:77:67:68:b9:f4:c7:56:d3:7b:
0e:89:d3:9a:bb:ee:67:45:ed:2b:bf:d6:7d:f1:cb:57:a3:b6:
61:e2:c1:ef:b7:85:12:99:5d:6e:0b:b6:15:e2:3d:81:69:1e:
34:50:a1:10:16:2c:83:39:17:b0:d2:b8:9b:0d:87:7a:8a:45:
fc:c0:d4:b5:55:71:0e:8d:bd:6d:1c:44:9f:9c:cd:01:a9:2b:
70:a2:35:93:fb:cf:66:a1:10:45:48:56:b2:b5:6a:b8:b9:fa:
e0:78:c1:76:59:25:bc:29:d4:76:20:14:bd:6a:1f:80:52:83:
f2:d1:e2:71:ed:b8:05:74:8c:66:e8:d6:e8:5d:a1:e0:5f:fe:
24:38:a4:36:a1:cb:66:91:cb:c5:f4:17:be:f0:34:97:e5:01:
57:5c:b1:80:18:d2:1e:f9:95:3a:5c:33:e9:d3:34:e1:e6:25:
eb:c0:5b:32:17:f7:44:71:62:f6:de:b6:7b:15:36:05:f1:40:
c1:43:18:86:f5:8e:24:9a:ad:46:3d:4e:65:31:e8:36:de:46:
e2:d7:07:24:38:a8:d2:36:8d:2a:b4:38:b6:7d:2c:03:b0:bd:
de:1b:e4:98:59:3e:cd:f7:c0:5a:73:b7:f5:b9:87:ab:d2:de:
9f:bf:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:05 2025 by rpki-client