Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File: ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier: 4yKI72MxG5N6bVXL59OBA3QLIZDnDJ71d/IBwRtDvCk=
Subject key identifier: 78:FF:3D:95:8C:D5:E3:5B:1E:D3:21:17:9B:77:0C:83:C1:42:E3:5E
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 0197C6EF88FD3FBF8AF347BA30E2E04250CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number: 0E97
Signing time: Tue 01 Jul 2025 17:01:16 +0000
Manifest this update: Tue 01 Jul 2025 17:01:16 +0000
Manifest next update: Wed 02 Jul 2025 17:01:16 +0000
Files and hashes: 1: LbrPw2qHStZqdco2bEzhOUNybWw.roa (hash: 7tT51i1L51JtsRXjzHib6ZL3MKK3W2gKGrb5rsnLLAg=)
2: POCPRxRMQvG_SBDmMnlfbNyZ_Fc.roa (hash: omhI/dBEp6szGMmdnXA+Z3Yz+jOpHj80ol6PbhfLhbo=)
3: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: bCENaD4FWfasjaJ1baA9lDEORtSlBRcW/XBd+ETOJ/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:88:fd:3f:bf:8a:f3:47:ba:30:e2:e0:42:50:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Jul 1 17:01:16 2025 GMT
Not After : Jul 2 17:01:16 2025 GMT
Subject: CN=78ff3d958cd5e35b1ed321179b770c83c142e35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:4c:9b:c2:db:2b:c4:cf:70:ef:0c:b5:75:
82:c1:82:e8:75:ad:62:03:29:b9:1e:fd:b2:4d:4d:
30:d7:f5:87:b4:8f:69:77:e0:4d:fa:78:0e:21:68:
cf:43:5d:b7:c9:53:db:da:cc:a1:75:0a:86:1d:8f:
0e:66:eb:5c:93:b1:20:25:0f:6e:0b:ca:0b:d2:63:
9f:03:b3:dc:11:28:17:a5:13:8d:af:c7:10:c3:f3:
f5:8a:90:60:87:e3:54:93:1b:9e:d8:1d:1e:db:e3:
10:7e:6f:c7:da:2a:5c:6b:ce:21:e9:cf:19:f9:a8:
df:2c:2a:23:85:2e:1e:75:4f:31:9f:e4:34:06:fb:
c9:8c:f6:7b:6e:cb:21:cf:52:9e:17:44:b1:40:11:
06:03:3b:06:27:60:ba:16:97:3d:6e:51:58:ba:cf:
7d:63:75:41:93:3d:b6:c8:3c:46:ea:d1:58:9a:68:
21:f4:a1:83:80:b5:35:9c:6b:2e:b1:8d:44:db:e3:
45:7e:c6:0c:32:3a:e6:97:54:7d:ab:c9:2f:83:05:
40:16:9f:b0:12:fd:2c:c5:f5:57:4a:6b:f3:49:f5:
8a:0c:dc:21:34:3e:c8:ce:e1:ff:d1:e9:10:93:89:
89:5b:f8:3e:10:42:1d:89:f1:43:c0:b0:a7:76:65:
af:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FF:3D:95:8C:D5:E3:5B:1E:D3:21:17:9B:77:0C:83:C1:42:E3:5E
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ae:66:50:ab:b2:ee:32:15:54:85:3e:de:b1:be:b8:4a:d4:
b1:01:f8:7a:e5:d9:37:3a:4f:d5:50:45:72:95:37:5f:15:c4:
09:9d:f2:c1:1e:f8:9e:ca:cf:84:78:61:79:2b:04:6d:87:32:
94:7b:21:09:2a:79:98:6e:f1:02:d9:29:76:70:38:f2:32:0a:
6d:76:8d:fc:94:4e:43:c3:c6:e6:fc:69:af:0d:5d:77:27:db:
0b:43:62:fc:61:eb:28:57:72:0c:20:95:b6:8d:36:18:17:70:
da:66:fc:7a:58:09:bf:2a:bd:79:c0:2d:db:3a:df:47:53:99:
98:d6:ec:57:f0:8e:0b:75:59:46:c8:5d:88:c3:4b:ef:7f:fb:
b5:b7:cf:25:9e:92:bd:e5:31:8d:a6:6a:1a:b2:3b:6a:65:82:
55:c7:fc:38:30:20:61:71:6a:9f:f8:9d:8a:6f:5f:58:90:5f:
4c:5c:34:bb:c6:3f:44:23:f9:66:77:1e:de:3c:be:13:16:fb:
ab:49:d8:f7:35:82:60:ca:bf:3e:19:80:d9:c9:95:82:d9:7a:
0f:0a:bd:2e:23:52:b3:bb:7e:df:be:37:67:92:c8:fb:3e:0f:
c6:a1:28:1d:7b:08:9a:97:c2:7c:30:68:b5:15:50:23:dc:c8:
75:7c:86:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:14:05 2025 by rpki-client