Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
File: ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json)
Hash identifier: fUr+ZXfw6yY4iXd9jpi5RI8pgzTOiVtMeT41UMh3GIU=
Subject key identifier: 69:2A:C1:6E:74:EE:57:29:DF:E5:DD:6B:88:B0:D8:31:8D:B5:03:54
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Certificate issuer: /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial: 0197BA0F8B051D60A01836870035FCEAE04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
Manifest number: 10D6
Signing time: Sun 29 Jun 2025 05:01:10 +0000
Manifest this update: Sun 29 Jun 2025 05:01:10 +0000
Manifest next update: Mon 30 Jun 2025 05:01:10 +0000
Files and hashes: 1: HQMtz4B5CutgL-N5xfaUf94QUuU.roa (hash: fTXkjV5cqvWtMWH5Zll2nFHO95PtDXPWClZJchYPGPQ=)
2: ToVVgCXoslxYoBXJ20dyufaadGQ.roa (hash: pQi4XzfxTHe7c0yuSomBxVB+uUc5SATfiB1mQxdDEJI=)
3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: dQgZ2r9oczje3tQFZCNZwnqNlSfrxtmqGVn4AopvT2k=)
4: vn_6MTwelLUlLNDCZO0aRScUDTY.roa (hash: nZ+qSFZb5cEckLJHgsHRLeTqOf+uDgCygsG9DhaI2LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:8b:05:1d:60:a0:18:36:87:00:35:fc:ea:e0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Validity
Not Before: Jun 29 05:01:10 2025 GMT
Not After : Jun 30 05:01:10 2025 GMT
Subject: CN=692ac16e74ee5729dfe5dd6b88b0d8318db50354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:67:66:17:21:d5:d2:74:ec:d7:e8:85:00:
92:c2:d0:ea:61:9e:0b:4e:8c:d5:88:a1:23:f8:44:
ca:a1:50:94:46:8a:3f:4f:37:63:aa:3d:82:09:63:
20:ef:cd:15:da:88:00:2c:fb:e8:a4:58:b0:3a:a7:
f5:fd:d1:5f:ad:1c:e3:2d:0a:6f:3e:cf:74:f2:a7:
76:8a:74:aa:22:fa:69:8a:2e:c3:78:ae:32:dc:ff:
6f:f9:65:cc:c4:67:11:92:b3:9a:88:04:0d:d3:02:
36:1a:b2:25:c6:40:3b:1c:73:ce:21:0d:f5:7e:35:
eb:77:b8:b4:9a:03:4b:35:34:c1:e1:b4:b1:a6:6e:
1a:44:a3:42:2d:df:2c:0c:6e:73:3a:e7:ef:de:c4:
af:57:ce:80:f6:81:6a:56:f0:eb:c6:e6:1e:78:08:
4c:40:15:62:69:4e:39:21:56:10:1e:be:53:03:5f:
c4:f1:7d:6b:35:69:04:9f:37:a8:df:c8:82:7e:b0:
a3:b7:df:71:12:57:9e:51:47:bc:76:87:4b:5a:ba:
45:2e:f2:16:26:5b:14:fe:40:1b:0c:f7:5b:5e:1d:
fc:be:5e:e8:4d:2b:58:ba:32:d7:57:b2:24:60:51:
0b:4c:eb:00:7d:f9:e7:9f:0a:cf:77:26:3d:74:ef:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2A:C1:6E:74:EE:57:29:DF:E5:DD:6B:88:B0:D8:31:8D:B5:03:54
X509v3 Authority Key Identifier:
keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ad:3c:ea:5a:98:c0:22:49:01:df:32:a2:84:dd:4c:f1:23:
5a:93:7e:77:8f:c0:80:94:72:42:a6:97:72:35:f9:51:99:cd:
ca:a1:8e:bb:8e:8f:35:78:b9:95:26:2d:ae:ca:a4:ab:05:5d:
c2:d7:ad:4c:ce:06:df:35:37:ea:72:a9:4f:f6:21:fa:dd:05:
ec:7d:b8:28:75:7e:66:0c:66:56:9c:8a:06:66:2f:26:da:83:
62:10:ed:d9:3f:5a:0c:6f:34:f2:7b:02:82:a3:a8:90:c3:bd:
13:fe:4b:f8:0a:d2:26:b8:93:9c:2d:0a:19:7a:d3:b7:1d:20:
b3:3e:96:f4:ec:aa:ab:60:bf:28:7f:53:8c:bd:05:db:d5:be:
5c:53:02:4f:f7:79:29:99:fd:1a:de:6d:31:0c:a8:e6:33:0f:
5c:8f:08:b5:be:52:b2:8c:e1:8d:de:67:3c:80:1a:60:41:e6:
2e:2f:7d:d3:79:03:cc:89:59:09:2c:fd:42:3b:d4:d1:b1:e8:
20:6b:75:2b:04:cb:b9:14:4d:2e:af:24:ff:ff:12:16:c8:09:
e5:25:d0:aa:7a:8a:7d:a9:79:98:13:a9:06:ff:53:21:fb:03:
60:e3:a3:3c:13:21:07:87:7b:6f:d6:d7:73:27:f3:a9:6c:18:
65:b0:cb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:28:43 2025 by rpki-client