Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier: UlOlS/GVlOiyeVU+cfdZ32/QMouYWokV7nmy5zpkMyU=
Subject key identifier: B7:0E:9D:B3:5D:AC:A0:A0:0D:8B:9D:C2:1C:C1:F7:27:A7:80:27:4E
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 0197B6A0CF4F951030EC4FF0BB42BC706841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number: 12F5
Signing time: Sat 28 Jun 2025 13:01:21 +0000
Manifest this update: Sat 28 Jun 2025 13:01:21 +0000
Manifest next update: Sun 29 Jun 2025 13:01:21 +0000
Files and hashes: 1: 1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa (hash: 8zLMXDHfnNNjoX0VOIs5QNAoq7kKY/ejXy/m4VQalNM=)
2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: /k7BJf+m6jv+OvUp2Kzjlia38MrO7OvJYTpn1UQ3ClM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:cf:4f:95:10:30:ec:4f:f0:bb:42:bc:70:68:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Jun 28 13:01:21 2025 GMT
Not After : Jun 29 13:01:21 2025 GMT
Subject: CN=b70e9db35daca0a00d8b9dc21cc1f727a780274e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:5a:63:90:8e:30:db:08:92:e6:6b:89:23:
18:06:bc:f5:a5:15:ac:54:f3:4a:2b:1f:eb:08:37:
16:89:06:fd:67:bf:aa:e8:fc:0d:90:bd:16:31:ec:
02:57:68:0a:a2:46:05:ac:96:a1:d7:0c:65:1f:97:
e1:e4:bc:f7:8c:bf:83:2f:d5:e1:34:c8:b1:35:a7:
7c:59:eb:b7:40:e2:78:0e:0e:2e:9a:b2:a0:4d:5b:
3e:09:73:5f:94:80:69:78:35:9e:cb:c7:b3:0b:5a:
b2:35:a6:a6:89:f0:c2:ee:07:c2:0d:75:90:eb:0c:
b9:42:1f:1d:7e:e1:3b:70:aa:8b:b0:46:bf:f9:6b:
cc:fb:9e:7b:3a:0e:32:3e:56:0a:8f:14:da:00:39:
9c:f9:95:dc:bd:32:29:65:d9:2d:7f:d2:be:be:c2:
fb:87:e6:28:b0:eb:2f:75:36:cf:07:56:11:e9:1e:
47:55:78:0b:26:2f:19:37:36:2f:60:39:67:3b:53:
58:66:22:6d:b4:00:29:b0:82:29:ec:a7:e1:54:86:
2b:e0:17:a3:c4:a3:10:c1:2e:a8:b3:0f:e6:8b:56:
b3:70:1c:f1:b9:12:12:b5:5c:a3:17:ab:c9:13:f8:
58:06:a4:c5:eb:44:7d:21:b4:5e:8c:df:2a:51:6c:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0E:9D:B3:5D:AC:A0:A0:0D:8B:9D:C2:1C:C1:F7:27:A7:80:27:4E
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8f:ef:89:32:32:8f:85:9b:e2:5c:0a:ff:59:47:d3:e8:d2:
dc:8f:b7:9a:9d:20:24:11:ef:7b:87:7b:96:bb:13:de:e9:06:
c4:c0:8d:72:de:93:2a:41:58:b2:99:39:70:be:00:40:9c:29:
12:9f:a8:20:58:b5:4e:8f:56:77:26:79:d2:d8:37:d4:f9:a9:
6d:f6:6d:37:b4:c8:ff:82:be:9e:51:ed:0e:ef:c7:1e:eb:71:
e8:29:07:f8:e7:fa:ec:a9:ec:07:35:c1:4f:1d:26:b8:46:d7:
a5:c2:f1:bb:f6:d3:e1:e9:32:f8:83:54:49:63:53:5f:4f:37:
90:3c:ee:82:64:66:37:da:49:f2:7b:43:86:02:80:10:dd:16:
8c:27:56:f0:4f:a3:56:74:c8:05:0f:e9:77:53:c7:47:52:91:
5b:7c:0f:32:8b:ab:49:20:7b:5f:ca:ba:99:59:8d:43:ef:d7:
0b:1c:b1:df:87:7a:11:85:ff:8c:12:eb:61:a8:2e:2a:d3:92:
c7:00:c7:b0:04:69:19:94:95:91:20:b5:20:ab:4d:9e:cd:04:
e7:50:e1:12:3b:ca:2c:48:8d:74:10:ff:08:a4:a9:73:49:46:
5b:5c:b1:1c:fe:14:3b:13:3a:e0:15:36:30:88:1c:d3:e9:0f:
c7:59:f9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:24 2025 by rpki-client