Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File: zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier: 1oQRaeE0/N3nf0A1bFmXNfRYdRAG/5EXDEKNcJlIAiE=
Subject key identifier: 2B:4F:2A:74:CF:86:F1:A8:BE:80:37:0A:44:A3:C7:CE:20:E5:39:BD
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer: /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial: 0197BFA45741EF7EA19B1D8FAF2982D77F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number: 1022
Signing time: Mon 30 Jun 2025 07:01:47 +0000
Manifest this update: Mon 30 Jun 2025 07:01:47 +0000
Manifest next update: Tue 01 Jul 2025 07:01:47 +0000
Files and hashes: 1: f5XMhdDv4boUrAlP04hly_uT_DY.roa (hash: eL7YWqbohX8ob6HoNr2HS/CxgsCuHhS0bMMR1aWHqbs=)
2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: gqEvDLvkR2MnIvrK1QeAWAHMV4aljbF/PZWAIvBZRWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:a4:57:41:ef:7e:a1:9b:1d:8f:af:29:82:d7:7f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
Validity
Not Before: Jun 30 07:01:47 2025 GMT
Not After : Jul 1 07:01:47 2025 GMT
Subject: CN=2b4f2a74cf86f1a8be80370a44a3c7ce20e539bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:e6:bb:5a:19:90:ff:f8:78:f9:dc:f1:b9:
04:0c:c7:49:df:79:27:f3:04:d9:e5:19:62:8d:9b:
27:26:c4:b9:af:2a:96:ed:c6:b9:43:7e:e4:20:a4:
f8:4b:53:4b:c3:1e:16:33:0c:51:e2:11:5e:c3:b2:
12:54:94:67:4c:98:11:73:32:c8:76:a6:18:43:7b:
d7:da:aa:a9:fe:a9:c5:6f:8c:b4:f4:87:bc:d4:e2:
5f:cb:42:21:c0:ec:68:d3:9c:37:6f:04:d0:0d:bd:
6f:3a:bb:fb:92:1a:04:6f:57:2b:06:d4:46:6c:35:
97:2e:d7:38:5f:d7:e3:3e:49:7d:a0:9b:bb:91:d6:
30:4e:e9:7b:de:b3:be:e8:95:cf:a9:69:e2:fb:23:
e5:04:3e:a8:73:bf:1c:5c:dd:9a:a7:61:48:79:f2:
2c:b1:08:bd:83:8e:1f:dd:d8:38:f6:3d:7c:61:81:
0b:9d:14:e8:64:82:63:bc:fc:47:d0:e9:bd:eb:20:
81:92:30:d4:8a:4a:a2:8a:a5:7b:42:1c:12:43:23:
4a:21:21:ba:30:a9:c9:c1:60:11:a7:f8:28:f3:9f:
e3:85:fb:f7:49:a1:61:ea:36:10:e6:53:5b:14:f3:
a2:f2:1d:04:0f:ba:92:67:74:b2:b0:9b:2e:da:ee:
63:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4F:2A:74:CF:86:F1:A8:BE:80:37:0A:44:A3:C7:CE:20:E5:39:BD
X509v3 Authority Key Identifier:
keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:57:cd:4a:49:d9:21:02:f1:d3:12:a5:cf:f5:60:3c:c9:93:
7a:73:e8:e1:be:2e:1b:2a:29:34:6d:36:f7:18:fd:9d:c7:b8:
1c:9a:a2:30:e1:70:d2:bc:0b:dd:c3:c9:51:7f:2f:51:54:b0:
12:89:25:ea:fa:9e:18:cf:e3:6f:66:fb:4b:8e:a4:fb:c2:30:
2f:2b:1e:72:f6:3a:d6:fc:7d:4d:f4:eb:bd:a4:fd:e0:ee:06:
58:e2:fe:db:d2:20:29:18:d1:7d:39:be:f2:c5:60:ca:ed:a9:
b9:e9:db:7c:b1:18:42:97:60:5e:03:5a:b5:ee:96:df:2d:1b:
dc:31:3d:1f:5d:20:be:24:c8:99:6b:4c:84:3e:d6:a8:0f:14:
5e:9d:0b:73:9e:9e:2b:7e:60:95:75:2a:88:64:32:5b:9f:2d:
56:aa:a6:ea:5d:48:3f:a1:c9:cb:a4:09:35:77:d2:d6:75:c2:
65:f8:8b:7d:75:84:22:42:d0:3e:23:48:33:07:bc:af:88:ba:
3b:31:00:b8:49:d7:f6:f8:0d:1d:48:81:63:bd:2f:97:08:66:
81:03:77:35:09:89:ee:4e:fa:47:b0:69:57:ce:ce:81:d6:f5:
1d:df:4d:e1:b8:89:4a:bd:68:47:48:f1:b8:5a:db:86:ad:e9:
75:bb:9b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:05:41 2025 by rpki-client