Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
File: ZvmDE4lp-NpnT3tcATPgwtAptMg.mft (raw, json)
Hash identifier: +r17ZMsq5pRh28dtw4/ZZILF0W24eVfsJHFKM9kocuE=
Subject key identifier: D8:A9:96:DA:1B:64:68:1B:AB:C3:CD:1D:E4:04:07:F2:77:AB:31:0A
Authority key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
Certificate issuer: /CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Certificate serial: 0197B820FF49F2DD753BBE3BD0AD28F271E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 20:00:59 +0000
Manifest this update: Sat 28 Jun 2025 20:00:59 +0000
Manifest next update: Sun 29 Jun 2025 20:00:59 +0000
Files and hashes: 1: 1-mam0MNYijlsUMBvUuzN8saQbSA.roa (hash: 7/MiQ2GbC+9P+jtI1s6HZozavARFckuLPrIIYS9KDUU=)
2: P1AdxUyUjVnpvB2qJGHDHOSGgqE.roa (hash: X7W16uCiCg3Hk2XdddLjkg7PZ/jHsdu8vmq4ZCQC5eQ=)
3: ZvmDE4lp-NpnT3tcATPgwtAptMg.crl (hash: L7EZauDNST0ubHEwzds8FqMnqTZOR8+ewaHdltHjwaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ff:49:f2:dd:75:3b:be:3b:d0:ad:28:f2:71:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Validity
Not Before: Jun 28 20:00:59 2025 GMT
Not After : Jun 29 20:00:59 2025 GMT
Subject: CN=d8a996da1b64681babc3cd1de40407f277ab310a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:7d:ca:18:48:e1:6d:97:ac:fc:e6:f0:33:
ff:b3:86:0d:3c:24:c3:7f:47:0a:53:82:0f:66:40:
bb:f5:65:48:62:b7:16:8c:ce:55:dc:6f:45:cd:1f:
93:45:da:73:2b:0f:e8:c8:a3:e8:db:bf:44:49:80:
63:ec:ab:68:0b:9b:2b:36:d5:27:1a:42:ba:0b:82:
b2:78:1d:f2:fb:d1:05:4e:a9:11:3a:dd:13:7d:33:
4a:b2:9e:17:46:ce:92:20:d2:76:7c:e4:4a:d7:2e:
a8:93:17:a4:e1:9b:9a:30:cd:c9:da:59:ec:f7:77:
22:cf:06:d4:88:1e:e4:a0:07:4c:2a:22:3e:1d:74:
35:8e:aa:37:5b:cd:de:e7:61:3a:23:33:3c:05:29:
3d:10:92:22:77:f2:1b:17:87:2e:61:ff:c0:07:85:
01:6c:04:9e:af:9d:a7:11:11:31:30:6d:99:4f:7a:
66:49:da:a3:c5:4c:bf:73:9c:28:b4:1f:d3:d6:7d:
ab:87:9e:00:39:32:63:0a:7a:04:52:90:16:0a:67:
3c:b5:84:66:c3:4c:77:73:71:71:6b:7d:48:75:06:
f5:32:25:93:27:5f:ae:98:7d:01:cf:88:3f:5d:c4:
3e:d7:c6:04:f6:60:f0:7f:ed:43:b5:97:aa:cf:d2:
fa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A9:96:DA:1B:64:68:1B:AB:C3:CD:1D:E4:04:07:F2:77:AB:31:0A
X509v3 Authority Key Identifier:
keyid:66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8a:b8:fd:c3:7f:48:86:d9:20:2d:cb:a4:7b:ed:d4:7b:e4:
7e:d2:ed:33:ce:12:ff:04:7f:22:f4:31:2e:4c:46:19:82:4c:
ed:17:b7:cb:3c:f8:77:91:58:7c:5e:81:32:33:88:fd:4e:39:
68:f4:b1:04:c6:4a:7f:dd:03:31:21:f7:f9:b0:be:26:e2:42:
39:37:1b:ea:08:83:ef:48:c2:5a:16:ff:a9:89:ac:6c:e6:b7:
48:e5:60:8f:87:e0:6c:b6:f5:de:ba:8a:6e:82:2e:50:7b:85:
05:ed:f1:28:75:c9:ca:64:1f:32:d5:13:e3:14:42:39:23:04:
fa:8d:cd:fc:05:b0:f3:a3:5b:f9:e2:5d:87:b2:74:24:2a:be:
1e:5e:8a:92:98:90:6f:d7:63:97:a5:62:bd:62:b6:1d:83:98:
e7:43:7d:6d:92:c7:61:9b:47:7e:8d:a2:a7:48:43:f8:a6:2f:
66:ee:d4:09:9c:c2:b6:55:93:51:16:f0:0e:2a:c9:93:e5:b7:
72:9b:8d:4e:e1:91:6b:4e:07:2c:fa:8f:7a:24:66:78:e2:ed:
85:de:5a:7c:89:ef:8d:2d:c8:62:ae:0b:ee:24:79:da:40:9d:
e0:9e:b6:43:6e:01:43:01:c5:05:90:b8:f1:97:06:ba:fa:1d:
36:1f:0b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:28:13 2025 by rpki-client