Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: KhX1oQMzRmYO/QFRd9paNYaa8yozVi2QdiEzHksLLVE=
Subject key identifier: 11:73:0C:9F:F2:0A:7A:53:B6:81:B8:75:DD:C1:C8:00:BE:C7:04:A7
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 0197B70F4B1AA1F0B84E9435A1978264D7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 0206
Signing time: Sat 28 Jun 2025 15:02:02 +0000
Manifest this update: Sat 28 Jun 2025 15:02:02 +0000
Manifest next update: Sun 29 Jun 2025 15:02:02 +0000
Files and hashes: 1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=)
2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: 2WUwQDZM1CrwKETqKweok21x2WxNer7NkJpVfeH5YYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:4b:1a:a1:f0:b8:4e:94:35:a1:97:82:64:d7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Jun 28 15:02:02 2025 GMT
Not After : Jun 29 15:02:02 2025 GMT
Subject: CN=11730c9ff20a7a53b681b875ddc1c800bec704a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:6f:77:9c:ed:66:0a:ae:bd:06:4c:83:83:
a6:9e:25:84:45:99:2d:dd:83:c7:0b:48:57:91:28:
b9:fa:80:3f:bf:34:ac:b5:07:4f:62:ee:42:d7:ee:
9f:79:74:13:8f:6d:7b:16:ce:98:9b:69:03:6c:18:
3b:ce:b0:72:6f:97:6f:16:75:7e:f6:57:33:09:b6:
1e:51:a5:9c:32:b0:a0:f9:d3:dc:ee:d6:0b:49:e8:
4d:1b:3e:e4:3f:c4:ca:c9:bb:82:78:b7:70:9c:b9:
31:60:df:2a:a5:71:85:24:41:bc:7a:21:24:57:f3:
d5:b4:9c:b9:35:c5:eb:c0:54:2f:68:fa:3e:d2:b5:
95:fe:83:86:80:cd:9d:fb:8f:ca:1d:5b:41:6d:22:
28:99:1c:48:ba:0a:04:18:88:5f:9f:2b:de:68:3a:
26:5d:25:24:3b:40:c2:7a:5a:74:67:6e:be:ec:72:
cf:48:0c:82:20:ac:ba:e6:1b:63:d1:1a:a5:b1:6a:
6a:7f:96:41:5b:ac:5a:22:d7:72:21:97:c2:02:e4:
85:bb:a3:08:eb:10:ff:e7:71:86:ff:39:e6:8c:73:
5e:ae:04:67:44:03:74:af:cc:f2:25:f4:29:0b:07:
fd:72:46:41:ae:8e:1a:c5:58:74:a6:f9:c8:10:d8:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:73:0C:9F:F2:0A:7A:53:B6:81:B8:75:DD:C1:C8:00:BE:C7:04:A7
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:95:72:50:9d:e5:a7:56:9f:fc:13:90:1a:23:6f:30:c5:65:
c8:54:fc:e5:48:db:64:34:30:99:b1:cb:86:ac:13:78:e5:49:
b0:b2:41:78:32:a3:37:4c:54:f0:48:61:71:91:1a:58:b4:19:
10:98:41:cd:2d:43:60:88:d7:db:13:54:83:0a:41:27:c5:0a:
09:75:76:a5:e1:c9:a1:de:6b:45:59:09:91:e1:be:a1:d8:86:
af:3d:89:7d:6d:72:b3:2c:0f:f5:d9:09:92:f0:b1:f0:1e:03:
eb:1f:7d:e3:c7:cf:5b:64:89:16:81:40:88:ed:b4:14:0a:09:
38:5c:03:f1:04:ac:13:f3:03:39:b4:1e:12:c3:0c:f3:cd:5e:
cd:2e:3c:30:1c:fa:77:e7:fa:42:25:39:d7:ef:52:d0:06:0a:
4f:8c:82:38:16:c3:05:ae:f5:cd:f5:5e:c7:fb:53:0b:96:c9:
a5:16:d5:5f:9e:bb:be:c2:8b:fa:ae:43:cc:b5:f6:ba:58:f8:
18:14:4a:fa:8c:6b:99:d9:82:e3:dd:13:35:80:e0:1f:af:1f:
7c:b8:33:ee:17:b5:42:db:1c:78:9a:c7:dd:82:15:a1:ac:e1:
2d:0b:f4:e5:15:66:a1:9b:f2:06:2a:38:48:c7:da:cc:5e:5f:
d6:ae:37:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:34 2025 by rpki-client