Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
File: zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft (raw, json)
Hash identifier: xwJ6ezSofC/k3WtsQpEqmT8jDCsHea0SYhfmCSpJ+74=
Subject key identifier: 25:20:B7:EE:CF:5C:11:4D:C4:9A:25:92:4B:94:07:52:E5:95:F5:A2
Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
Certificate issuer: /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Certificate serial: 01984AAF39350340575C81C945409465E1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
Manifest number: FD
Signing time: Sun 27 Jul 2025 07:00:54 +0000
Manifest this update: Sun 27 Jul 2025 07:00:54 +0000
Manifest next update: Mon 28 Jul 2025 07:00:54 +0000
Files and hashes: 1: 157MYG0IejEjRYj-j1k-QApt6pw.roa (hash: /mAnw2Tqo4MtXrtGStA4rPK8XkvjiW+Q+8q7MR/8qbg=)
2: zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl (hash: XXyNY/VFo0aS1q2as1+smzcQ1wp6aa+sPo0ZHPanVCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:39:35:03:40:57:5c:81:c9:45:40:94:65:e1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Validity
Not Before: Jul 27 07:00:54 2025 GMT
Not After : Jul 28 07:00:54 2025 GMT
Subject: CN=2520b7eecf5c114dc49a25924b940752e595f5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:07:fc:d2:fd:9e:69:c0:63:8c:99:4f:7f:
d5:5a:2c:4e:f1:67:14:89:97:9f:5a:e5:83:17:24:
c8:cd:2e:6e:f9:46:1f:48:15:94:45:44:ba:2e:c6:
58:de:55:96:c0:ef:68:66:84:00:d7:0a:88:42:1b:
8d:fc:04:d6:33:38:4c:67:cc:59:40:67:d5:37:84:
71:09:d9:93:a3:9e:e3:cd:af:85:50:a0:6d:48:54:
a0:fc:62:f4:1a:c9:5b:44:94:37:67:84:1a:94:8c:
6b:68:43:cf:03:2d:e8:fa:92:77:90:92:f8:51:46:
e1:d0:b6:af:1d:8a:e1:f9:6d:e0:d0:28:6d:94:87:
79:0e:49:ff:c6:f4:cb:10:0a:c8:b6:b0:e7:4f:f0:
0f:da:09:66:b9:0a:62:3c:12:e6:d2:59:ad:47:7d:
89:fe:d3:d3:38:3b:30:8b:0c:3c:0e:a2:0f:6f:10:
a7:b3:43:a8:59:29:88:a3:7c:8b:19:80:92:27:b0:
10:a3:70:b6:ba:99:33:e6:c5:41:7a:f0:da:3c:6c:
d9:c2:09:d5:00:51:8e:b2:e4:c8:42:78:fe:d2:58:
5c:4a:d2:f5:1a:44:cc:61:a6:0e:7b:1c:f8:9c:80:
08:ec:e4:d3:75:b4:e7:ac:8a:4e:0c:a2:e8:8f:37:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:20:B7:EE:CF:5C:11:4D:C4:9A:25:92:4B:94:07:52:E5:95:F5:A2
X509v3 Authority Key Identifier:
keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:93:18:82:c9:35:3f:b9:55:3b:a1:6b:74:9d:42:f0:d1:2a:
66:78:28:59:de:fb:3e:b3:47:6f:d7:20:12:9b:9f:a6:c7:32:
12:eb:f5:d4:73:51:f3:48:b6:ef:97:d4:1f:52:e6:b3:96:37:
de:f6:3a:e6:fb:b1:a4:66:4f:f2:6b:36:2d:0c:a6:35:80:df:
fb:b7:9d:02:eb:a1:3c:26:17:fa:5e:1a:1d:8e:15:59:ec:b0:
e2:76:4a:d0:17:30:6c:6a:15:c8:c3:29:98:ee:fa:62:6d:8a:
59:0e:83:f6:ca:9f:13:df:6b:df:c5:a9:ca:7a:d7:aa:75:92:
9e:59:ff:c6:a8:36:f5:00:71:b5:f3:ad:e1:73:12:16:84:36:
42:ac:52:1e:fd:ca:51:d1:13:c2:b6:75:22:1e:3b:bc:87:2a:
db:04:6e:a2:62:74:ef:33:10:f7:cb:0d:63:d8:f5:67:d2:19:
58:d9:de:1b:26:aa:cc:ed:c2:e0:03:25:68:90:1f:92:cb:2f:
84:25:e2:27:77:d5:a1:88:cc:a1:20:af:bf:4f:3c:d3:8e:51:
9f:6a:72:47:e0:4a:b2:75:65:14:90:6e:37:e6:8e:19:b5:e5:
5d:6f:18:94:78:03:c3:c0:bf:d1:40:27:a9:91:29:07:a3:8c:
4f:2c:93:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:15 2025 by rpki-client