Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
File: ZVrvPO89mvoCfbM1efSh_orZHG8.mft (raw, json)
Hash identifier: UIi+NwbqILvvs0wb9T+cGSHouNWsLzEXq4Kh2zXOkZg=
Subject key identifier: 84:B0:3A:1A:60:CA:7C:08:A7:A9:B7:02:E7:08:47:0C:F6:26:37:B5
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Certificate issuer: /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial: 019923A02D6EB6A2B67D5BCA0A56AAF6F8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
Manifest number: 11BB
Signing time: Sun 07 Sep 2025 10:02:03 +0000
Manifest this update: Sun 07 Sep 2025 10:02:03 +0000
Manifest next update: Mon 08 Sep 2025 10:02:03 +0000
Files and hashes: 1: 6awQ5vvLp2COkdyExVIfOWpcf0U.roa (hash: x8eRoJ1IMK9tcKhwbrAHFnXzsVa+tGQZBHOMDWjY4g4=)
2: ZQpO1aPpN8R6g2nPkZCJTaDtLDo.roa (hash: jW7tnAUthIc+57WN8d2CU9YQ1bHY6ehX+0z6UW+dFyI=)
3: ZVrvPO89mvoCfbM1efSh_orZHG8.crl (hash: bbWriSTdRS7zd4LW4xSytw+H3dLZV0WP5LfccIrpwM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:2d:6e:b6:a2:b6:7d:5b:ca:0a:56:aa:f6:f8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Validity
Not Before: Sep 7 10:02:03 2025 GMT
Not After : Sep 8 10:02:03 2025 GMT
Subject: CN=84b03a1a60ca7c08a7a9b702e708470cf62637b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:da:36:5d:34:50:fc:72:a3:00:3a:c0:5e:39:
80:c8:7e:bc:79:0d:07:89:0d:5e:7c:93:40:73:a5:
18:54:5a:35:9c:df:43:b6:eb:90:bb:22:19:37:11:
05:12:66:ca:29:ce:85:9a:04:e9:be:99:d6:c0:1b:
d0:37:56:03:b6:5e:7d:74:32:03:bc:6c:51:22:4a:
19:16:71:2e:b8:fb:cd:04:0f:43:8f:70:a0:b1:40:
52:51:04:13:a2:88:bc:89:b4:eb:74:3f:68:bf:a8:
bb:77:9f:c5:ca:3c:67:cf:c3:84:e2:0e:e5:bd:d9:
c4:b4:50:11:95:86:42:62:ef:78:fd:b4:2c:ee:fd:
59:e3:f9:ce:d5:c1:b3:fb:bc:4a:c4:4c:7f:dd:1f:
ca:ed:8c:ed:be:3a:74:e6:27:f5:ef:f5:2a:da:29:
a6:b7:cb:0d:1e:ad:41:8e:74:64:8a:cf:4a:f0:ff:
2f:43:07:b2:a7:64:70:d5:3f:43:6b:60:03:55:da:
7d:7e:3f:b4:3e:b7:2a:01:9e:40:1c:67:15:79:ee:
1b:f5:25:61:2c:4d:d5:41:71:f5:46:f2:75:32:7f:
da:db:ae:ec:d9:08:e4:3c:f9:90:6a:ec:4f:6f:aa:
1a:31:ac:5d:84:e5:a9:78:21:36:6c:9d:60:8f:3b:
bd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B0:3A:1A:60:CA:7C:08:A7:A9:B7:02:E7:08:47:0C:F6:26:37:B5
X509v3 Authority Key Identifier:
keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b2:5f:16:b7:6f:20:52:2a:bb:75:bd:78:d0:3f:cb:4e:83:
b1:b6:d9:b5:cb:c7:79:55:4e:14:6f:c7:c7:eb:05:3a:c9:f5:
c7:25:a5:aa:cb:ed:53:ab:ac:c5:9a:7a:c5:eb:f6:6d:f3:0c:
8f:e7:85:2f:ce:4a:1e:b0:50:5f:ea:2e:62:d3:c5:e0:5e:d1:
4b:1d:cb:49:36:e0:f8:e4:38:96:0a:ab:f8:b9:a6:41:6e:ae:
e8:66:cb:28:5d:ae:12:ec:31:c6:0e:03:37:95:98:07:69:b9:
94:20:78:ae:bf:86:8e:e7:06:9c:ed:37:c1:ee:3e:f1:ac:43:
94:91:f2:6d:fd:cd:28:04:17:80:d5:e9:0b:42:33:fc:cc:52:
17:4b:84:1e:69:26:da:01:e4:c5:f5:82:e6:53:94:cf:73:fc:
33:4f:16:1c:9a:8f:fb:eb:84:e3:c7:e8:d3:68:8a:58:f9:49:
02:2b:9d:0a:89:fc:26:05:40:0f:b7:21:7e:49:a3:dc:5c:fa:
96:46:fa:a8:64:37:f5:6c:3d:45:cd:48:fa:ee:6e:33:e4:fd:
de:77:e9:3f:ca:71:a0:fc:da:91:af:39:8b:da:16:e7:b6:3a:
2e:2c:e5:81:05:7e:c0:f5:05:59:01:29:3f:9f:56:e5:31:e7:
7f:b2:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:54 2025 by rpki-client