Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier: /JyigxNMUd5uLdZiAa8QawsU4O+47FtV/izuLYuGM+c=
Subject key identifier: 72:BF:AF:15:BB:AB:E8:40:AE:BA:2B:B4:A6:8D:5C:65:92:52:62:E8
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 01974DE97F7FCA9242C1BEC363910062D30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 05:00:37 +0000
Manifest this update: Sun 08 Jun 2025 05:00:37 +0000
Manifest next update: Mon 09 Jun 2025 05:00:37 +0000
Files and hashes: 1: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: 7TfuGbDBKNLQ3OOPNzlUDWGY+cOuDF4nvb+9u9SWJyI=)
2: d98mF8VuRmp24iJGNGtsA82Qm3k.roa (hash: St6m9PVExFvayS/533ff6DbQIFfqWRPHTLli6ct6T54=)
3: pxA2emkj1Wi4hN6RLcWYaRGwohw.roa (hash: uZbURZqzj+fL5lJVe1ufQh9sUQe5T2Re+0qL38WwpV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:7f:7f:ca:92:42:c1:be:c3:63:91:00:62:d3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Jun 8 05:00:37 2025 GMT
Not After : Jun 9 05:00:37 2025 GMT
Subject: CN=72bfaf15bbabe840aeba2bb4a68d5c65925262e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:d0:b2:c3:87:90:96:64:c6:69:97:53:cc:
8f:a4:27:4a:c0:a5:cc:75:e8:b9:f2:67:63:e0:ae:
c6:5a:d7:49:e9:a8:96:16:ba:28:59:56:88:f8:5f:
8e:98:9f:a5:ca:34:6d:8f:11:f5:41:67:1b:85:60:
02:66:15:f8:ca:0f:03:b5:5a:b0:06:ec:0b:34:fe:
3b:c5:3a:5b:f1:6d:eb:10:67:d9:84:37:2a:8d:56:
0d:37:aa:b9:d9:3a:07:60:72:dd:6e:83:cd:aa:7a:
0f:e5:db:df:31:04:9c:7e:e0:45:d8:05:4b:d7:24:
d1:9c:05:d7:a3:0e:21:dd:1f:98:03:c2:a5:54:c5:
b4:df:5c:5c:d0:af:9e:76:40:a5:90:8a:95:b2:5f:
aa:23:82:a0:7b:a5:3d:85:1c:01:fe:ed:05:63:33:
58:f3:48:83:83:4a:a1:63:45:e3:d1:ff:fe:b3:ed:
60:f5:e6:1a:a5:d0:41:b3:1a:fe:a3:47:27:20:24:
31:23:76:1a:d5:36:89:5e:49:c8:6a:b4:c6:76:c5:
6f:16:1b:17:73:5e:9e:d2:ac:8b:01:80:22:94:60:
d1:29:96:6a:b3:49:46:5c:27:74:cc:16:ab:86:1d:
be:f8:09:f9:9d:ce:43:3e:af:f5:51:ed:3b:f8:eb:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BF:AF:15:BB:AB:E8:40:AE:BA:2B:B4:A6:8D:5C:65:92:52:62:E8
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:03:a9:b0:66:c8:d1:ea:4a:b0:12:76:a2:71:25:1b:d7:0f:
cd:d3:be:72:16:95:d8:a6:36:d3:90:d8:7a:81:69:cb:61:b5:
a8:cd:ad:b9:43:20:c1:0f:15:bd:38:a2:aa:fa:7d:09:a9:b5:
e2:0c:e6:29:f8:0c:77:a5:2e:0b:4f:95:d4:c0:df:35:12:69:
b9:6b:24:de:77:46:4e:19:5f:f0:3a:85:da:b4:01:35:f7:90:
c3:16:8e:3b:72:50:ca:e3:07:b8:29:af:98:8d:3d:ba:7d:00:
d2:72:1b:50:fd:99:bb:e7:49:84:d6:d9:b4:c5:d9:59:1a:0f:
62:56:6a:b0:20:00:32:0b:64:3e:90:1a:5e:42:4b:78:60:fd:
a2:d6:69:92:bb:7e:4f:83:61:f3:b7:7a:ca:b4:1e:4a:40:54:
f5:14:e1:e5:21:b2:33:16:7d:7a:5d:e0:96:81:3c:d6:3a:f5:
39:57:89:61:ec:31:97:1c:a7:f8:55:59:0d:7f:17:bf:12:57:
17:7f:73:d9:36:9e:62:ce:62:0f:eb:e2:ff:6f:4f:50:73:f0:
d3:bf:74:9b:53:f7:a3:7d:94:c4:b0:11:77:3a:f8:6f:b8:a0:
c2:a9:06:84:fb:b7:f0:32:54:c7:1e:a4:37:5f:0a:86:a8:05:
ee:ad:fe:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:44:17 2025 by rpki-client