Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
File: ZeuO9EGD-OOpyIenviaz8HE8E70.mft (raw, json)
Hash identifier: mSlB1RUkyQQ9Lh4n83Pheg2gPfNsWVgWr3Li7lMH8kw=
Subject key identifier: 7A:B0:C2:B8:47:DB:F8:A7:0F:87:7F:05:F0:78:0F:B3:E1:3E:D3:9E
Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Certificate issuer: /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Certificate serial: 01974D7BFE8664112471E87F6B5A00DBC735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
Manifest number: 0B3C
Signing time: Sun 08 Jun 2025 03:01:01 +0000
Manifest this update: Sun 08 Jun 2025 03:01:01 +0000
Manifest next update: Mon 09 Jun 2025 03:01:01 +0000
Files and hashes: 1: ZeuO9EGD-OOpyIenviaz8HE8E70.crl (hash: S3GK0DtSxcTK0Ax3OIM7n7sAFn9pBRT0Xkd4apst1DU=)
2: _nLH4yuuFQfyAsGvM-Hn21cXD8E.roa (hash: DfpdmgrcGh1AJupG4dykdHnlomMk4nG6aWIUzegDtp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:fe:86:64:11:24:71:e8:7f:6b:5a:00:db:c7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Validity
Not Before: Jun 8 03:01:01 2025 GMT
Not After : Jun 9 03:01:01 2025 GMT
Subject: CN=7ab0c2b847dbf8a70f877f05f0780fb3e13ed39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:7f:86:91:e3:fd:74:8c:37:98:a3:78:9e:
58:b9:01:d3:df:de:e5:48:1d:27:96:02:a9:12:89:
1c:12:9d:b0:b4:59:73:68:f1:61:6e:34:42:ab:fb:
6b:5c:58:ba:91:86:29:af:d5:6b:9d:d4:83:0a:53:
98:02:0f:58:b5:b2:49:db:d9:53:c6:d9:70:c5:7f:
37:5f:f3:7d:7b:07:63:f7:d1:cc:2b:80:3c:39:ca:
58:d5:0d:e7:49:7b:1e:8f:1c:0c:f8:ec:e6:c1:3c:
16:60:03:26:f3:51:c1:9e:77:36:88:3b:f5:28:cf:
e1:41:5c:38:4c:5b:9b:6a:55:4c:8b:1a:8d:45:89:
b1:2e:a7:14:04:4d:8b:30:51:e8:82:cb:15:f5:4f:
7a:6d:2a:00:2d:d6:4c:db:9c:a7:bf:49:de:62:5b:
05:35:b0:1d:af:0a:b5:17:d7:34:96:ba:0e:de:86:
f2:a8:95:af:86:67:dc:ca:d9:9f:71:7f:15:89:ee:
f0:59:8e:87:d3:7a:f8:6a:f8:0c:fb:d0:25:78:bb:
d9:0d:6e:49:bb:01:08:a4:16:c1:20:94:50:30:79:
f1:7c:c6:3e:f4:92:23:dc:88:7d:54:c1:35:0d:5a:
83:3a:68:11:1e:de:54:77:18:30:4a:23:3f:c3:57:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B0:C2:B8:47:DB:F8:A7:0F:87:7F:05:F0:78:0F:B3:E1:3E:D3:9E
X509v3 Authority Key Identifier:
keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:85:8f:ba:fd:8f:2e:ff:2f:e6:d4:82:62:70:44:c2:1d:4d:
2e:23:78:e2:25:21:8a:fc:32:2c:fb:02:fa:ba:e9:94:6f:34:
d3:5d:25:ee:70:38:ac:29:02:0d:7e:71:1e:81:db:d1:c6:57:
3e:24:7c:4e:12:d4:ea:0f:97:9f:2d:9b:54:91:b3:60:c0:8f:
4b:00:26:78:09:b0:d6:56:5e:e2:64:b3:c1:06:f9:10:f1:7a:
cd:39:13:cb:1a:58:c5:b4:68:12:d4:11:cc:2a:05:23:fc:5a:
d5:08:0b:09:92:19:e9:96:66:e4:96:01:c7:80:d1:02:f0:13:
ad:4b:12:9a:2e:84:df:4c:5a:31:db:68:82:bf:e0:40:24:ac:
af:1d:1e:06:ca:00:fd:93:d2:04:49:ef:c3:81:be:fa:b4:ad:
d2:21:eb:94:c8:b0:96:cf:8d:8c:6e:89:da:94:84:3b:18:bf:
a7:d0:7b:da:b6:23:39:92:15:98:13:0a:24:d7:25:3f:1e:e3:
e5:30:37:20:2b:0d:4b:9b:62:c3:a6:64:d1:30:2e:50:6c:83:
05:04:11:21:be:94:be:5d:06:bd:22:c5:21:4f:3e:90:eb:6f:
11:a4:a9:69:5b:9a:a0:b1:79:7a:36:f1:bd:d0:88:af:4c:f7:
7d:c9:2c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:36:42 2025 by rpki-client