Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: T9k5h0QsbpOv9j+veUtRugOlrY13j3UFyzWhYK3HHCs=
Subject key identifier: 98:AB:EE:5A:CE:DA:85:1D:ED:B8:C1:44:50:46:B0:0D:F2:F1:64:A7
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 01974B8DD17AF2029409B90ACD3029281B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 0536
Signing time: Sat 07 Jun 2025 18:01:14 +0000
Manifest this update: Sat 07 Jun 2025 18:01:14 +0000
Manifest next update: Sun 08 Jun 2025 18:01:14 +0000
Files and hashes: 1: BvxwicsH1ZVfBk6Q4DoBq1qq_Cg.roa (hash: 4jEtLdDvLytqaDFqVfLMjurgO3/mhXlRnfALOClKcPM=)
2: IaQkr4wJmPFX7MlGIC068T5SLas.roa (hash: LZsKSu9vsLm4Oqz5UZoGBpM3ebW0TaSiuaWmenP7SS0=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: Kr9whUXl4/IVR/PMV1J0w9WJrbzTUzokqZ/VG/hh0t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:d1:7a:f2:02:94:09:b9:0a:cd:30:29:28:1b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Jun 7 18:01:14 2025 GMT
Not After : Jun 8 18:01:14 2025 GMT
Subject: CN=98abee5aceda851dedb8c1445046b00df2f164a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:29:88:d7:75:57:38:58:ed:14:a9:42:e7:
f4:be:c9:c0:14:c2:ba:c4:3b:33:f9:b9:e8:a5:57:
a4:cd:a6:90:aa:b0:a2:68:be:fb:d3:52:b1:2b:25:
5e:93:4d:2a:1d:f6:f8:bf:39:52:d2:ed:cc:bc:16:
d0:d2:61:35:fc:21:dd:8d:d2:04:ef:b1:4d:16:04:
87:50:cb:5e:dc:19:64:73:49:73:26:53:f4:02:94:
1a:87:8b:c5:df:38:2a:bd:a6:23:69:d6:2a:62:91:
40:4a:d4:2c:98:8b:47:4f:af:a9:3a:ce:f2:01:a0:
4a:da:b5:4d:9a:d4:c5:41:e5:86:f8:b8:e1:20:ad:
6e:6c:d5:dc:50:70:66:64:a2:98:d8:af:70:88:f2:
03:58:54:4c:2c:95:c7:72:a7:e8:a8:84:93:1e:c7:
dd:16:3a:18:fa:7c:da:c9:e7:71:1a:0f:51:23:7e:
dd:db:47:9e:09:80:cc:7b:0f:55:03:7a:ac:3e:73:
20:eb:51:3c:db:8d:cc:15:c1:1f:3f:d1:24:6e:81:
d9:f9:b2:38:68:10:8f:25:d8:1b:e8:4d:6a:06:80:
39:b4:9c:1c:2b:87:8d:6f:7f:16:2e:1f:1f:0c:0c:
0c:8b:dc:84:4d:3f:3b:de:8f:48:dc:41:76:e4:61:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AB:EE:5A:CE:DA:85:1D:ED:B8:C1:44:50:46:B0:0D:F2:F1:64:A7
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:03:eb:f7:b3:ed:7a:64:43:9c:ac:a9:7b:4e:e6:fa:e2:81:
05:2a:a4:cb:18:b6:d3:80:8b:0e:8a:9a:9e:73:40:64:6c:8b:
32:4e:12:4f:9f:fe:46:c9:2a:2a:8e:0f:4d:57:aa:2a:15:04:
ce:77:2b:a2:2a:e2:29:14:90:94:b4:4b:50:83:14:20:14:b5:
ef:4b:2d:5f:99:a1:9c:30:c3:a0:5e:b0:d5:a7:0d:a9:59:fc:
5e:31:5e:da:ac:38:af:6c:6c:92:a8:31:59:8d:db:20:22:51:
3a:ee:41:d1:26:a5:3a:ec:69:c9:a0:90:ab:ce:a3:20:f4:11:
0b:ec:7e:a8:76:d8:3f:58:5b:bc:fc:91:84:0a:36:61:4e:92:
96:48:5b:08:7d:f7:bd:b2:ed:ce:2d:02:32:22:8a:e0:33:4c:
c3:c2:79:4b:59:7f:c2:ba:9b:1a:b3:d8:d5:0c:20:0a:1c:17:
6e:a4:22:cf:89:2c:85:db:5c:97:4b:8b:ef:03:24:4f:ea:1a:
59:a7:ce:01:8f:27:79:a7:eb:01:66:94:9e:95:98:08:00:67:
06:d3:57:ac:8f:33:6f:ce:27:31:61:7d:e1:6b:4e:e0:f9:b0:
7b:be:2e:6f:cf:0f:cc:53:29:98:6a:4f:90:e5:dd:a0:be:04:
4d:cb:83:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:09:20 2025 by rpki-client