Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json)
Hash identifier: B2j0kCVP7OUSxQPHRrXPbcGACwiQ0WkcyuIW0i9HQ+U=
Subject key identifier: 87:E8:36:A4:F3:BF:15:07:5F:60:11:F2:EF:9E:0A:EA:D0:BC:E7:76
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial: 019748FA65CDFA5FCEC2A7CC1E4F23A757C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 06:00:59 +0000
Manifest this update: Sat 07 Jun 2025 06:00:59 +0000
Manifest next update: Sun 08 Jun 2025 06:00:59 +0000
Files and hashes: 1: c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa (hash: wRoePPTw0QAoUH4ArBeWw9mmFYBdS/sgugaB1c1wFFw=)
2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: W5IgzDxcV+7Fgl/heZvn87YRA0439j0jcJbP4YEFY1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:65:cd:fa:5f:ce:c2:a7:cc:1e:4f:23:a7:57:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Validity
Not Before: Jun 7 06:00:59 2025 GMT
Not After : Jun 8 06:00:59 2025 GMT
Subject: CN=87e836a4f3bf15075f6011f2ef9e0aead0bce776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:d4:f7:cd:ee:8c:48:0e:ca:1f:44:36:cf:
37:37:29:1d:e3:d9:f1:18:ab:c1:85:ea:1a:96:62:
ea:07:a7:08:e6:cc:fe:05:bf:0e:3d:0f:a9:5a:61:
83:1d:73:f9:03:2c:e0:0f:54:4e:af:1a:7a:d2:bb:
ac:2a:06:28:9e:cd:00:56:c4:9f:3e:89:14:6e:5a:
ef:d0:08:95:16:c7:1e:73:a5:69:4f:d5:35:90:2c:
7e:57:02:b1:1b:1d:cb:34:d2:71:67:db:93:09:6f:
0e:16:07:ee:52:9a:2b:b0:3e:cc:32:8e:9f:6a:03:
ec:33:63:de:92:88:55:c9:c1:86:8e:7e:a7:4d:9b:
85:23:c1:4a:ec:64:2d:f5:34:c0:e9:c8:fd:ef:53:
b7:8e:57:ee:f1:1a:19:94:4e:ff:d9:1d:40:a6:bb:
1b:a7:7d:a0:6d:9d:45:5f:28:23:5a:03:f9:6e:32:
cc:a7:d9:21:1f:ef:07:57:29:4f:2c:93:9e:c2:9c:
f3:b8:10:6a:46:e7:1b:4a:dd:91:00:2e:49:93:0f:
bf:2f:c7:6b:1a:02:be:ad:8d:05:56:91:cf:2e:6b:
10:fb:e9:c6:96:54:21:1c:69:8e:03:c9:79:60:c1:
28:48:49:34:57:70:5a:b8:19:57:33:a6:94:92:21:
92:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E8:36:A4:F3:BF:15:07:5F:60:11:F2:EF:9E:0A:EA:D0:BC:E7:76
X509v3 Authority Key Identifier:
keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ec:64:58:a9:16:ca:68:55:9e:4e:90:1b:14:09:a5:c3:97:
8b:7a:9e:14:b9:11:4b:a4:3c:c1:b0:d3:8a:26:5e:d3:bd:5d:
09:5c:af:43:9d:82:6a:40:10:3e:41:08:2e:a7:0e:8a:ae:74:
ae:e2:4e:f2:39:eb:49:3a:09:16:43:c5:b5:a4:2b:15:88:e8:
5d:36:91:27:72:b4:92:03:96:de:02:8a:a8:01:eb:0f:bc:43:
bb:f2:d3:63:1f:77:13:25:b7:1f:b2:11:72:19:b5:58:3f:30:
46:ef:18:54:00:9c:3f:05:8b:b5:53:09:ff:d6:2d:1a:c8:66:
f3:28:3e:18:47:f6:cc:d1:3d:4d:d3:1a:cd:e1:1c:ba:f1:2f:
52:4b:93:ed:ab:a3:37:51:08:4c:a7:44:62:56:ee:af:e1:4b:
d8:40:06:5c:27:00:51:74:1a:32:83:92:4c:06:8d:29:aa:2a:
fe:9e:05:30:00:c1:f8:e7:41:2b:dc:8d:28:23:85:a8:02:f2:
37:08:b0:95:00:ef:e0:ca:ca:2d:f7:90:e2:89:bb:fe:e9:f4:
75:ba:ba:e4:c2:3f:e2:83:b4:a1:f8:d4:d8:ce:4a:54:5c:0a:
8e:ee:6b:68:62:c1:af:6d:a6:92:53:66:50:95:a0:71:90:3d:
8b:fb:e4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:01 2025 by rpki-client