Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
File: ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json)
Hash identifier: gPR0nn274z25+tN80wiWJT+m6aVeYC1/jAjJhc6N5m0=
Subject key identifier: 53:08:BF:93:85:8F:4A:45:3D:E8:EB:71:CA:D3:76:3D:9B:3C:95:CA
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Certificate issuer: /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial: 01974A0CBA971E92CF22EE82F241339BFAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
Manifest number: 109C
Signing time: Sat 07 Jun 2025 11:00:37 +0000
Manifest this update: Sat 07 Jun 2025 11:00:37 +0000
Manifest next update: Sun 08 Jun 2025 11:00:37 +0000
Files and hashes: 1: HQMtz4B5CutgL-N5xfaUf94QUuU.roa (hash: fTXkjV5cqvWtMWH5Zll2nFHO95PtDXPWClZJchYPGPQ=)
2: ToVVgCXoslxYoBXJ20dyufaadGQ.roa (hash: pQi4XzfxTHe7c0yuSomBxVB+uUc5SATfiB1mQxdDEJI=)
3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: HZwG1rTUofg24TaRF1Gjl+ApuToCanxDrF8S8+yIJk8=)
4: vn_6MTwelLUlLNDCZO0aRScUDTY.roa (hash: nZ+qSFZb5cEckLJHgsHRLeTqOf+uDgCygsG9DhaI2LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:ba:97:1e:92:cf:22:ee:82:f2:41:33:9b:fa:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Validity
Not Before: Jun 7 11:00:37 2025 GMT
Not After : Jun 8 11:00:37 2025 GMT
Subject: CN=5308bf93858f4a453de8eb71cad3763d9b3c95ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:be:f7:a2:00:6c:11:60:f6:a9:60:7d:34:
41:ff:dc:d5:dc:be:fe:84:fb:6e:16:30:9b:c5:2a:
7f:dd:a7:07:ae:02:61:34:ef:a6:4d:4c:b7:67:70:
73:4c:31:7b:d8:1b:25:d4:ab:be:75:73:6d:a5:1e:
f1:01:a1:cd:a8:60:92:7b:dc:3a:a1:ac:ae:a0:67:
b5:d3:93:8b:08:94:f7:e2:a1:25:1f:ae:ca:a4:24:
c8:81:d1:53:66:47:ef:f5:7c:07:f8:0c:ad:e6:a7:
3a:c8:3f:84:0d:c3:7c:6b:19:c8:91:57:e6:48:cf:
71:6f:c8:7c:90:ae:6d:b9:ac:c9:7d:08:28:74:83:
e3:3f:8e:23:60:8e:31:52:aa:fe:4f:d9:77:2d:22:
f7:09:fd:a3:56:5a:36:28:e7:2a:66:87:e9:5e:95:
0f:b6:6c:8b:28:92:23:68:ec:94:a9:51:14:39:df:
d0:85:bc:00:24:6a:77:41:88:44:b2:24:87:0f:47:
25:91:eb:99:80:28:8f:65:ec:5d:9b:3e:58:9c:f3:
75:de:37:fa:a0:ac:cc:4e:cf:9f:d1:df:8c:94:69:
69:54:e2:f1:1b:b1:8e:21:ad:e2:a7:33:69:95:07:
94:4a:ab:54:12:fb:5b:c9:01:fb:2a:3b:9b:4b:65:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:08:BF:93:85:8F:4A:45:3D:E8:EB:71:CA:D3:76:3D:9B:3C:95:CA
X509v3 Authority Key Identifier:
keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:83:b3:be:e1:23:50:16:b9:7e:43:f7:a1:b4:e9:19:b5:df:
72:4b:34:69:52:44:1b:93:e0:75:20:d7:c2:d1:09:20:f8:fa:
3b:25:cb:58:89:b3:fe:40:2d:7b:d3:ca:a1:bf:01:d3:50:b9:
7c:81:d4:2a:cd:33:7b:10:15:fb:24:fa:aa:e7:f8:a7:6b:3b:
c4:1a:54:92:3d:7a:29:04:3a:ac:cd:86:7c:32:c5:86:00:37:
cb:a1:87:7b:1f:23:c2:03:4e:29:15:94:08:b6:87:01:f5:ec:
ec:02:47:0e:fb:59:06:72:66:d1:c5:1e:7b:59:11:81:4a:35:
d5:77:46:5d:b8:7e:4f:9c:ec:dd:6c:f7:c5:d2:75:ab:3b:5a:
92:55:0b:91:be:47:6b:fd:12:1b:e2:23:d1:c9:94:a5:ba:41:
fa:ce:81:28:68:8e:2a:2c:a6:53:f4:a6:74:20:0f:9b:c0:7f:
70:e2:43:4d:d7:6c:17:bd:f9:4b:6c:d4:95:61:b7:fb:00:df:
9b:54:a3:40:19:d9:4a:2a:aa:7d:35:ff:8f:7d:ff:62:18:d1:
f2:84:55:c2:1e:49:15:f8:3e:d3:f5:90:37:4b:24:07:dc:eb:
d3:3c:23:14:2d:a1:c9:d4:49:43:32:f6:17:93:bd:bf:f3:17:
2c:38:09:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:33 2025 by rpki-client