Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
File: ZvmDE4lp-NpnT3tcATPgwtAptMg.mft (raw, json)
Hash identifier: P0efgSVFNUKGSZ5suwUQwZS6WFvGMyZVLv5j7q5q3Zk=
Subject key identifier: 5F:16:79:10:02:9D:02:56:CF:48:B1:D3:D0:24:99:84:58:5D:EC:FA
Authority key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
Certificate issuer: /CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Certificate serial: 0197D8F549366A5E5D1669004450869F8BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
Manifest number: 15C5
Signing time: Sat 05 Jul 2025 05:00:43 +0000
Manifest this update: Sat 05 Jul 2025 05:00:43 +0000
Manifest next update: Sun 06 Jul 2025 05:00:43 +0000
Files and hashes: 1: 1-mam0MNYijlsUMBvUuzN8saQbSA.roa (hash: 7/MiQ2GbC+9P+jtI1s6HZozavARFckuLPrIIYS9KDUU=)
2: P1AdxUyUjVnpvB2qJGHDHOSGgqE.roa (hash: X7W16uCiCg3Hk2XdddLjkg7PZ/jHsdu8vmq4ZCQC5eQ=)
3: ZvmDE4lp-NpnT3tcATPgwtAptMg.crl (hash: 5zTBChOhabBnoPj0lrMquRUNf7x+eoBOESGqOR1qVSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:f5:49:36:6a:5e:5d:16:69:00:44:50:86:9f:8b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Validity
Not Before: Jul 5 05:00:43 2025 GMT
Not After : Jul 6 05:00:43 2025 GMT
Subject: CN=5f167910029d0256cf48b1d3d0249984585decfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:9c:97:c1:da:26:70:21:82:eb:1f:c3:af:
6f:9f:da:22:3d:29:b7:1f:ed:d4:05:19:65:72:f2:
e0:4a:38:60:27:0e:cc:e0:39:55:aa:56:fa:8f:b6:
81:a9:08:fc:89:42:69:3d:41:b0:ce:d3:6a:32:cf:
9b:9b:bb:fb:17:75:e2:84:04:ac:72:53:c3:70:8a:
ce:29:9b:5a:1f:fd:36:70:cb:1e:01:93:24:15:4b:
c4:16:66:d5:e6:87:38:74:b7:8e:d6:74:52:85:0b:
11:64:d0:ed:95:d3:5e:13:2b:06:72:35:71:2a:07:
cc:37:3e:c6:d5:53:a9:d1:7d:23:89:73:16:0a:48:
2d:e0:3f:5d:66:57:da:88:ff:ef:6f:c9:26:77:2e:
42:99:98:80:b4:dd:40:f0:0d:34:cb:b3:b0:1b:a1:
eb:17:dd:cf:b2:ce:11:9f:73:c8:5b:64:10:7f:7a:
2b:b7:77:eb:6d:8f:22:b6:b0:2f:f5:e7:03:53:ec:
10:88:9b:74:dd:ed:b3:35:48:95:ad:6c:4a:d1:8d:
13:ae:01:a0:1c:26:cd:d7:e2:65:72:86:f1:95:6e:
da:c0:23:f5:db:44:1d:36:28:a7:95:b5:ef:2e:97:
78:85:b9:4d:13:74:0b:d1:4f:f7:d7:b4:c4:9f:3f:
25:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:16:79:10:02:9D:02:56:CF:48:B1:D3:D0:24:99:84:58:5D:EC:FA
X509v3 Authority Key Identifier:
keyid:66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:be:ad:ac:0b:56:bf:31:18:f6:4a:3e:0b:0f:c5:af:bd:0f:
f4:7d:9a:b2:3d:b9:fe:ac:bf:6b:a4:b9:c5:ff:ca:52:64:8c:
f8:61:86:29:51:b7:b5:19:f4:5b:64:b1:7b:0b:db:29:2c:3a:
ff:f4:cd:a3:8f:2d:17:45:5b:7f:32:f3:4d:96:3a:88:15:1a:
cd:d3:cd:aa:53:2c:93:2d:8e:04:a4:6d:17:3a:18:f3:8a:9b:
4c:ea:33:07:66:d7:bc:b8:b7:f1:5c:a7:a2:0f:f0:a3:ce:7e:
f7:31:57:19:af:9a:38:19:9c:e7:f4:46:90:64:64:2a:08:ef:
27:3d:92:41:0f:d0:7f:ad:15:72:0d:1b:ba:b9:33:7f:80:4e:
1f:88:e6:da:97:82:29:0a:b5:ab:82:ac:3f:e2:e3:23:bd:5b:
51:7a:9b:01:6f:5f:f8:39:da:42:80:c1:46:2d:1d:40:76:e4:
0d:53:66:ec:a0:6b:31:82:37:af:f2:1d:b9:3b:35:5b:a1:f1:
3c:b7:02:e1:50:af:25:e3:3a:a6:ee:60:65:9d:77:1d:dc:01:
ae:f9:89:68:a5:1d:9e:6c:b4:3d:2e:6d:b8:86:5f:76:d8:97:
18:f9:eb:31:83:6b:6f:0f:51:3a:4c:2e:67:50:bd:6d:69:4e:
ad:df:48:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:51:40 2025 by rpki-client