Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: +ZfeEieAFWBFOwzpeUbZweAusev5h86XatsuY3J1AJg=
Subject key identifier: 77:D0:1C:03:34:D2:AA:71:4F:80:81:43:E8:37:C6:DB:92:78:41:61
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 01974C31F2CF40ED23EE9E7AB8E1E1B5900C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 1510
Signing time: Sat 07 Jun 2025 21:00:31 +0000
Manifest this update: Sat 07 Jun 2025 21:00:31 +0000
Manifest next update: Sun 08 Jun 2025 21:00:31 +0000
Files and hashes: 1: ZhlMSwf3_ZJIBXJaWSn_aND6IvY.roa (hash: I3W7A3cWQn7Ae7Qv1tAEghjtV2ZOTEutRM33xiC+rN4=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: SqFy/+8LD7HdCMhpt+QRPIPyRf6RzIjmHsB2zE4qW+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:f2:cf:40:ed:23:ee:9e:7a:b8:e1:e1:b5:90:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Jun 7 21:00:31 2025 GMT
Not After : Jun 8 21:00:31 2025 GMT
Subject: CN=77d01c0334d2aa714f808143e837c6db92784161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:66:09:92:d9:4a:0d:9e:93:a5:24:fe:a1:37:
91:8e:b3:73:9d:73:8f:58:a0:5a:2b:6d:3c:69:10:
00:76:ac:a0:1a:49:04:d7:e9:94:c9:28:f6:a4:2d:
5d:87:32:43:a8:07:9d:97:72:32:c0:ff:6b:e9:fd:
c0:3c:eb:a4:72:2f:c2:90:f0:7a:09:d6:30:41:b4:
16:c1:71:ae:8c:a0:f7:6f:ec:b2:98:05:c3:06:d2:
16:fa:f3:6e:2b:d8:b2:67:ee:22:98:88:d4:da:75:
a4:81:c0:89:32:a6:25:59:8e:8c:10:43:95:4a:e0:
a1:63:2f:b5:e8:8c:4a:33:05:ef:1e:d4:db:2e:ea:
a5:2b:0b:72:5d:36:7d:0d:18:0d:1e:80:0c:f4:24:
9a:b4:de:3b:9d:62:66:9b:94:38:5e:5d:29:b0:3a:
84:63:bd:7b:42:24:3d:25:32:1b:47:e3:a7:5e:6b:
5e:13:35:de:53:db:6a:5c:db:64:6e:6d:04:d2:31:
15:65:78:ea:b8:f9:52:9b:6d:75:a3:d9:ca:08:9f:
46:8d:c6:7c:30:14:e2:e7:26:bb:fc:f9:52:29:93:
fd:6a:4d:d3:05:06:e5:44:3e:ab:d5:17:c2:4d:97:
27:e3:1d:5c:b1:a5:7d:ee:76:db:8b:97:d3:d3:a0:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D0:1C:03:34:D2:AA:71:4F:80:81:43:E8:37:C6:DB:92:78:41:61
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:2f:20:dc:28:c9:f9:d0:45:05:29:82:5d:b6:b4:6d:c1:46:
ea:fe:ef:ef:86:83:27:3c:8c:b6:85:59:0f:75:2f:07:f9:73:
4f:04:1c:c9:ff:3e:b6:dd:30:0a:5a:0d:fb:24:9a:22:1e:71:
c1:00:9c:62:28:88:45:6d:69:5c:7a:63:9c:be:f9:78:fc:cf:
b0:7b:e5:93:86:a0:69:7e:92:2f:a2:28:98:8a:99:3c:67:27:
59:9e:14:8b:f7:48:59:ae:fb:2e:7c:c5:e5:1f:d9:7d:d5:1a:
1f:ff:05:04:b3:10:06:9f:cb:52:75:05:26:19:ab:84:4d:63:
95:f0:c4:28:9d:8a:8d:8e:d1:2d:53:06:d4:a0:0d:79:7f:a4:
21:5a:4b:75:17:b0:50:91:cc:3d:46:92:4c:a3:e6:d0:d0:79:
a1:69:ad:16:a5:9b:75:fc:ab:c6:3e:02:69:20:74:ef:6b:fa:
a9:26:4a:06:5e:ad:a8:0d:63:ac:12:7a:18:ca:f2:d9:36:54:
8c:e1:0e:f6:3c:7c:4c:ac:31:1f:4b:5f:e5:f5:a0:dc:7a:0d:
af:1e:e0:f0:27:b6:c5:95:12:58:fe:f4:66:6f:af:1c:bf:a6:
56:0a:59:f8:ce:0a:7a:ed:7a:6e:dc:89:8b:b6:5d:ab:9e:a1:
1b:92:70:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:19:32 2025 by rpki-client