Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
File: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft (raw, json)
Hash identifier: gN3hfaQPpXUjXdS2oNAisxGWP9UtGTYQ8gKraHeGos8=
Subject key identifier: 53:C1:97:3A:D2:A2:19:B5:3B:92:1A:20:4F:06:4B:86:9B:60:65:8E
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Certificate issuer: /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial: 01974FD7CC35B597A485F4EC21869FD2EBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
Manifest number: 0B7B
Signing time: Sun 08 Jun 2025 14:00:31 +0000
Manifest this update: Sun 08 Jun 2025 14:00:31 +0000
Manifest next update: Mon 09 Jun 2025 14:00:31 +0000
Files and hashes: 1: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl (hash: sZMWbbTEAkM5bMkbJR4ZEv9W1880vplkdUsGhIp/tEE=)
2: 1-DlikylqXiNLfsxUp7xWNcqG9Zo.roa (hash: VbRr/OReqs5w+OHxhY9YXuluPoozwY2bo9ixoFMaSnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:cc:35:b5:97:a4:85:f4:ec:21:86:9f:d2:eb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
Validity
Not Before: Jun 8 14:00:31 2025 GMT
Not After : Jun 9 14:00:31 2025 GMT
Subject: CN=53c1973ad2a219b53b921a204f064b869b60658e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:8f:b9:b4:b5:ce:7d:f0:fe:9e:e3:71:9c:
c5:be:df:48:0d:fe:bf:78:31:6b:29:b4:b9:6d:3b:
f3:36:cd:8a:6b:65:e5:f9:b7:1f:08:c9:9f:95:56:
b6:23:2d:67:83:b9:f8:89:e1:ec:ef:a2:44:d9:29:
64:72:bf:83:11:e8:ee:e0:ae:49:5c:5b:91:8d:07:
b5:38:53:e7:61:26:15:b8:16:6c:45:fa:e5:80:4f:
05:db:c5:da:d6:89:ed:72:30:7e:ab:06:91:50:61:
07:81:2b:ac:9b:46:80:89:95:0b:6a:d7:ea:ca:07:
da:fc:56:1b:ea:76:c2:12:70:91:16:e8:4f:5c:7a:
d4:ab:94:0e:e0:a6:c1:12:f9:26:e6:7d:b0:69:6b:
9f:09:2c:98:cc:15:d5:0d:1f:e3:e0:68:4c:8d:ed:
32:77:2a:d4:6d:c1:c0:68:de:02:2f:9e:6b:49:c8:
ba:65:d4:15:37:d0:94:9f:85:df:b5:a6:af:12:9e:
75:ff:35:59:ea:32:bf:49:d4:d5:fd:0e:ff:c6:64:
af:4d:dd:67:6c:72:a9:9c:74:a2:21:96:87:0d:ef:
ce:73:d9:32:08:95:9e:f4:60:5b:54:e0:a7:01:f4:
50:a7:87:a1:2a:e7:f0:b6:84:2a:64:9c:bb:8a:5a:
4e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C1:97:3A:D2:A2:19:B5:3B:92:1A:20:4F:06:4B:86:9B:60:65:8E
X509v3 Authority Key Identifier:
keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:25:53:55:86:e2:97:c3:a9:5c:a4:0b:65:89:43:45:63:32:
eb:55:aa:29:9d:b9:c1:b6:d3:60:5b:00:b6:ea:60:11:f6:72:
be:33:c2:49:ac:a1:62:df:d2:7c:c6:94:91:d6:a2:b3:68:0e:
7f:04:95:62:10:5d:34:46:e3:d4:f6:b8:23:5c:73:e4:1d:55:
51:22:e6:1d:11:04:0b:9c:32:cd:37:8b:d7:ca:7f:d4:de:01:
5e:7c:70:a3:00:54:ae:b9:11:52:35:9e:ed:4d:f3:8e:d0:38:
72:ca:60:ba:ea:83:8e:c0:8b:f2:df:1f:5d:de:20:6c:92:89:
22:8b:d8:1d:75:10:ac:cd:3b:54:62:a9:b6:1a:18:1a:e1:58:
0b:cd:50:40:18:49:ed:80:b7:10:66:74:b0:d5:94:a5:04:21:
8d:cf:67:37:3b:7a:3e:52:bc:1e:11:74:31:ed:e1:26:15:35:
f9:c4:94:d7:99:1f:69:58:a7:64:e3:50:8a:54:aa:f3:4c:44:
a8:aa:37:e9:ee:7b:34:ac:60:56:de:be:87:42:56:d8:9f:0a:
f9:72:b8:da:47:4e:b4:d2:bd:cf:d7:74:1a:8d:bf:b1:21:e9:
e2:a4:88:75:02:a9:26:f3:49:2a:d4:a8:74:33:0c:9c:22:19:
2a:b5:a5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:07:03 2025 by rpki-client