Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier: E4PM+5jwNbYuBk40Uj3iK0O6/Un9CBGSFBSk52jOdi0=
Subject key identifier: 45:11:B9:4C:A8:3C:50:8C:9A:03:73:38:08:48:A2:BE:1A:D0:B4:6C
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 01974A43C58699C3442FFEAE8710484B7940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 12:00:44 +0000
Manifest this update: Sat 07 Jun 2025 12:00:44 +0000
Manifest next update: Sun 08 Jun 2025 12:00:44 +0000
Files and hashes: 1: bveNVNZQRYaQggK5H4XE-ImTkzI.roa (hash: RsefAt4XMHkoKxXyBZqmXBMXlqDjbew2tMCZMb8OiUg=)
2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: VnQnd1D2Jh2W2iskQwFCyKv0paIprOpdGJRpsntBi7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:c5:86:99:c3:44:2f:fe:ae:87:10:48:4b:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Jun 7 12:00:44 2025 GMT
Not After : Jun 8 12:00:44 2025 GMT
Subject: CN=4511b94ca83c508c9a0373380848a2be1ad0b46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:07:1f:c2:aa:c1:69:f3:ed:82:15:06:20:a5:
8f:cc:7c:1e:f1:3a:29:87:21:bb:5e:06:de:57:6f:
9a:63:fa:0b:cd:c3:bc:85:8c:cf:e4:15:8e:b0:86:
ce:c5:96:3a:93:f7:7c:1c:03:48:e7:17:d0:6f:01:
0b:a1:25:28:d1:7d:47:15:3b:39:2a:7a:c6:88:0f:
41:1a:81:6e:9b:0c:87:20:b8:90:2a:0d:53:a0:8a:
3e:95:2e:9d:77:49:18:b5:1a:09:28:9f:c1:15:4d:
35:cb:8b:85:ef:d6:5a:9d:65:76:31:b8:9a:ee:4a:
81:cc:b6:7f:55:5f:1d:61:dc:19:49:1f:75:d0:14:
2c:60:af:1c:be:9b:26:57:bd:28:7e:a6:b4:c3:a4:
b8:cd:06:94:86:a9:74:d6:e9:cc:fd:cf:fc:ec:a1:
c7:20:74:59:eb:a2:ee:11:2c:b4:76:64:4b:fd:bf:
ec:a0:1a:ef:02:c8:af:d9:56:9b:5e:1a:eb:7f:58:
33:af:c7:ef:18:87:69:f4:32:93:09:0a:3b:91:b4:
13:dc:cf:3a:10:87:04:33:ad:ce:ec:b8:0f:cd:b7:
b5:aa:2a:01:f1:4d:85:55:20:12:af:7d:e9:4f:61:
57:36:79:ff:80:25:ca:03:4c:04:ae:ba:23:a6:a8:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:11:B9:4C:A8:3C:50:8C:9A:03:73:38:08:48:A2:BE:1A:D0:B4:6C
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:af:9d:fc:52:b1:27:58:dc:6a:fe:be:b1:4f:cc:16:03:c1:
8d:5e:58:29:87:86:a7:af:80:e7:49:eb:28:e6:c3:aa:ba:c5:
56:b0:47:94:de:eb:9e:6a:7e:df:44:07:cf:de:72:e0:bc:59:
1a:98:e4:06:ba:75:92:5f:64:f2:d2:ff:9d:6d:28:0b:95:49:
ab:b1:fa:71:0f:d2:2a:8c:21:bb:5d:f6:d9:cd:80:9b:1b:30:
f0:4d:80:d9:72:24:d0:2c:e1:9d:a0:e8:97:4b:79:92:c4:36:
b4:ef:f4:77:4d:b1:40:36:30:f3:de:81:82:32:84:7c:71:c4:
db:50:8b:85:00:60:b7:2e:79:df:c0:3a:c7:57:81:df:2b:37:
4e:60:7c:8e:30:97:40:79:ae:ad:62:4c:b4:d2:6c:53:83:21:
12:3d:c8:81:54:04:94:5b:28:2b:4e:cf:5b:27:d1:a6:34:ae:
bf:39:68:5f:a7:56:fa:84:be:14:8d:ef:92:1c:09:f2:fb:a7:
69:cd:f7:f3:e5:ec:81:cf:7c:e4:e9:8f:f9:fb:a9:6e:24:57:
b4:f4:01:66:06:e3:87:14:01:40:67:89:22:4f:06:11:cb:68:
b2:c0:5e:9e:2b:8e:66:26:77:53:1d:bc:35:18:ea:3f:96:c3:
e3:8b:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:36:22 2025 by rpki-client