Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: eveShgwye/h6SbiOcYmeLIZMDWsLSPmHBeT++5QsEZY=
Subject key identifier: 28:93:5F:45:3C:CA:8C:5C:14:DD:91:60:D8:2D:A3:B9:5E:3D:51:21
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 01974967C60A6CC3DCC55CA8EE42CD7A5449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 04FF
Signing time: Sat 07 Jun 2025 08:00:27 +0000
Manifest this update: Sat 07 Jun 2025 08:00:27 +0000
Manifest next update: Sun 08 Jun 2025 08:00:27 +0000
Files and hashes: 1: 3tamc3sOw67HPVcPTfi-B2O8yU0.roa (hash: VKiy/+EDaLvbaW8IRlukGidMdNs6XDi7iV1i6VLWYS0=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: JnqdLK0kTpd8fJHtzy/w43n6uWnE8pLw9H1kPHofvQ4=)
3: oMFhnG_2Z4roWQc3WgoG1HgKdEc.roa (hash: QGs1HFAKixXlw1vT4Oet6ENYZoHU7usshB/hp90M1GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:c6:0a:6c:c3:dc:c5:5c:a8:ee:42:cd:7a:54:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Jun 7 08:00:27 2025 GMT
Not After : Jun 8 08:00:27 2025 GMT
Subject: CN=28935f453cca8c5c14dd9160d82da3b95e3d5121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:99:00:4e:51:3d:f8:37:80:a9:fa:0d:11:
c7:d3:12:9b:04:88:e4:63:00:3f:ba:b8:88:97:15:
e3:9e:69:de:eb:0f:e8:40:d8:33:e2:af:4b:5a:ba:
3d:15:51:75:9e:51:4f:dd:fb:29:a1:bc:73:28:a0:
3a:77:14:23:7c:64:f6:cf:91:75:91:6e:a8:97:cc:
53:70:9b:36:7b:8f:30:cc:b0:e3:a1:98:f0:b9:5b:
f2:12:39:91:af:f8:15:b4:6b:eb:dd:f1:36:52:58:
64:84:eb:5f:0b:cb:f7:6e:05:84:e3:0e:31:47:8f:
52:bd:a7:60:cc:35:92:a6:8b:86:92:16:be:ea:0a:
dc:69:e9:82:b8:8c:9b:74:ef:6c:b4:1d:99:26:f3:
87:6f:99:d6:d6:b3:e9:6a:40:f6:a8:a9:1a:d6:27:
4a:68:0a:e4:29:dc:1f:86:26:06:2d:a7:36:01:e5:
61:1c:8f:e3:56:b4:68:bf:fa:d1:71:f7:16:51:76:
6c:93:63:bb:3a:cb:74:fa:61:bf:e3:e1:25:e5:1e:
03:9e:10:41:ff:6e:6e:e6:a0:aa:2a:e0:4d:47:34:
76:ae:25:81:14:57:c8:33:1c:6b:dc:4c:0b:12:48:
97:b0:65:bc:c2:ab:0b:6d:51:f6:c7:7d:e4:36:25:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:93:5F:45:3C:CA:8C:5C:14:DD:91:60:D8:2D:A3:B9:5E:3D:51:21
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:17:05:02:a8:4b:c1:87:75:fa:7b:ea:9d:80:11:7d:a4:63:
32:7b:92:c8:da:07:c7:9b:cd:3a:3e:5e:b7:de:28:e6:87:cd:
8e:52:ad:e8:47:1c:b6:14:07:4e:9b:61:2e:9a:ce:1c:1a:33:
87:9e:07:e5:79:61:f9:a9:74:e7:7e:4a:22:31:93:5a:1f:57:
e9:06:b9:02:9e:12:64:a1:9e:d4:9f:9a:ea:de:67:e7:d0:3a:
98:d4:8f:3e:5a:bb:93:81:9c:15:30:b7:58:45:10:cc:30:97:
40:d3:a0:0a:81:b9:fb:c0:11:ff:92:58:9f:a6:75:dd:33:18:
a7:6e:2e:53:6f:85:9d:4f:16:fa:06:90:2d:49:07:7d:1d:ff:
57:33:b7:44:8b:95:96:3e:27:4c:74:b2:a8:60:5d:64:fd:cf:
e0:f4:b0:8a:da:cf:84:f0:a8:b6:cc:75:e8:28:0c:7e:51:34:
12:0d:f3:ca:50:46:2c:05:b4:22:16:47:8a:8f:d2:5c:9a:f6:
df:2b:ab:5a:59:00:6a:ab:10:ef:16:d9:e4:45:65:7c:3c:bb:
4b:13:05:c4:d9:ad:1f:72:fd:7e:78:c2:9a:86:68:e9:ee:f8:
47:84:5a:17:04:95:19:b6:7b:65:b7:0d:ab:3d:c6:55:0f:59:
77:30:0f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:52:11 2025 by rpki-client