Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
File: ZeuO9EGD-OOpyIenviaz8HE8E70.mft (raw, json)
Hash identifier: wv+5tBpscwjppsY2Y83BkkFwFYTAivy014M1+iGamZ0=
Subject key identifier: 34:C3:73:07:F0:2E:F6:DA:0A:EB:65:3D:3A:90:D7:10:EB:92:3A:1E
Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Certificate issuer: /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Certificate serial: 019893DA8F0C70502FBF1D20303DC870E91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
Manifest number: 0BE5
Signing time: Sun 10 Aug 2025 12:00:30 +0000
Manifest this update: Sun 10 Aug 2025 12:00:30 +0000
Manifest next update: Mon 11 Aug 2025 12:00:30 +0000
Files and hashes: 1: ZeuO9EGD-OOpyIenviaz8HE8E70.crl (hash: qGRR0X9kSv4BQYtu/dnjqFiPS5rbbArK3/1OYG5YN4I=)
2: _nLH4yuuFQfyAsGvM-Hn21cXD8E.roa (hash: DfpdmgrcGh1AJupG4dykdHnlomMk4nG6aWIUzegDtp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:8f:0c:70:50:2f:bf:1d:20:30:3d:c8:70:e9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Validity
Not Before: Aug 10 12:00:30 2025 GMT
Not After : Aug 11 12:00:30 2025 GMT
Subject: CN=34c37307f02ef6da0aeb653d3a90d710eb923a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:91:8a:15:e7:d3:47:74:b8:62:ca:7d:14:
c3:e2:55:85:42:80:09:42:e4:a9:57:2f:1c:0f:f9:
b9:fe:28:ae:15:29:0d:97:48:15:64:ed:b1:4e:68:
1f:08:19:ab:f9:2c:22:b9:dd:a5:4a:bc:a2:31:30:
06:16:5d:ce:34:38:4c:35:f8:60:fe:d1:c5:e4:57:
79:6d:74:2d:cb:6d:0b:5b:84:df:1f:1f:e2:71:e2:
ab:3b:c9:2f:fe:81:19:95:e2:1b:51:8e:db:40:3e:
35:08:c6:79:dd:30:0c:6a:81:50:e3:fc:a8:27:fd:
13:00:f9:a6:32:ab:ce:3b:09:2e:58:aa:54:24:b6:
34:2d:d8:94:d9:b5:7e:3d:90:cc:62:75:83:36:0b:
e5:96:59:37:3c:17:f4:0f:56:75:8f:59:82:03:31:
b1:60:56:5a:28:26:76:9b:2f:71:7b:a5:e1:7a:c7:
17:4d:5f:71:ba:95:9d:73:13:bf:6c:f5:61:da:c0:
39:d1:f1:5b:a6:aa:34:2b:48:32:01:65:77:a4:eb:
25:c3:65:c9:b0:0a:de:42:ce:83:bc:10:d9:09:71:
e0:92:4c:f5:b4:56:5a:77:59:55:26:36:8d:5a:1c:
9f:47:76:bd:5b:64:bc:f8:34:6f:64:f1:db:65:99:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:73:07:F0:2E:F6:DA:0A:EB:65:3D:3A:90:D7:10:EB:92:3A:1E
X509v3 Authority Key Identifier:
keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ee:89:fe:91:d1:52:77:32:c3:a3:e1:0e:c6:7a:cc:29:84:
38:f9:99:15:32:27:dc:37:08:30:70:5b:44:9e:93:2e:c6:ed:
de:1d:f7:ce:a6:d3:7d:de:e1:a1:2a:75:bf:11:0b:6c:cb:bb:
20:20:20:de:d5:76:e4:6f:50:3d:78:5c:14:70:86:63:dc:48:
83:32:d8:81:a9:b9:eb:e8:e8:73:3a:74:4d:04:84:68:6e:7b:
05:79:92:22:0d:b9:50:df:54:78:2d:15:3a:e3:3e:56:2c:25:
07:62:1a:61:67:05:8d:48:4b:c1:aa:2e:c8:28:d4:d6:be:75:
98:ff:25:07:9c:b1:12:b7:2e:f6:7e:34:4b:80:de:84:5a:05:
7a:a1:99:20:40:e3:ab:f0:81:cf:e2:c5:15:c5:57:51:00:58:
1e:ca:67:30:58:58:fb:1f:79:21:18:ac:6b:ee:1d:3c:f3:3a:
38:6e:cc:39:60:e6:48:6a:7c:19:12:0b:0e:bf:ae:f6:49:a3:
2e:de:20:80:a3:47:66:b5:d9:6b:c2:cf:b9:8d:8d:66:e3:7b:
0b:6a:f2:bd:65:9d:ab:9d:65:52:de:3f:ee:c7:ab:09:ac:a3:
26:54:e2:06:56:af:cb:93:2e:92:70:5c:04:aa:7d:3a:c4:63:
e9:4c:2a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:13 2025 by rpki-client