
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: 5tM+uymNRDbcxBiUm+2v6JJF0clAnmUhxnocf5YsrYY=
Subject key identifier: A6:7B:67:7C:6E:18:4B:34:F9:7E:87:C5:81:09:44:90:E1:6D:F2:E5
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 019769608DF9006A183FAA521C56D7867E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 13:00:24 +0000
Manifest this update: Fri 13 Jun 2025 13:00:24 +0000
Manifest next update: Sat 14 Jun 2025 13:00:24 +0000
Files and hashes: 1: 2lhRfHkMgHjBgOEI871xwfstUps.roa (hash: pS6P1vzgUypkZeUsuXFw4LKxiNYTX5RfnQUo/ctpKhE=)
2: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: vQ2WBny1K4EeveuOLBkMFxreaDmLffuU/xWS2JquTpc=)
3: uZvIw4DMtYOiY7JlOgb63vTUcZI.roa (hash: g2eHsXH9Y/MXPOSVAzGV6O9aHOUSDc6gHQknS8yIWx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:8d:f9:00:6a:18:3f:aa:52:1c:56:d7:86:7e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Jun 13 13:00:24 2025 GMT
Not After : Jun 14 13:00:24 2025 GMT
Subject: CN=a67b677c6e184b34f97e87c581094490e16df2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:88:80:32:f3:97:08:ca:f6:ad:50:2c:81:
74:ac:89:75:d8:b6:05:c3:a2:95:7f:d8:bd:74:c5:
9f:1f:bd:37:ee:3c:b5:82:91:46:3b:04:04:52:83:
49:eb:3e:81:33:ec:45:1e:69:4a:52:37:b0:da:0b:
91:c3:70:8e:91:20:b5:ee:c9:c5:c2:f2:88:13:1e:
7a:19:8d:6c:24:5a:35:84:07:91:3f:73:4a:e4:9b:
84:3b:41:74:d1:f8:a1:1f:e7:64:8a:bb:fe:9f:08:
97:b5:8d:c4:7a:b4:29:b1:63:5a:a5:0c:80:20:63:
32:f6:2a:14:54:ba:e8:84:21:51:25:12:d4:87:20:
01:c6:67:f6:9a:87:36:ad:c0:3f:d1:09:4f:2a:13:
e6:8e:ae:e6:18:ae:cb:09:03:ab:59:1d:f3:05:3e:
8c:7d:9b:cd:a0:e6:a7:4f:ab:9d:89:36:d0:a6:ca:
45:39:7e:f6:1e:5e:eb:80:c9:7d:f6:ef:8e:2c:be:
ea:b1:90:f7:08:c5:72:da:b7:eb:b8:53:66:24:3d:
e6:1a:c4:44:ba:05:9c:98:7a:26:9d:4f:93:2b:73:
5d:b7:1f:6c:79:83:35:d7:79:99:c0:22:92:eb:a6:
1d:10:4f:5e:11:75:76:c7:23:7d:0b:4f:bd:a4:c8:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7B:67:7C:6E:18:4B:34:F9:7E:87:C5:81:09:44:90:E1:6D:F2:E5
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bd:96:4e:d4:af:9e:68:b4:95:49:1c:91:4e:1c:3f:19:85:
93:95:a5:b0:cc:6e:bc:36:cc:ee:37:fe:41:e3:8e:9c:81:7f:
3d:a8:45:71:32:92:d6:ed:b5:60:d5:ed:37:7e:b2:5f:1c:e1:
b8:fc:53:c7:c4:c6:fb:51:7e:e4:5d:a1:6e:1e:85:0f:d2:60:
36:25:27:b6:b8:9c:7b:6b:62:e3:53:9e:15:a1:e0:92:a4:b7:
9c:bc:8d:f6:71:b0:2c:ec:13:fa:15:3b:cc:23:f8:76:b0:90:
28:13:e1:e9:80:a9:e6:d2:ae:10:f8:d4:9d:68:fd:28:81:52:
7a:13:65:a9:33:69:f7:f7:6d:78:78:8a:97:2c:f0:d7:88:64:
64:e9:b9:4e:2e:17:d1:85:20:c7:87:2a:8f:3f:ea:06:bf:cd:
ec:8e:f3:fc:16:75:f6:15:88:ad:e5:c6:71:67:3f:ad:2c:3f:
5b:c4:1c:8d:ef:b7:b8:b8:47:cf:61:65:ed:c6:60:8a:c9:ce:
12:ba:5f:6e:f5:b5:af:ed:79:d4:a5:48:fe:35:dd:e7:52:59:
03:8e:db:f9:8c:b6:8e:82:c9:b2:2a:c9:43:70:a0:30:6f:83:
4a:7c:1c:ed:20:84:70:be:fd:c3:e0:f1:78:5c:e9:01:65:39:
04:6b:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:28 2025 by rpki-client