Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json)
Hash identifier: yVJeXTrR4y6Vf003SK4cL/1WmiD5MRxe6uF2eoJsS3U=
Subject key identifier: 2F:A8:7E:6D:42:DA:01:17:A7:BD:F2:EE:B8:23:2C:97:E2:FB:5F:FB
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 01976EF53968CEF1E57B612ACE502F457861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
Manifest number: 0A97
Signing time: Sat 14 Jun 2025 15:00:54 +0000
Manifest this update: Sat 14 Jun 2025 15:00:54 +0000
Manifest next update: Sun 15 Jun 2025 15:00:54 +0000
Files and hashes: 1: j_xflR4S2WvglBWH8M3t9MideIU.roa (hash: Cyel9g1MztQmxzP3oBvWVirfHDPFN3Z5801vcO4qaLk=)
2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: uh0js5+MgnWJ1XjROxv+hVO3AzOgzpRdvwQ/dn1giYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:39:68:ce:f1:e5:7b:61:2a:ce:50:2f:45:78:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: Jun 14 15:00:54 2025 GMT
Not After : Jun 15 15:00:54 2025 GMT
Subject: CN=2fa87e6d42da0117a7bdf2eeb8232c97e2fb5ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:6c:a6:60:7e:4b:3b:53:57:62:ca:cf:4e:
3a:4c:39:ab:b1:94:65:51:38:5c:3c:d3:a8:75:49:
c4:3d:bd:fa:a4:03:5f:63:b9:02:6a:3e:63:b6:d3:
04:e3:43:85:90:9d:39:ee:37:cc:de:9c:0a:11:66:
7c:e9:6a:c2:ad:f5:65:78:b4:b4:49:9e:e6:db:9a:
06:18:01:0d:2a:e6:d7:b5:3c:5a:25:9b:d0:42:ea:
8a:79:9f:6b:ae:de:eb:83:c5:61:53:7f:5c:52:b1:
c3:41:ac:cb:30:89:aa:7b:2d:fa:9d:12:1d:b7:a5:
04:11:48:30:d2:58:6d:e0:57:1e:af:d3:99:df:e2:
95:a9:37:12:dd:6d:0c:da:3b:e1:93:13:77:c0:db:
a2:29:23:fd:e5:ce:3f:d0:37:31:86:1e:e9:20:aa:
82:ed:7c:31:8a:25:39:9a:c2:2c:55:80:c0:e8:97:
45:41:9f:9b:6f:9d:30:96:d0:8b:cc:4f:2d:18:fa:
68:ce:53:a3:1b:f5:d4:6d:50:8d:47:4c:ca:8b:ea:
a7:9e:fb:bc:a8:2f:2e:60:9e:4f:16:d0:f1:83:8a:
9a:63:d0:7c:44:f4:a7:49:f7:f3:3a:32:60:8d:a9:
3d:85:1a:7c:c4:43:70:8b:39:74:11:1c:ad:b9:2f:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A8:7E:6D:42:DA:01:17:A7:BD:F2:EE:B8:23:2C:97:E2:FB:5F:FB
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e1:84:88:51:b3:59:a3:49:99:89:b0:ec:d9:c1:dd:af:51:
12:d1:35:ec:0f:79:e5:fb:d4:a6:32:36:d2:5f:d0:ef:27:fc:
59:47:bd:76:56:82:9a:28:98:4d:ff:9a:7c:97:7d:0e:34:9e:
8b:16:de:3d:16:d2:0b:cb:13:40:fc:17:00:14:8b:d0:44:8c:
ef:4e:3b:27:84:1c:37:74:f9:7b:e9:a9:6b:e0:71:c8:4e:60:
39:5b:fa:d7:51:09:4f:61:29:7c:d0:08:18:79:4f:f6:8e:05:
6d:18:2b:a5:e5:39:e0:cb:e4:f9:65:82:98:20:81:f9:0c:17:
cb:0e:90:9b:77:cf:d7:08:3c:fb:79:43:4e:7a:87:85:1e:ad:
9a:88:26:82:c4:49:d9:ee:7a:84:47:f0:c5:03:2c:6d:bd:95:
6e:44:15:e2:8e:e6:1f:cf:b5:de:e5:c5:1d:a3:55:b7:4e:78:
bb:20:15:ef:70:9e:31:78:81:c7:bf:a7:48:bb:b6:62:ef:b6:
0c:dd:76:83:24:4f:2c:4a:da:df:72:f3:77:e5:58:92:58:49:
78:4e:72:a9:7f:b9:4f:07:dd:3c:8c:5c:77:b8:0a:81:77:28:
14:8b:fc:cc:5c:3a:33:2b:2e:11:36:ec:37:53:e2:ec:f6:77:
ef:58:f2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:25:20 2025 by rpki-client