Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
File: ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft (raw, json)
Hash identifier: /YTjTfPzwaN/hPJgAPYkGJj8o15rGi/NQDauf/aogtw=
Subject key identifier: 9C:DD:E7:FC:5C:D7:29:14:B8:72:F9:F1:00:EA:50:3F:03:6A:AB:5C
Authority key identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
Certificate issuer: /CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Certificate serial: 01976A05CE4FF44054FD1CC37F81E892DA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
Manifest number: 1594
Signing time: Fri 13 Jun 2025 16:00:54 +0000
Manifest this update: Fri 13 Jun 2025 16:00:54 +0000
Manifest next update: Sat 14 Jun 2025 16:00:54 +0000
Files and hashes: 1: 77Lxszm6b67-RSjepR0C23JG5dI.roa (hash: 9Xm4YAYAAgADPugT2wEGkyXGaEUt/FjBjGPJ5p3nqlw=)
2: ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl (hash: Z1HrSBZPq+6tQCBdmLvgYVZ5c6qE3ZGowCkLeo+T6kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:ce:4f:f4:40:54:fd:1c:c3:7f:81:e8:92:da:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Validity
Not Before: Jun 13 16:00:54 2025 GMT
Not After : Jun 14 16:00:54 2025 GMT
Subject: CN=9cdde7fc5cd72914b872f9f100ea503f036aab5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:44:cd:58:88:23:20:8c:77:5d:6e:23:5d:
5b:57:bd:e7:fe:15:ea:75:d5:81:9c:d6:fa:1b:39:
dc:01:35:5d:54:f8:5c:5c:a6:92:b7:d1:44:d7:2e:
97:a5:4d:00:52:e3:f8:80:56:5c:9a:5c:0e:3f:f3:
3e:14:bf:60:33:74:b2:6d:bb:cc:48:0c:5f:f9:07:
ef:92:72:cd:94:5d:ee:6d:08:ef:94:d3:50:cd:2e:
00:13:ec:30:2d:08:e6:13:16:3c:e5:f0:16:de:07:
bd:a9:9d:06:03:ba:2a:62:0a:ab:07:22:98:f7:d6:
69:6b:47:b2:3e:fb:7a:e4:86:6c:29:62:3c:53:19:
16:8a:12:d4:80:13:7f:02:65:be:4b:26:0d:09:c5:
9b:58:5d:39:37:ff:9d:cd:ca:65:32:fe:12:58:c7:
30:f1:41:06:db:00:79:d1:7c:f9:86:bf:56:15:e4:
8f:55:98:ed:41:45:c4:dd:81:87:44:f5:ac:d1:e3:
5a:8b:20:7b:76:a5:32:24:cc:36:ab:15:f0:e0:5a:
5d:93:21:41:58:99:87:bc:c9:ce:b1:d6:9a:3e:5c:
5f:a6:c8:ba:14:40:04:bd:1a:d5:79:5f:c7:28:2d:
6d:b8:ef:36:ab:89:d9:8b:14:dd:4b:ec:0b:dd:47:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DD:E7:FC:5C:D7:29:14:B8:72:F9:F1:00:EA:50:3F:03:6A:AB:5C
X509v3 Authority Key Identifier:
keyid:64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0e:99:62:ea:9f:63:ab:f3:b5:49:57:06:ac:8e:a3:11:4d:
10:1a:7e:c2:76:63:4d:b3:6e:a0:59:4c:70:8e:54:bd:7e:81:
cb:43:b7:2d:c6:bf:4b:b5:3c:cc:0e:6d:57:0f:e8:72:31:16:
96:92:dd:9f:05:9a:7a:13:f9:10:83:4e:ce:e9:70:f8:62:4c:
0c:b7:e8:ac:3d:2e:01:69:cb:f4:56:da:5f:42:c5:4c:7d:91:
86:0d:2d:1e:e9:ee:8b:ac:88:b2:09:e7:30:a2:05:5b:17:61:
2c:27:88:2c:45:22:b3:2d:ee:c1:26:fe:ad:a4:01:78:5d:00:
9e:df:6f:47:da:91:2e:1e:02:52:67:08:26:e3:ba:78:83:bd:
bf:32:99:44:e5:98:50:6b:b9:c7:f2:62:ee:95:5b:0d:3b:64:
e2:4d:95:6f:d6:0e:6a:12:0d:24:c1:a7:d8:e6:a1:0e:65:0f:
e5:fa:5b:be:1d:3a:59:58:76:e2:df:42:3a:e0:37:9a:05:98:
6c:8c:7a:51:d2:32:70:01:5c:9b:a9:ea:fa:53:af:b8:51:42:
2d:09:7d:f0:c4:fd:fa:78:1e:30:9c:c4:53:08:eb:24:83:a3:
83:32:66:72:c3:77:5c:4d:05:dd:18:c0:a3:11:1f:00:9c:19:
c0:2d:9c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:13 2025 by rpki-client