Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: 79Qy+uublNBecQ7+lUNciEWsfktIUOHWzvQ/R+8qTxw=
Subject key identifier: F1:13:82:9C:75:CC:45:B9:EB:89:5E:B3:90:E3:5E:5B:3D:F6:BF:B0
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 0197684E00A1290E44C5CAFAACDD505F97CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 050F
Signing time: Fri 13 Jun 2025 08:00:31 +0000
Manifest this update: Fri 13 Jun 2025 08:00:31 +0000
Manifest next update: Sat 14 Jun 2025 08:00:31 +0000
Files and hashes: 1: 3tamc3sOw67HPVcPTfi-B2O8yU0.roa (hash: VKiy/+EDaLvbaW8IRlukGidMdNs6XDi7iV1i6VLWYS0=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: +kc51GNNbCGxGChHnXJLizr1o/Y47ZBQ5iUFy7OJhQ4=)
3: oMFhnG_2Z4roWQc3WgoG1HgKdEc.roa (hash: QGs1HFAKixXlw1vT4Oet6ENYZoHU7usshB/hp90M1GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:00:a1:29:0e:44:c5:ca:fa:ac:dd:50:5f:97:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Jun 13 08:00:31 2025 GMT
Not After : Jun 14 08:00:31 2025 GMT
Subject: CN=f113829c75cc45b9eb895eb390e35e5b3df6bfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a3:3a:f7:05:4a:e9:41:9d:a4:5f:6e:5d:08:
83:ca:78:bd:fd:96:62:b8:4e:b0:1e:f4:73:33:1e:
f6:4c:13:d9:88:6c:46:f8:3e:ef:a8:7a:7d:c4:66:
4d:e3:73:59:b4:42:c5:ba:b9:b2:12:79:21:e3:59:
eb:e3:1a:02:6e:bc:46:66:5b:c4:6e:4b:38:67:31:
b7:1e:4d:14:f1:2f:87:f1:67:56:14:8d:18:d7:7c:
40:b5:18:27:9f:a8:a4:e2:b0:84:b5:57:c9:99:7b:
d7:5f:eb:be:e3:85:fb:ed:21:f4:3f:0d:a5:7a:8a:
a1:ef:4d:aa:ec:db:72:b8:32:1f:00:02:4d:60:67:
28:fd:9f:4a:c6:a3:80:f0:ee:99:21:3a:7b:81:8d:
e3:de:ac:c3:05:54:e8:6e:f4:03:13:2e:fc:5e:4e:
ec:73:44:12:a6:9d:74:99:b7:9b:eb:c0:6c:c8:39:
91:dd:53:c2:e8:a7:0b:c5:d8:b5:c4:9b:83:12:1b:
5f:6a:1c:20:76:5e:79:3e:61:49:4f:68:4e:d0:08:
61:8d:28:15:b9:c7:54:30:3c:8f:12:88:0c:f8:20:
b6:cf:32:c7:0f:46:fa:b4:e7:c7:57:6e:45:a1:2f:
07:af:e2:f6:83:da:d7:c6:d2:a5:39:ce:03:31:fb:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:13:82:9C:75:CC:45:B9:EB:89:5E:B3:90:E3:5E:5B:3D:F6:BF:B0
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8f:72:4a:de:2c:b2:82:54:15:ed:3c:f1:80:82:24:e4:0b:
c7:28:a3:51:d1:02:87:42:d9:b2:80:64:fd:7c:e9:1a:eb:03:
c4:f4:04:c1:66:59:2a:50:e1:56:93:33:3a:00:6c:a1:9d:93:
85:93:f2:15:58:e9:72:14:5f:50:62:36:3a:44:f4:53:64:9f:
73:7f:f9:b1:9a:73:8a:b1:11:4b:f8:50:d3:ea:a3:6e:c5:e0:
e7:69:d2:bc:63:ed:ce:c7:2c:01:b3:a8:1c:53:dd:46:51:c3:
49:d8:30:b9:19:2d:3a:c5:16:1f:07:bf:4b:d9:a3:6d:52:9c:
d4:7b:64:85:46:bc:c6:1b:be:03:2a:f4:09:9d:f7:ec:40:fd:
47:3a:9a:63:05:be:8e:c6:02:de:66:ea:61:78:f5:25:ae:f8:
24:53:1c:54:2b:ec:ce:40:f4:6a:62:03:e5:2b:be:75:93:b8:
72:85:58:28:f4:5b:b1:99:de:e6:70:6f:72:1f:a0:a6:a4:cd:
77:05:6d:ff:e4:af:d1:a9:ba:ba:dc:fa:c8:a1:33:eb:6d:06:
28:f3:e8:b4:74:64:b7:bd:f3:ec:5c:13:9d:08:c7:df:37:45:
cb:12:e3:ee:35:c9:3e:2a:71:17:47:b6:6b:b0:9a:76:2a:c7:
54:18:2b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:13 2025 by rpki-client