Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
File: zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft (raw, json)
Hash identifier: Wg0i1Ps4BeiKMXeNWaKYmr/B2u1jeTobBANJAKQFOdg=
Subject key identifier: DE:88:29:87:B2:5A:F2:02:82:7E:BE:26:19:0D:28:D4:67:6E:2C:25
Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
Certificate issuer: /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Certificate serial: 01989600B413D30DF6AE222B6DC3A1027358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
Manifest number: 0124
Signing time: Sun 10 Aug 2025 22:01:25 +0000
Manifest this update: Sun 10 Aug 2025 22:01:25 +0000
Manifest next update: Mon 11 Aug 2025 22:01:25 +0000
Files and hashes: 1: 157MYG0IejEjRYj-j1k-QApt6pw.roa (hash: /mAnw2Tqo4MtXrtGStA4rPK8XkvjiW+Q+8q7MR/8qbg=)
2: zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl (hash: r6/9GyKxVxhNRn+o+SdHqsXv5jdUs8c2rwteJDXHhDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:b4:13:d3:0d:f6:ae:22:2b:6d:c3:a1:02:73:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Validity
Not Before: Aug 10 22:01:25 2025 GMT
Not After : Aug 11 22:01:25 2025 GMT
Subject: CN=de882987b25af202827ebe26190d28d4676e2c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fc:39:d7:09:1a:7f:84:09:02:5b:cd:92:7c:
99:79:fc:f6:09:c7:ee:f9:d4:e3:7f:9e:f1:c9:82:
70:f4:3c:22:bf:02:5e:35:ea:e5:76:c3:47:b9:9a:
c1:2f:1a:f2:f6:16:59:d6:66:73:49:27:e8:70:2d:
d7:55:06:1e:a4:0f:92:77:8e:98:3a:2a:9d:f0:4d:
50:e7:d3:33:12:99:b1:fa:d4:f1:29:e6:5a:cc:8a:
f6:e4:15:6a:4c:ce:25:cb:84:08:a3:9c:1e:ed:c7:
06:88:78:f5:a3:c1:3b:06:4b:5e:a0:c5:2c:4f:da:
fe:91:c6:59:51:68:98:bc:59:52:e3:f0:3d:90:ed:
a9:d6:c2:6f:d8:b2:08:a8:6a:b0:84:5f:c0:a2:86:
e2:5c:16:5d:e5:1a:60:cd:c9:a8:0f:4b:8a:c7:32:
d5:5a:68:cf:2a:51:de:33:a0:88:fb:5d:fa:07:5a:
55:02:45:90:90:34:a4:4d:85:d8:22:2d:a3:dd:3b:
60:94:d7:fd:ba:36:a5:5f:9d:a1:fe:02:be:3f:4a:
3e:e4:c7:a0:2e:e7:f9:ef:52:13:15:92:6d:fb:cc:
fb:bc:a6:f8:b4:22:98:4f:b6:89:ed:35:01:1a:9a:
a8:a6:ca:ea:74:9b:3d:99:3f:38:06:eb:99:78:ad:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:88:29:87:B2:5A:F2:02:82:7E:BE:26:19:0D:28:D4:67:6E:2C:25
X509v3 Authority Key Identifier:
keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:60:40:a9:90:3c:88:d3:29:e1:3c:b8:4c:c3:86:3d:15:96:
24:e4:b2:1e:1f:e2:dd:f6:36:79:42:49:93:56:5b:0d:84:b7:
f8:13:94:e8:57:e3:57:f7:88:04:0c:09:26:1c:09:59:12:af:
9b:3e:12:ab:88:86:e6:da:37:e9:83:42:7b:08:e9:c9:18:64:
30:f2:fe:8a:c7:29:49:19:b1:48:ba:50:5f:b0:c1:f2:1b:dc:
82:ff:c4:a3:fb:e8:83:6d:4c:ef:13:82:b2:a1:5e:2d:94:ba:
d3:42:3b:b8:55:c3:10:ca:b6:30:14:eb:e3:c9:18:88:b4:22:
5d:c6:60:2d:6d:8a:31:fd:f2:c5:35:aa:38:59:f4:fe:8b:62:
11:28:59:af:bf:32:35:4e:d9:8a:d3:11:99:62:4e:85:c0:ba:
2f:64:51:86:1f:a9:05:83:58:91:0d:b9:e1:67:36:ee:de:da:
9f:3a:58:e9:2e:8a:59:7d:53:60:12:19:4c:75:34:b6:69:82:
4b:1e:db:b5:d9:0c:f2:d0:a7:0f:b9:91:3e:80:fd:7e:32:c7:
87:19:03:6f:a8:98:87:c1:f1:cd:ad:c4:53:dd:00:23:71:94:
0f:23:1a:35:01:51:5e:1a:da:46:52:a8:71:ea:6d:1a:18:f9:
fa:43:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:16 2025 by rpki-client