
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
File: zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft (raw, json)
Hash identifier: 7mDuTO1hg2wEOGFONDZykqlbEVrRniSrWU35WKfGxQ8=
Subject key identifier: CB:28:88:B2:2F:77:4F:A3:86:BE:B9:D2:8E:3E:50:56:DD:96:01:ED
Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
Certificate issuer: /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Certificate serial: 019768BC4F0C4C4A842C4209EA9B3BE08E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
Manifest number: 88
Signing time: Fri 13 Jun 2025 10:01:00 +0000
Manifest this update: Fri 13 Jun 2025 10:01:00 +0000
Manifest next update: Sat 14 Jun 2025 10:01:00 +0000
Files and hashes: 1: 157MYG0IejEjRYj-j1k-QApt6pw.roa (hash: /mAnw2Tqo4MtXrtGStA4rPK8XkvjiW+Q+8q7MR/8qbg=)
2: zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl (hash: Rl9JPBp2NBe+2oexnzU7ZOSfNu1ZC/FcFv5H2kSBnF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:4f:0c:4c:4a:84:2c:42:09:ea:9b:3b:e0:8e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Validity
Not Before: Jun 13 10:01:00 2025 GMT
Not After : Jun 14 10:01:00 2025 GMT
Subject: CN=cb2888b22f774fa386beb9d28e3e5056dd9601ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:32:8e:91:45:1a:c1:6b:5b:ac:21:90:77:
1d:24:95:ee:3e:c6:ba:52:ed:34:92:36:76:9c:86:
37:18:4b:9a:cd:2a:4a:f0:4a:2b:23:de:d5:e8:09:
d3:33:cb:1b:00:3e:cf:90:0f:fc:85:39:d8:7f:df:
4b:62:a0:86:67:dd:53:8b:85:90:9a:ca:e5:4f:a9:
c6:c3:ad:a0:02:5e:cd:9e:dc:1b:4d:8a:49:92:6d:
b8:38:f0:39:5c:7e:12:e6:25:74:aa:a3:1d:26:49:
d1:44:2d:9e:4f:ee:02:c9:c9:cb:8b:d2:1b:81:46:
44:01:4d:b2:b6:e2:10:62:ae:70:04:57:29:15:bf:
db:e8:e7:7b:4b:28:52:97:ed:4d:21:be:5c:bd:0e:
a7:dc:67:36:ef:aa:a0:de:12:41:ef:25:73:a5:70:
75:5b:2e:2d:5a:d4:b8:95:92:c5:cb:12:f1:90:f9:
ae:4c:4b:93:ac:7e:5d:06:93:e4:03:46:7e:c9:8d:
33:d1:21:1c:2d:5a:c1:cd:db:e6:c4:70:85:2e:8b:
ab:53:cc:a4:29:19:86:40:32:49:cb:de:6f:db:a8:
c0:67:f2:64:8e:5e:21:a3:3f:cd:c0:6f:1b:e8:d9:
ce:4f:29:ec:73:35:97:e4:f7:8d:af:e1:96:8c:b1:
d8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:28:88:B2:2F:77:4F:A3:86:BE:B9:D2:8E:3E:50:56:DD:96:01:ED
X509v3 Authority Key Identifier:
keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:34:7f:34:0a:08:a3:e0:d3:e5:ad:9b:ef:d3:fc:2c:e4:6b:
6d:fe:02:7c:95:00:6d:e1:0d:32:87:ea:a8:69:b7:6d:60:80:
c2:a1:57:b1:cb:c2:1e:79:7b:4d:c5:c8:3d:cb:b7:61:a5:16:
43:fb:f9:c0:79:f7:f9:e9:ed:16:7b:3f:9a:f9:eb:d0:fb:b8:
11:9e:ec:ab:35:61:38:e2:14:63:de:37:b7:6a:e5:77:66:37:
32:29:25:33:79:c9:7f:f7:55:21:a5:f5:40:2b:a7:3b:6a:88:
b5:43:53:a3:0a:bb:cc:8f:ab:3a:30:6a:23:40:bc:ef:ba:08:
01:1b:74:87:8d:f4:00:4b:dd:38:06:b9:86:8d:e7:bf:a6:50:
4e:0e:35:f4:4d:0d:05:6a:b2:40:9d:9e:46:05:46:0b:fc:70:
93:3c:f9:d0:5c:4c:ae:e0:7f:a1:45:a0:f5:c1:fe:13:de:29:
fa:bb:47:e0:b7:7e:51:26:bb:f1:8d:3f:a3:13:e1:f1:92:ec:
e3:5b:43:be:7c:08:b8:8e:af:de:91:e0:45:38:dd:87:0c:6b:
b8:08:34:62:00:4e:07:f1:eb:41:5b:d4:4b:93:c8:44:4c:98:
cc:e1:80:0f:b8:18:19:4d:66:3d:65:cc:df:7a:4c:47:f8:f0:
44:12:34:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:41:51 2025 by rpki-client