Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
File: ziLdGXJbalnnnw_zl4mlZY5KX90.mft (raw, json)
Hash identifier: 3AMVfMPskfxmkr5aC6/9HyIRU35s20s6L9HErYJ6n8Y=
Subject key identifier: D5:9E:23:77:01:5B:31:F2:97:42:0A:71:BE:7A:A9:70:1A:86:D8:57
Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
Certificate issuer: /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Certificate serial: 01984B8A9135CF49065A8C5C0B4A32AFF55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 11:00:28 +0000
Manifest this update: Sun 27 Jul 2025 11:00:28 +0000
Manifest next update: Mon 28 Jul 2025 11:00:28 +0000
Files and hashes: 1: vCN5n7XgRlbJNVyUvtiVehd0W-c.roa (hash: doLyWpoVrhe1vhRGrAeN+5Um0tW+zvGku8pJrn/YoG0=)
2: ziLdGXJbalnnnw_zl4mlZY5KX90.crl (hash: tN+1QaC7jdTaLETjEzCaob5jM+pLRnrKAikah3yNltA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:91:35:cf:49:06:5a:8c:5c:0b:4a:32:af:f5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Validity
Not Before: Jul 27 11:00:28 2025 GMT
Not After : Jul 28 11:00:28 2025 GMT
Subject: CN=d59e2377015b31f297420a71be7aa9701a86d857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:d1:b7:3b:b7:29:78:76:7f:a4:02:30:2d:
72:13:cc:b7:61:9c:75:31:98:03:c8:30:68:17:4d:
3e:be:c3:d0:9c:46:bd:ab:42:ae:cb:4f:00:52:bc:
dc:95:cd:fc:22:90:6b:7d:f9:16:bc:bb:c6:11:67:
43:66:c0:38:36:8f:17:02:f4:44:47:65:2b:4d:a7:
05:2d:d7:dd:05:fd:91:55:a4:1b:05:3b:9d:84:b9:
d8:68:54:f9:a5:22:c8:be:ec:5f:22:09:17:a6:49:
cc:00:3d:95:32:51:e3:88:2f:ee:56:a6:a6:b1:d6:
99:f5:4b:ab:f8:8b:76:11:7f:f7:31:3a:75:cd:54:
41:74:7e:a8:dc:65:63:4c:dd:c3:0c:cf:1b:3d:3b:
1d:8b:8a:ea:82:80:85:91:77:0d:d7:f5:ab:fb:ea:
00:2a:75:70:d6:f3:4c:34:53:fc:ee:68:35:90:fe:
9f:83:66:92:7a:eb:bc:6a:54:02:c0:e6:96:4b:10:
73:d4:a9:ad:d9:88:49:a3:e0:2f:60:b7:87:51:e5:
f8:48:e4:09:45:e3:9b:f5:1f:1d:56:cb:a9:a7:a4:
4a:d2:0d:69:ab:94:a7:51:2a:0f:9f:c1:dc:72:2b:
ed:c2:44:ee:be:59:08:67:89:84:98:4d:44:9f:4e:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9E:23:77:01:5B:31:F2:97:42:0A:71:BE:7A:A9:70:1A:86:D8:57
X509v3 Authority Key Identifier:
keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:60:84:86:bd:7c:80:76:58:82:06:6e:b6:f4:9d:ce:7e:5e:
de:5b:ce:e2:9b:34:4d:eb:35:e8:b9:7f:c2:55:1d:7b:ca:a2:
e7:9e:6d:5a:ea:b3:8a:17:44:b6:79:75:8f:6f:f8:2e:ef:96:
91:75:58:2a:db:15:92:9e:57:66:28:ff:a9:ec:be:3f:a5:2e:
b5:06:66:0a:a1:4c:ee:a1:a3:f7:ce:51:05:22:9e:25:20:1a:
80:b4:c7:dd:01:39:99:40:2c:aa:a6:9f:b1:a0:a3:5f:fb:fa:
d4:31:5b:da:70:36:03:6f:a9:bc:8e:46:ed:a9:a5:01:f1:9f:
87:44:95:0a:7c:4c:e1:44:e6:dc:d5:aa:f7:ec:05:1f:02:a6:
08:02:b6:24:01:14:e8:d1:0e:98:4c:f5:ee:dc:55:c2:bd:04:
a0:ac:d8:e3:66:00:84:7c:e8:28:31:30:3b:97:d8:f6:71:6b:
da:e2:4d:7e:ff:d8:f6:65:a7:05:ef:d5:51:bf:5b:3b:a9:f4:
79:f4:8e:72:2b:fd:db:11:86:14:b9:42:7c:17:3a:fe:10:4c:
55:d9:7e:fe:58:23:97:ca:ff:68:60:4e:e2:99:32:4b:b1:36:
61:ab:5f:d4:09:8f:fb:e2:93:4e:7e:14:f0:cd:af:69:44:03:
c2:51:04:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLipE1z0kGWoxcC0oyr/VeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMjJkZDE5NzI1YjZhNTllNzlmMGZmMzk3ODlhNTY1OGU0
YTVmZGQwHhcNMjUwNzI3MTEwMDI4WhcNMjUwNzI4MTEwMDI4WjAzMTEwLwYDVQQD
EyhkNTllMjM3NzAxNWIzMWYyOTc0MjBhNzFiZTdhYTk3MDFhODZkODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8nRtzu3KXh2f6QCMC1yE8y3YZx1
MZgDyDBoF00+vsPQnEa9q0Kuy08AUrzclc38IpBrffkWvLvGEWdDZsA4No8XAvRE
R2UrTacFLdfdBf2RVaQbBTudhLnYaFT5pSLIvuxfIgkXpknMAD2VMlHjiC/uVqam
sdaZ9Uur+It2EX/3MTp1zVRBdH6o3GVjTN3DDM8bPTsdi4rqgoCFkXcN1/Wr++oA
KnVw1vNMNFP87mg1kP6fg2aSeuu8alQCwOaWSxBz1Kmt2YhJo+AvYLeHUeX4SOQJ
ReOb9R8dVsupp6RK0g1pq5SnUSoPn8HccivtwkTuvlkIZ4mEmE1En04MBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWeI3cBWzHyl0IKcb56qXAahthXMB8GA1UdIwQY
MBaAFM4i3RlyW2pZ558P85eJpWWOSl/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemlMZEdYSmJhbG5ubndfemw0bWxaWTVLWDkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jNzVmMTItOTdhNC00ZDllLTk5Nzgt
YjE4MjI3NTVmNzEyLzEvemlMZEdYSmJhbG5ubndfemw0bWxaWTVLWDkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jNzVmMTItOTdhNC00ZDllLTk5NzgtYjE4MjI3NTVmNzEy
LzEvemlMZEdYSmJhbG5ubndfemw0bWxaWTVLWDkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGCEhr18
gHZYggZutvSdzn5e3lvO4ps0Tes16Ll/wlUde8qi555tWuqzihdEtnl1j2/4Lu+W
kXVYKtsVkp5XZij/qey+P6UutQZmCqFM7qGj985RBSKeJSAagLTH3QE5mUAsqqaf
saCjX/v61DFb2nA2A2+pvI5G7amlAfGfh0SVCnxM4UTm3NWq9+wFHwKmCAK2JAEU
6NEOmEz17txVwr0EoKzY42YAhHzoKDEwO5fY9nFr2uJNfv/Y9mWnBe/VUb9bO6n0
efSOciv92xGGFLlCfBc6/hBMVdl+/lgjl8r/aGBO4pkyS7E2Yatf1AmP++KTTn4U
8M2vaUQDwlEETA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:26:25 2025 by rpki-client