Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier: IUEYgea3fqo0V5XtzLhAN8BVHT9cPIUcwwQkG6yEoys=
Subject key identifier: 89:9D:57:E3:43:38:F4:38:2B:D0:82:61:A4:5F:62:01:12:0A:DF:BE
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial: 01974CD762E7DD65711BEE77F59E7B97097E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 00:01:13 +0000
Manifest this update: Sun 08 Jun 2025 00:01:13 +0000
Manifest next update: Mon 09 Jun 2025 00:01:13 +0000
Files and hashes: 1: 1KzANFt0aPj0q7oH7exbtu-amXU.roa (hash: mW2duFDxzUlFHO8La7Ej6q1lO3QaO9KQzC0XOixRqPM=)
2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: NEKSU5hpI2BX1dMFGdFZLdmj22kWzlgeaApNxl8rFDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:62:e7:dd:65:71:1b:ee:77:f5:9e:7b:97:09:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
Validity
Not Before: Jun 8 00:01:13 2025 GMT
Not After : Jun 9 00:01:13 2025 GMT
Subject: CN=899d57e34338f4382bd08261a45f6201120adfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:e8:64:dc:9a:72:d4:b8:67:c1:9a:a7:17:
13:58:f8:8d:e8:c4:5d:ad:85:94:00:b3:e8:b5:36:
69:83:40:86:24:6a:50:ad:3b:3b:37:2f:d9:a0:73:
1c:23:34:37:03:79:e3:1b:cb:7f:14:a0:cf:b9:c1:
95:a1:6a:5a:bc:b0:f9:71:ed:41:1b:46:c7:13:d8:
0d:85:8b:19:5b:0d:a0:dc:3f:3a:56:6b:c5:99:d8:
7b:ab:e6:ed:11:0c:b0:dc:11:c3:de:cd:d1:d1:c6:
cb:f3:21:37:93:a6:43:4c:74:63:11:56:52:48:cb:
ac:15:bc:95:40:98:22:e6:76:ce:b4:02:ca:68:22:
55:69:0e:ef:4a:f4:11:37:51:30:99:db:a4:b0:c3:
d7:c1:68:02:4a:d9:e5:24:7c:86:ca:77:46:b1:8e:
0b:42:83:96:28:e2:0f:9f:d8:03:64:63:09:9a:f7:
51:45:3b:97:8c:39:e6:87:bb:07:1d:a8:be:d9:51:
99:d3:d2:5f:30:e7:13:c3:43:88:fd:09:20:6b:4b:
5c:52:81:5a:c1:33:90:e3:21:43:d0:0b:3a:11:27:
00:93:3a:04:1c:7d:dd:4e:8c:48:98:c1:06:36:2a:
f2:41:6f:cb:98:5d:3f:4d:93:63:22:96:65:3f:78:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9D:57:E3:43:38:F4:38:2B:D0:82:61:A4:5F:62:01:12:0A:DF:BE
X509v3 Authority Key Identifier:
keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:91:00:21:6f:2d:2c:51:99:fa:8f:06:a0:46:4e:bb:c2:7c:
c1:06:e1:33:8e:7f:21:51:0c:47:8f:e3:7b:a0:1b:4b:ad:d4:
e6:aa:f2:b8:b2:59:72:46:25:66:3c:82:d7:04:96:fe:04:88:
6f:1a:27:5e:74:7f:3e:a9:19:a0:ad:a8:34:f2:f3:40:70:fe:
e6:56:c4:d0:c5:b5:6b:f0:e2:89:af:53:ec:73:c2:40:ea:b3:
6e:d1:ca:be:11:a2:2a:f5:92:1f:a3:7b:67:96:aa:37:d9:8c:
82:6a:bb:d6:c1:a7:b5:c6:c6:82:5c:a8:d4:52:76:e1:f4:ab:
f9:99:bc:31:e5:fc:8a:de:bc:d0:e5:0b:57:37:43:2d:e9:b5:
3f:ca:79:32:6b:16:00:d0:b0:c1:82:05:64:55:55:0d:9a:73:
ba:b2:1f:39:40:29:a2:91:90:ed:1f:01:74:af:1d:2b:99:de:
e2:04:f6:b6:d5:7f:ad:d0:cd:c7:58:d7:89:1a:ad:30:b2:2f:
42:4f:70:6a:e4:75:d5:51:d6:07:b0:14:76:91:3d:31:ad:ff:
66:03:b7:b8:06:f1:00:ae:7d:5b:89:0e:ba:b7:62:5f:63:ec:
13:28:40:c5:e0:ca:c4:1a:7e:dd:10:50:ec:23:35:75:76:5e:
2c:0f:21:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM12Ln3WVxG+539Z57lwl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWM3ODk5NzZkM2I1ODQwMTZjYWMxOWYzNGJiZWRlOTY2
Y2QyMzAwHhcNMjUwNjA4MDAwMTEzWhcNMjUwNjA5MDAwMTEzWjAzMTEwLwYDVQQD
Eyg4OTlkNTdlMzQzMzhmNDM4MmJkMDgyNjFhNDVmNjIwMTEyMGFkZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNXoZNyactS4Z8GapxcTWPiN6MRd
rYWUALPotTZpg0CGJGpQrTs7Ny/ZoHMcIzQ3A3njG8t/FKDPucGVoWpavLD5ce1B
G0bHE9gNhYsZWw2g3D86VmvFmdh7q+btEQyw3BHD3s3R0cbL8yE3k6ZDTHRjEVZS
SMusFbyVQJgi5nbOtALKaCJVaQ7vSvQRN1EwmduksMPXwWgCStnlJHyGyndGsY4L
QoOWKOIPn9gDZGMJmvdRRTuXjDnmh7sHHai+2VGZ09JfMOcTw0OI/Qkga0tcUoFa
wTOQ4yFD0As6EScAkzoEHH3dToxImMEGNiryQW/LmF0/TZNjIpZlP3gRzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImdV+NDOPQ4K9CCYaRfYgESCt++MB8GA1UdIwQY
MBaAFGbseJl207WEAWysGfNLvt6WbNIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wN2JmNWItMDM0MC00MzRlLWE0NDQt
ZjA3NjFlMjllNmM0LzEvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8wN2JmNWItMDM0MC00MzRlLWE0NDQtZjA3NjFlMjllNmM0
LzEvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppEAIW8t
LFGZ+o8GoEZOu8J8wQbhM45/IVEMR4/je6AbS63U5qryuLJZckYlZjyC1wSW/gSI
bxonXnR/PqkZoK2oNPLzQHD+5lbE0MW1a/Diia9T7HPCQOqzbtHKvhGiKvWSH6N7
Z5aqN9mMgmq71sGntcbGglyo1FJ24fSr+Zm8MeX8it680OULVzdDLem1P8p5MmsW
ANCwwYIFZFVVDZpzurIfOUApopGQ7R8BdK8dK5ne4gT2ttV/rdDNx1jXiRqtMLIv
Qk9wauR11VHWB7AUdpE9Ma3/ZgO3uAbxAK59W4kOurdiX2PsEyhAxeDKxBp+3RBQ
7CM1dXZeLA8htg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:44:30 2025 by rpki-client