Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File: ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier: Ote2lyFHFaXeQaqKtly8iSRkoG9uPGPNUJ06aWIpYhY=
Subject key identifier: 93:3A:42:B7:30:BF:1E:4A:B4:CC:1A:6F:35:1D:C6:2D:8C:06:A6:0F
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 019748FA8CFEC7A42FFCF3CE588705B78E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 06:01:09 +0000
Manifest this update: Sat 07 Jun 2025 06:01:09 +0000
Manifest next update: Sun 08 Jun 2025 06:01:09 +0000
Files and hashes: 1: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: C0rKCz94k4o7EpdcsVIZLSDTia+rfAcZHn/w/AyIg18=)
2: hN0z1_4mmxKbkIk8CqnnvzNahto.roa (hash: AI7qbHiXXWxj2c6Gw1e/W0ArXAzLidVM4yaZJ83W98E=)
3: loQfbpMkrF-8FHm8l3OiW-eTM6E.roa (hash: u9sgxZASXDE+M+FEbB4vnXmXUh6Lo2WySjfXfmuOY70=)
4: vyP9hbS_76ZrupwSMef0B1pOVPk.roa (hash: f7AZEySBA5XegD3mdK9pluMntAOS8jT+L60Mq8N3IVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:8c:fe:c7:a4:2f:fc:f3:ce:58:87:05:b7:8e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: Jun 7 06:01:09 2025 GMT
Not After : Jun 8 06:01:09 2025 GMT
Subject: CN=933a42b730bf1e4ab4cc1a6f351dc62d8c06a60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:93:2f:fc:5a:ac:0d:87:12:e6:ba:fe:c9:
f3:11:53:3f:fa:49:79:95:78:37:73:e8:c8:d7:67:
94:2b:01:c2:cc:37:ab:4d:d5:75:73:a9:03:9a:dc:
18:06:b3:ac:3d:7f:55:2e:4f:bb:8a:6c:84:18:79:
e6:42:6c:47:54:e8:cf:00:c5:05:be:a0:a7:43:54:
d9:a5:68:70:43:ec:84:3a:11:2f:5a:3b:7c:42:c8:
f6:d1:37:84:81:de:e6:5e:86:fb:8a:06:cd:3c:9e:
bb:5d:c4:b7:7b:81:77:02:03:32:30:fb:81:b3:c5:
a4:da:31:db:8a:77:ff:b3:43:ca:b4:b3:7b:9d:35:
da:f4:a1:81:f9:33:f0:2f:28:da:a0:f0:c1:9c:fa:
e2:a4:f1:ca:39:66:b4:b3:33:fe:1d:80:12:f3:b9:
6c:fe:ec:ce:41:86:57:1b:03:6b:ee:01:9f:1e:f1:
52:3e:a6:07:08:a3:0f:ff:9e:94:06:9a:78:02:26:
9a:00:3e:10:22:ce:17:1e:d6:3e:62:ed:88:b1:6c:
40:9c:1e:c4:5a:84:1f:44:bb:99:7c:61:26:02:e1:
d7:2a:83:6d:bc:49:df:1b:4e:26:cd:37:5c:4a:3b:
4a:93:ad:a9:3e:ba:13:ed:96:b0:03:fd:0e:2c:01:
17:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3A:42:B7:30:BF:1E:4A:B4:CC:1A:6F:35:1D:C6:2D:8C:06:A6:0F
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fa:49:f3:14:0d:7e:04:e6:46:25:88:60:e0:fa:0a:9f:1c:
65:d2:ba:31:33:4f:f8:3a:22:19:0b:1d:7b:e5:e7:ab:6a:9f:
d8:f2:87:bd:66:78:51:69:86:ad:36:2b:f0:e0:96:c1:29:85:
ba:86:26:0c:4c:ab:e8:36:60:c3:b7:81:3d:e2:07:b3:e1:81:
aa:28:fb:c5:51:9f:aa:94:64:96:bb:ee:0f:27:5b:ea:0e:c0:
05:d3:cb:5b:d6:5d:ce:a7:07:6d:38:f0:1e:a4:d6:bc:36:49:
07:d8:2e:1d:fa:a2:ca:05:f1:8a:15:62:1a:47:44:8c:0c:31:
8c:1c:c9:be:cb:b3:df:19:cb:67:c9:fa:66:8e:af:29:8c:d2:
08:4e:95:bd:17:57:18:c1:15:53:05:85:76:4d:ba:34:52:f0:
6a:f1:7b:b3:92:48:e2:7c:9a:7c:d9:ff:1f:f1:43:f7:b7:20:
b9:69:70:9e:4e:f9:5d:a0:c3:4f:16:2e:31:53:49:e0:6f:d3:
c0:a2:83:b0:9c:8c:06:14:46:4e:48:f9:92:eb:aa:e1:22:c7:
29:a3:4a:ef:1a:94:a9:8f:93:cb:ce:3b:0c:ca:2c:77:d1:c2:
fa:25:6a:bb:5b:7f:38:b0:6f:18:2e:40:2c:a1:d6:29:93:1f:
42:fe:9d:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+oz+x6Qv/PPOWIcFt46JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWE2Yjk3NWVhZmQyY2U1MTQ2ODcyMzgxNDM1NWY1NmM1
NWJhZmIwHhcNMjUwNjA3MDYwMTA5WhcNMjUwNjA4MDYwMTA5WjAzMTEwLwYDVQQD
Eyg5MzNhNDJiNzMwYmYxZTRhYjRjYzFhNmYzNTFkYzYyZDhjMDZhNjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic+TL/xarA2HEua6/snzEVM/+kl5
lXg3c+jI12eUKwHCzDerTdV1c6kDmtwYBrOsPX9VLk+7imyEGHnmQmxHVOjPAMUF
vqCnQ1TZpWhwQ+yEOhEvWjt8Qsj20TeEgd7mXob7igbNPJ67XcS3e4F3AgMyMPuB
s8Wk2jHbinf/s0PKtLN7nTXa9KGB+TPwLyjaoPDBnPripPHKOWa0szP+HYAS87ls
/uzOQYZXGwNr7gGfHvFSPqYHCKMP/56UBpp4AiaaAD4QIs4XHtY+Yu2IsWxAnB7E
WoQfRLuZfGEmAuHXKoNtvEnfG04mzTdcSjtKk62pProT7ZawA/0OLAEXowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJM6Qrcwvx5KtMwabzUdxi2MBqYPMB8GA1UdIwQY
MBaAFGWaa5der9LOUUaHI4FDVfVsVbr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQt
ZWZmM2NkY2JkMDBhLzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQtZWZmM2NkY2JkMDBh
LzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPpJ8xQN
fgTmRiWIYOD6Cp8cZdK6MTNP+DoiGQsde+Xnq2qf2PKHvWZ4UWmGrTYr8OCWwSmF
uoYmDEyr6DZgw7eBPeIHs+GBqij7xVGfqpRklrvuDydb6g7ABdPLW9ZdzqcHbTjw
HqTWvDZJB9guHfqiygXxihViGkdEjAwxjBzJvsuz3xnLZ8n6Zo6vKYzSCE6VvRdX
GMEVUwWFdk26NFLwavF7s5JI4nyafNn/H/FD97cguWlwnk75XaDDTxYuMVNJ4G/T
wKKDsJyMBhRGTkj5kuuq4SLHKaNK7xqUqY+Ty847DMosd9HC+iVqu1t/OLBvGC5A
LKHWKZMfQv6deg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:33:11 2025 by rpki-client