Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier: E+t4HhGKVV6RMZqRvm1WJ69UpQXCuNcLccmyFwV7szk=
Subject key identifier: 66:F6:2A:B8:EE:30:6E:6E:6F:85:50:9B:77:8E:01:72:84:FF:80:F9
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 01974B8D6B87D6A8D46DB50F58D60370974A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number: 12C6
Signing time: Sat 07 Jun 2025 18:00:48 +0000
Manifest this update: Sat 07 Jun 2025 18:00:48 +0000
Manifest next update: Sun 08 Jun 2025 18:00:48 +0000
Files and hashes: 1: ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa (hash: uiDFhkIkjuexDSnG2oE6Dq4+/FIv/1F+pVEhj9VaU8g=)
2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: lwcnQ3SHsDpSrhlVP4G4l9GYltMazzO9zNsNGLaL+Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:6b:87:d6:a8:d4:6d:b5:0f:58:d6:03:70:97:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Jun 7 18:00:48 2025 GMT
Not After : Jun 8 18:00:48 2025 GMT
Subject: CN=66f62ab8ee306e6e6f85509b778e017284ff80f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:3e:be:a7:a2:b3:b5:a6:9f:66:8b:65:97:
20:0e:43:24:db:25:45:33:15:74:3f:02:41:60:f8:
45:b8:09:d2:cf:01:e8:68:42:c5:17:44:51:47:da:
1c:54:85:c1:69:42:c2:b6:b3:94:71:5f:34:6d:33:
16:b9:c8:f9:bd:6a:55:31:0c:e4:f7:e9:3f:c8:7e:
50:50:de:52:78:06:cd:a5:cd:9f:75:a2:7b:ed:63:
21:0f:e1:6d:b2:c1:98:2d:ad:d6:89:d4:32:19:dd:
68:7f:b1:3c:f4:1b:f3:7e:a9:ec:a3:16:c2:95:22:
5e:5f:71:17:39:da:ba:bb:ed:f2:62:20:36:6a:64:
f5:f1:73:e0:87:e9:78:61:fe:0d:83:a6:54:15:25:
c7:35:72:6f:21:44:5a:ac:04:99:54:fb:aa:41:7f:
40:6b:c9:b3:6a:ee:7c:b6:0e:7b:21:2e:d1:5b:14:
94:ad:b1:db:93:84:16:64:b2:d8:71:4c:2c:5f:8b:
4e:0f:cc:ee:f6:23:a9:98:03:d9:38:15:db:88:1c:
fd:cd:f5:0a:f6:51:64:7c:e3:cb:10:f9:b9:fe:88:
5f:75:ed:79:38:bb:71:5d:13:d9:20:97:a4:e1:81:
14:fd:64:a5:6d:02:b9:df:50:ae:1c:b8:a2:ab:9e:
83:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F6:2A:B8:EE:30:6E:6E:6F:85:50:9B:77:8E:01:72:84:FF:80:F9
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:d6:ec:4a:1b:97:88:e3:c7:26:cf:03:11:c0:b8:d4:35:15:
8c:45:15:71:11:74:3d:c8:f6:28:51:66:0d:a7:7f:6a:67:78:
43:e5:5f:42:0c:14:6d:a4:a6:0a:3c:de:4e:c5:c7:c3:df:6e:
4d:07:37:01:8b:76:3c:eb:ff:45:b5:41:0a:e9:41:76:fe:48:
fc:5e:62:06:52:33:ba:c2:a6:0e:20:20:81:04:bb:c2:f3:c6:
fa:62:24:2d:10:a0:a2:c0:52:94:42:ef:65:6a:bf:d8:3f:d7:
eb:2f:f3:b9:63:3a:d4:9d:0a:ed:ec:c7:9b:cc:ce:6c:3e:e5:
d9:a3:1d:d7:ca:02:d4:1b:94:8c:9f:b7:88:19:c7:79:b9:d4:
d5:f0:3f:43:fa:3d:3a:e9:57:22:a2:0f:11:b0:57:e3:c1:ad:
69:16:28:1d:7f:a1:a3:e8:51:77:31:20:44:bb:d3:fd:96:f2:
55:c4:e6:b9:19:01:6e:13:81:9d:38:76:b5:c1:d0:fe:da:bb:
69:86:5c:b7:56:e9:21:71:9b:71:2b:6b:7a:44:e8:ff:3e:68:
62:1f:53:30:82:ec:4e:97:52:95:ea:23:c3:02:9c:2b:b4:c6:
f6:8b:27:26:b5:89:bd:bf:f7:40:e5:27:5a:87:d8:8c:e4:d9:
99:bb:96:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjWuH1qjUbbUPWNYDcJdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDMwYzI1MTE0MWRkYjY0OGQwNWEyYzI4NGIzM2M4N2M1
MTc1MjUwHhcNMjUwNjA3MTgwMDQ4WhcNMjUwNjA4MTgwMDQ4WjAzMTEwLwYDVQQD
Eyg2NmY2MmFiOGVlMzA2ZTZlNmY4NTUwOWI3NzhlMDE3Mjg0ZmY4MGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGY+vqeis7Wmn2aLZZcgDkMk2yVF
MxV0PwJBYPhFuAnSzwHoaELFF0RRR9ocVIXBaULCtrOUcV80bTMWucj5vWpVMQzk
9+k/yH5QUN5SeAbNpc2fdaJ77WMhD+FtssGYLa3WidQyGd1of7E89BvzfqnsoxbC
lSJeX3EXOdq6u+3yYiA2amT18XPgh+l4Yf4Ng6ZUFSXHNXJvIURarASZVPuqQX9A
a8mzau58tg57IS7RWxSUrbHbk4QWZLLYcUwsX4tOD8zu9iOpmAPZOBXbiBz9zfUK
9lFkfOPLEPm5/ohfde15OLtxXRPZIJek4YEU/WSlbQK531CuHLiiq56D5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGb2KrjuMG5ub4VQm3eOAXKE/4D5MB8GA1UdIwQY
MBaAFM7TDCURQd22SNBaLChLM8h8UXUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMt
NTE2NmIzOWEzZTE4LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMtNTE2NmIzOWEzZTE4
LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2tbsShuX
iOPHJs8DEcC41DUVjEUVcRF0Pcj2KFFmDad/amd4Q+VfQgwUbaSmCjzeTsXHw99u
TQc3AYt2POv/RbVBCulBdv5I/F5iBlIzusKmDiAggQS7wvPG+mIkLRCgosBSlELv
ZWq/2D/X6y/zuWM61J0K7ezHm8zObD7l2aMd18oC1BuUjJ+3iBnHebnU1fA/Q/o9
OulXIqIPEbBX48GtaRYoHX+ho+hRdzEgRLvT/ZbyVcTmuRkBbhOBnTh2tcHQ/tq7
aYZct1bpIXGbcStrekTo/z5oYh9TMILsTpdSleojwwKcK7TG9osnJrWJvb/3QOUn
WofYjOTZmbuWNg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:15:23 2025 by rpki-client