Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File: Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier: ug2wrhWtb6x/EP2ROmBDj9er6jeTa/73oNe6Dy5JJEk=
Subject key identifier: 3A:9A:A5:AC:49:B9:8E:B6:F6:6C:C5:D6:27:B3:59:AA:D0:01:1B:87
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial: 01974967F6A297ABFF7B61C816D1368C530B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 08:00:39 +0000
Manifest this update: Sat 07 Jun 2025 08:00:39 +0000
Manifest next update: Sun 08 Jun 2025 08:00:39 +0000
Files and hashes: 1: J8TxeAmZBzINa9syBZ1B4yTXcxY.roa (hash: 2QfjawOPNl3mivz2h5LwmzlkbdOnVy10wna7TIvLBVY=)
2: MwzfvZntetFg-_eX5DgAKUVWZK0.roa (hash: px93WC5fRlO4NzSq6ywwEqfisL0ff50EWTLfIp14D3o=)
3: Z2S57soliueMTVEyGovf75orajw.crl (hash: mNlJ/TgPmq7vgBkGPjG9q6UrT1eTm5tFDrqk++rhovE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:f6:a2:97:ab:ff:7b:61:c8:16:d1:36:8c:53:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Validity
Not Before: Jun 7 08:00:39 2025 GMT
Not After : Jun 8 08:00:39 2025 GMT
Subject: CN=3a9aa5ac49b98eb6f66cc5d627b359aad0011b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:ff:13:3c:08:3d:b1:9c:3e:58:7d:53:d1:
2f:b7:96:e8:09:69:61:cd:77:13:54:ac:eb:fd:05:
4b:44:89:06:c7:56:2c:78:97:d1:de:ab:db:74:c6:
a3:16:fd:61:40:e3:2f:f9:a8:48:24:7f:2b:e1:7a:
c6:f5:f8:08:8a:fe:d1:6b:31:83:01:26:f3:3e:ab:
b0:d5:38:43:82:bb:37:0e:62:6f:f9:db:77:80:40:
91:f0:4a:54:20:4b:c7:73:34:fd:f4:d9:a9:28:0d:
3b:6e:9e:85:33:b1:ce:3a:4f:40:5d:d9:a5:9f:91:
05:54:bd:7d:cc:dc:55:d0:f0:5d:b4:ec:c5:62:04:
11:8b:cb:61:27:bc:a2:f6:73:ba:3f:8f:c9:48:33:
90:2f:0e:e8:20:5c:c9:b9:1d:f4:39:eb:12:13:54:
88:51:55:ff:e3:d4:62:5a:8a:a6:26:ba:0b:e5:01:
7a:5c:7d:7d:f5:43:5c:f2:90:79:bf:a1:82:34:04:
83:3d:7d:3c:90:44:77:c0:28:59:5c:db:bb:ca:4f:
12:b4:a9:fc:70:e1:25:68:a5:52:eb:74:b6:bf:e1:
0f:88:9a:d2:00:e1:df:9f:3b:ad:20:0b:df:d2:9c:
83:86:8f:1a:45:45:03:04:81:57:9a:81:bf:b2:6d:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9A:A5:AC:49:B9:8E:B6:F6:6C:C5:D6:27:B3:59:AA:D0:01:1B:87
X509v3 Authority Key Identifier:
keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e2:b0:80:00:1a:94:e1:51:f9:54:9c:86:07:14:d3:be:8e:
f6:52:e8:83:39:74:5c:20:4c:0e:de:3c:41:89:ba:fe:d9:b3:
c6:09:e0:76:b7:62:6f:a2:88:47:c0:99:4b:e2:7f:f2:dd:52:
19:d7:e3:55:a5:be:06:f5:f8:4c:80:57:6a:32:53:f8:0c:d7:
88:90:ca:bc:31:ee:5f:11:16:f2:42:73:c1:21:73:71:b9:01:
a9:6b:03:ce:e7:b8:04:da:08:41:25:26:7c:f4:8e:44:49:2d:
bd:b4:db:ac:dc:06:a4:7f:9f:21:36:c7:2d:43:89:37:99:54:
5d:bc:34:14:f6:ce:8f:24:a9:8b:48:24:1c:3c:77:2a:1a:c2:
06:6c:12:8e:ec:3e:2a:84:ca:52:ad:e8:89:0c:54:ef:9b:59:
1d:95:ca:0b:7e:c1:a6:f9:a9:2c:f7:3e:02:e8:1f:9a:16:5c:
fd:41:d9:ed:da:54:aa:65:6a:10:6b:ea:4e:51:2f:b0:a4:de:
16:97:03:5e:30:c5:58:04:88:a7:41:ce:ac:a3:12:42:e9:ce:
5c:27:ce:b6:f0:69:d6:fd:e4:db:4b:84:c2:cb:62:5f:17:a3:
40:b6:62:75:50:02:01:c6:9d:43:f9:bf:e7:f3:a8:ad:2d:da:
f6:01:69:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ/ail6v/e2HIFtE2jFMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjRiOWVlY2EyNThhZTc4YzRkNTEzMjFhOGJkZmVmOWEy
YjZhM2MwHhcNMjUwNjA3MDgwMDM5WhcNMjUwNjA4MDgwMDM5WjAzMTEwLwYDVQQD
EygzYTlhYTVhYzQ5Yjk4ZWI2ZjY2Y2M1ZDYyN2IzNTlhYWQwMDExYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOz/EzwIPbGcPlh9U9Evt5boCWlh
zXcTVKzr/QVLRIkGx1YseJfR3qvbdMajFv1hQOMv+ahIJH8r4XrG9fgIiv7RazGD
ASbzPquw1ThDgrs3DmJv+dt3gECR8EpUIEvHczT99NmpKA07bp6FM7HOOk9AXdml
n5EFVL19zNxV0PBdtOzFYgQRi8thJ7yi9nO6P4/JSDOQLw7oIFzJuR30OesSE1SI
UVX/49RiWoqmJroL5QF6XH199UNc8pB5v6GCNASDPX08kER3wChZXNu7yk8StKn8
cOElaKVS63S2v+EPiJrSAOHfnzutIAvf0pyDho8aRUUDBIFXmoG/sm081wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqapaxJuY629mzF1iezWarQARuHMB8GA1UdIwQY
MBaAFGdkue7KJYrnjE1RMhqL3++aK2o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTIt
NDI1NmE0NmFmZWVjLzEvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTItNDI1NmE0NmFmZWVj
LzEvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw+KwgAAa
lOFR+VSchgcU076O9lLogzl0XCBMDt48QYm6/tmzxgngdrdib6KIR8CZS+J/8t1S
GdfjVaW+BvX4TIBXajJT+AzXiJDKvDHuXxEW8kJzwSFzcbkBqWsDzue4BNoIQSUm
fPSOREktvbTbrNwGpH+fITbHLUOJN5lUXbw0FPbOjySpi0gkHDx3KhrCBmwSjuw+
KoTKUq3oiQxU75tZHZXKC37BpvmpLPc+AugfmhZc/UHZ7dpUqmVqEGvqTlEvsKTe
FpcDXjDFWASIp0HOrKMSQunOXCfOtvBp1v3k20uEwstiXxejQLZidVACAcadQ/m/
5/OorS3a9gFpqw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:50:36 2025 by rpki-client