Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json)
Hash identifier: pCvQqSkcwkidD0lBdXVzhi6dr4ZpwpufdWGgCSX6gVM=
Subject key identifier: 4B:3C:46:06:28:F4:23:FA:05:CC:1C:5F:88:BC:B5:06:7B:9A:37:6A
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial: 01974A43FCA7912F02037368E4FC8C56458E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
Manifest number: 1160
Signing time: Sat 07 Jun 2025 12:00:58 +0000
Manifest this update: Sat 07 Jun 2025 12:00:58 +0000
Manifest next update: Sun 08 Jun 2025 12:00:58 +0000
Files and hashes: 1: 8P_S0IiROCk_5OYQ6mxMJ_E_ykg.roa (hash: hKXKA4mluIkjfh1vqK/elg6N0eojlwBUTy51lDcZmFo=)
2: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: J4Dpv0uZdFCeUdAi1dqnV7oPNQY6bOlDxPv/jWbkhmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:fc:a7:91:2f:02:03:73:68:e4:fc:8c:56:45:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Validity
Not Before: Jun 7 12:00:58 2025 GMT
Not After : Jun 8 12:00:58 2025 GMT
Subject: CN=4b3c460628f423fa05cc1c5f88bcb5067b9a376a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:e7:c3:44:5e:cd:68:9a:ea:7c:ae:aa:57:
fa:42:b0:68:aa:79:e4:8c:a6:f8:62:eb:63:0c:e8:
35:22:19:77:87:c6:f2:48:00:04:b8:1d:ab:23:58:
d0:1a:ff:b0:0e:44:a3:cd:0f:26:97:60:2f:05:31:
11:7d:95:90:10:ba:6d:57:01:e5:82:bb:a3:5d:0c:
76:c9:36:a9:48:da:3d:cf:a2:60:b2:e4:30:78:75:
d3:61:1e:74:74:4c:7d:b9:3c:42:22:c5:ea:fc:e3:
07:a3:45:c3:59:38:c6:b9:a6:53:84:21:c2:e7:a0:
cd:53:bc:b3:29:18:0f:99:7d:e6:5f:f7:05:73:29:
2e:1a:9c:6d:41:66:2c:45:9e:d1:8d:4f:e8:f1:6a:
75:41:1f:8a:e9:28:43:08:85:b9:76:8c:3b:0a:c2:
62:b4:d9:e1:08:e5:01:d8:45:8f:4f:f2:e5:8a:02:
38:47:58:60:20:ea:77:31:2c:e6:ed:26:21:45:4a:
08:71:8d:e6:79:6e:b3:86:8c:a5:e0:02:32:34:ac:
1c:fe:da:18:5b:31:7e:2a:8a:10:ec:17:c1:7a:7d:
2a:25:87:24:db:1e:17:e3:e6:d0:ce:1c:9f:97:47:
12:26:ac:a7:20:0a:60:22:91:81:1f:cb:a9:53:0b:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3C:46:06:28:F4:23:FA:05:CC:1C:5F:88:BC:B5:06:7B:9A:37:6A
X509v3 Authority Key Identifier:
keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bc:89:58:f2:e7:0e:b6:a5:62:07:9c:ab:6c:e6:ae:0f:a6:
c6:97:e9:58:fb:49:e5:27:8a:07:93:59:28:49:75:47:b7:df:
26:23:dd:af:12:6a:c8:bb:c2:9f:f5:b6:b3:c7:5a:ca:98:e3:
ec:25:3e:a1:0e:19:e8:64:0f:33:c4:43:ed:9d:4b:ab:cd:64:
cc:65:f7:9f:fb:58:24:c8:d2:f6:35:fb:27:21:51:d7:8c:9b:
f7:e8:83:f8:2e:97:a8:2d:6d:e8:c8:7c:b5:38:03:18:e5:fc:
f5:ba:6a:d7:9d:a8:56:5d:0e:9f:24:ce:98:96:34:61:ff:a4:
27:d3:a2:c1:0f:82:95:a6:fc:b4:47:cd:4f:ae:06:e4:17:5f:
a2:55:2b:da:6f:24:76:e1:8d:79:a1:ac:ae:8d:4f:b2:f6:08:
b0:e3:82:31:34:c1:10:b7:15:01:4d:e9:55:f6:fe:b2:90:4a:
2f:e7:5a:a8:71:9e:de:e5:8a:f2:cc:19:b7:3d:5b:cc:7c:41:
92:a4:1f:4c:ab:b4:3c:b0:dd:92:fb:50:72:5f:ec:2d:f4:5b:
84:61:9e:78:2d:9d:8c:78:31:b2:81:bc:d1:9e:e7:7d:36:5c:
d6:4d:d3:88:b7:ae:b6:2c:8e:c5:a0:54:86:db:32:f5:73:67:
7e:b4:49:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ/ynkS8CA3No5PyMVkWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NzI5ZjlkMDc4NmY2OGExZWNkNWM1YTkyYmMzOTJkODY5
MTk3NWUwHhcNMjUwNjA3MTIwMDU4WhcNMjUwNjA4MTIwMDU4WjAzMTEwLwYDVQQD
Eyg0YjNjNDYwNjI4ZjQyM2ZhMDVjYzFjNWY4OGJjYjUwNjdiOWEzNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7bnw0RezWia6nyuqlf6QrBoqnnk
jKb4YutjDOg1Ihl3h8bySAAEuB2rI1jQGv+wDkSjzQ8ml2AvBTERfZWQELptVwHl
grujXQx2yTapSNo9z6JgsuQweHXTYR50dEx9uTxCIsXq/OMHo0XDWTjGuaZThCHC
56DNU7yzKRgPmX3mX/cFcykuGpxtQWYsRZ7RjU/o8Wp1QR+K6ShDCIW5dow7CsJi
tNnhCOUB2EWPT/LligI4R1hgIOp3MSzm7SYhRUoIcY3meW6zhoyl4AIyNKwc/toY
WzF+KooQ7BfBen0qJYck2x4X4+bQzhyfl0cSJqynIApgIpGBH8upUwu6bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEs8RgYo9CP6BcwcX4i8tQZ7mjdqMB8GA1UdIwQY
MBaAFGZyn50HhvaKHs1cWpK8OS2GkZdeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQt
YWQ1MTBlMDVkYTkyLzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQtYWQ1MTBlMDVkYTky
LzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7yJWPLn
DralYgecq2zmrg+mxpfpWPtJ5SeKB5NZKEl1R7ffJiPdrxJqyLvCn/W2s8daypjj
7CU+oQ4Z6GQPM8RD7Z1Lq81kzGX3n/tYJMjS9jX7JyFR14yb9+iD+C6XqC1t6Mh8
tTgDGOX89bpq152oVl0OnyTOmJY0Yf+kJ9OiwQ+Clab8tEfNT64G5BdfolUr2m8k
duGNeaGsro1PsvYIsOOCMTTBELcVAU3pVfb+spBKL+daqHGe3uWK8swZtz1bzHxB
kqQfTKu0PLDdkvtQcl/sLfRbhGGeeC2djHgxsoG80Z7nfTZc1k3TiLeutiyOxaBU
htsy9XNnfrRJog==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:17:54 2025 by rpki-client