Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
File: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft (raw, json)
Hash identifier: 1fV5kkEgoI3EMynupcGsb48+IfsAsGCmUxU0KPrSll4=
Subject key identifier: D0:8B:B2:81:97:4C:CF:B7:AA:8C:B7:B3:3C:C6:54:53:9C:72:1B:B7
Authority key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
Certificate issuer: /CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Certificate serial: 019747B1076DC368A4E71BF616EBDBD1D1E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
Manifest number: 0234
Signing time: Sat 07 Jun 2025 00:01:13 +0000
Manifest this update: Sat 07 Jun 2025 00:01:13 +0000
Manifest next update: Sun 08 Jun 2025 00:01:13 +0000
Files and hashes: 1: 7221QtQkpZ5fYG5uSqjd2485FGI.roa (hash: qWfFUUJnuvb44KA8Ta3mXVGgM6VvJjf6ZydNkx5R4C0=)
2: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl (hash: H98AOvazX+sISksrWaVHLL425MqAvVMSx+ROSdMkQYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:07:6d:c3:68:a4:e7:1b:f6:16:eb:db:d1:d1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Validity
Not Before: Jun 7 00:01:13 2025 GMT
Not After : Jun 8 00:01:13 2025 GMT
Subject: CN=d08bb281974ccfb7aa8cb7b33cc654539c721bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:a9:2f:fe:48:d0:9c:d3:b0:72:b4:4d:1f:
04:eb:7f:a1:21:74:6a:43:b6:7a:66:88:80:de:a4:
b4:d7:53:c8:cd:0d:13:38:45:93:e4:27:70:65:74:
07:4e:8c:11:5a:e9:54:2a:93:69:6d:e3:fb:25:e6:
21:5d:9b:25:27:d8:b4:1b:2d:42:3d:8a:fb:36:fc:
a7:1e:b4:fc:95:5a:61:34:42:41:84:d7:c7:e3:7f:
ca:10:27:8b:a7:94:bf:eb:4b:38:46:53:40:ad:ec:
1e:b8:a2:86:de:53:69:c7:09:65:d6:61:91:e1:b2:
b2:fd:03:ae:7f:73:9a:36:34:d1:db:e7:c1:dc:04:
e5:32:56:1c:37:a7:af:66:36:49:fb:c7:bf:af:f0:
cb:ee:ac:2c:f2:d2:c2:5f:ef:73:d1:54:61:4a:05:
1c:a0:55:41:4d:09:66:fc:78:a7:cf:e5:36:22:4c:
6c:eb:1c:e7:6d:15:7d:8a:aa:62:b3:5e:a9:a8:d8:
c4:ca:8c:59:34:54:4c:ed:38:bd:ed:5d:95:ee:1d:
3f:c1:41:ce:e7:c3:4c:44:7a:c5:bf:a4:5d:43:9b:
2b:1f:19:70:91:2a:78:dd:da:a5:59:93:e5:05:3a:
bc:61:4a:de:9d:fa:ff:b5:05:86:9a:f8:6e:f6:a4:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8B:B2:81:97:4C:CF:B7:AA:8C:B7:B3:3C:C6:54:53:9C:72:1B:B7
X509v3 Authority Key Identifier:
keyid:64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:14:a5:1a:ca:b4:52:77:88:4b:ec:6c:53:62:df:27:55:8b:
0a:0a:13:19:4a:a3:0d:2f:8c:56:36:4f:53:41:9f:a9:80:7f:
b1:a9:8f:85:40:f5:df:7b:68:a3:6b:8a:13:9d:f4:ed:c3:dc:
f5:03:3d:a5:03:b2:70:dc:47:bf:07:24:ab:5d:11:62:0c:e8:
76:42:c0:73:f9:ea:12:88:3c:03:95:fd:ad:2f:d0:06:18:5b:
32:4a:a0:e6:89:6f:e7:07:5a:18:95:b5:af:fa:90:0e:34:3c:
8f:af:03:ce:45:ea:44:86:14:ea:e3:66:a1:51:3e:9b:b4:ed:
da:dc:95:28:4b:eb:f2:51:23:08:b8:78:1a:42:68:ec:df:4d:
45:2d:53:5c:f3:da:ac:c2:d6:d0:f8:32:1e:33:9b:00:4e:95:
2f:81:ce:3a:c6:42:7f:50:f6:cf:6d:8e:37:d4:46:cc:74:fa:
d5:85:37:f3:f2:b9:3f:79:03:af:ae:bd:46:65:54:63:49:5f:
d1:1e:8d:70:f7:96:1c:40:67:b2:8f:b5:44:57:7b:cf:e4:b5:
a7:cc:fd:8d:00:a5:35:c4:3d:42:c8:0c:0e:f4:c3:61:e2:1f:
2f:b5:c4:26:a8:8d:0e:9b:0e:22:62:3e:69:ee:6f:33:90:a8:
c4:99:26:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsQdtw2ik5xv2Fuvb0dHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YmIyMmY4MjJkYjc0NTFmZTFlMjE5NmNhYzYzYzU2NDdm
YjFhZDUwHhcNMjUwNjA3MDAwMTEzWhcNMjUwNjA4MDAwMTEzWjAzMTEwLwYDVQQD
EyhkMDhiYjI4MTk3NGNjZmI3YWE4Y2I3YjMzY2M2NTQ1MzljNzIxYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EupL/5I0JzTsHK0TR8E63+hIXRq
Q7Z6ZoiA3qS011PIzQ0TOEWT5CdwZXQHTowRWulUKpNpbeP7JeYhXZslJ9i0Gy1C
PYr7NvynHrT8lVphNEJBhNfH43/KECeLp5S/60s4RlNAreweuKKG3lNpxwll1mGR
4bKy/QOuf3OaNjTR2+fB3ATlMlYcN6evZjZJ+8e/r/DL7qws8tLCX+9z0VRhSgUc
oFVBTQlm/Hinz+U2Ikxs6xznbRV9iqpis16pqNjEyoxZNFRM7Ti97V2V7h0/wUHO
58NMRHrFv6RdQ5srHxlwkSp43dqlWZPlBTq8YUrenfr/tQWGmvhu9qQYawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCLsoGXTM+3qoy3szzGVFOcchu3MB8GA1UdIwQY
MBaAFGS7Ivgi23RR/h4hlsrGPFZH+xrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkxzaS1DTGJkRkgtSGlHV3lzWThWa2Y3R3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lODEzZDQtNDEyNi00Y2ExLTkwZDYt
NDVkMDVhNGIxZDk5LzEvWkxzaS1DTGJkRkgtSGlHV3lzWThWa2Y3R3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9lODEzZDQtNDEyNi00Y2ExLTkwZDYtNDVkMDVhNGIxZDk5
LzEvWkxzaS1DTGJkRkgtSGlHV3lzWThWa2Y3R3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhSlGsq0
UneIS+xsU2LfJ1WLCgoTGUqjDS+MVjZPU0GfqYB/samPhUD133too2uKE5307cPc
9QM9pQOycNxHvwckq10RYgzodkLAc/nqEog8A5X9rS/QBhhbMkqg5olv5wdaGJW1
r/qQDjQ8j68DzkXqRIYU6uNmoVE+m7Tt2tyVKEvr8lEjCLh4GkJo7N9NRS1TXPPa
rMLW0PgyHjObAE6VL4HOOsZCf1D2z22ON9RGzHT61YU38/K5P3kDr669RmVUY0lf
0R6NcPeWHEBnso+1RFd7z+S1p8z9jQClNcQ9QsgMDvTDYeIfL7XEJqiNDpsOImI+
ae5vM5CoxJkmuA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:36 2025 by rpki-client