Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json)
Hash identifier: qc4PYmBxr8a5r9wFDadgk4XI9bnPGNava3GrKW9zzcU=
Subject key identifier: 95:46:6D:99:BC:86:53:43:82:46:1F:FA:EF:64:81:9A:7A:B0:5C:40
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 019748F9C940224FDC47052CCEF6C51443A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 06:00:18 +0000
Manifest this update: Sat 07 Jun 2025 06:00:18 +0000
Manifest next update: Sun 08 Jun 2025 06:00:18 +0000
Files and hashes: 1: 0eFE803oL-x-2UtW8hW4h_oGSOQ.roa (hash: 1/pEIXtNgxj6Ggb1H5PZs612B1gxk22zRzlXx7oVu5s=)
2: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: Nm2kFrs2a+TliHi/ydsxhYVZ8t1y3WDlYT/x8ckIxng=)
3: e2qB4esbK6h3v26XFDC4VZBc5KY.roa (hash: j1cRIZ5v+8OJ2fmGwhM51DYmzvrib+oAKJLnWq3m2pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:c9:40:22:4f:dc:47:05:2c:ce:f6:c5:14:43:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Jun 7 06:00:18 2025 GMT
Not After : Jun 8 06:00:18 2025 GMT
Subject: CN=95466d99bc86534382461ffaef64819a7ab05c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:74:fe:5a:e8:b5:cc:57:ba:b3:fe:81:d2:
a3:db:50:a8:d2:e8:bb:fd:8c:cf:09:9f:28:0c:8b:
6b:6e:44:29:97:be:f6:f9:1e:a0:02:b8:37:c0:66:
72:0d:f0:51:98:1c:09:30:dd:65:67:57:5f:f9:1b:
76:88:85:23:4a:74:83:54:62:6f:65:99:e5:6f:14:
5c:6a:41:b4:d1:f9:98:a7:c4:83:07:e3:87:df:44:
69:d9:7c:a0:e7:09:f5:35:eb:c8:4f:5d:6d:1e:2b:
31:26:8a:23:ff:40:14:dc:ac:28:0d:4d:f0:77:ff:
c2:5e:30:2e:20:be:0b:f9:93:cb:49:25:53:2f:df:
5d:18:83:35:ce:f3:29:ed:af:6a:8f:5f:fa:d9:22:
19:49:20:35:f4:08:b3:31:14:25:b7:11:12:d7:6d:
8e:77:89:c0:ed:12:53:12:20:d6:dc:e1:b1:3a:cc:
1e:ec:a0:2f:a7:07:c6:72:67:d0:da:08:37:2a:69:
44:dd:97:cc:44:2c:39:ce:51:ea:97:f3:cb:6f:13:
bd:30:34:1b:f4:30:16:8a:b6:0e:98:5e:85:e2:c6:
ad:cb:b9:79:9b:3a:e5:45:b3:73:08:5b:70:13:aa:
6b:a3:d0:ac:f1:f4:3b:a4:d6:31:40:07:c6:25:6c:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:46:6D:99:BC:86:53:43:82:46:1F:FA:EF:64:81:9A:7A:B0:5C:40
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6c:68:d2:d7:78:9c:7e:89:9f:b1:3c:3e:14:ca:45:70:fe:
67:99:2b:bd:30:3b:22:38:62:34:4d:f0:e2:27:81:b3:d2:c6:
6c:89:40:55:1f:04:de:ba:4f:42:32:7d:6e:68:43:4e:c9:1c:
94:be:ae:08:24:99:df:a2:5e:12:9a:c3:b1:3d:9f:3b:05:4c:
3f:f3:5f:e8:7b:bf:51:ba:a1:a0:89:c2:8d:ec:e5:e8:3d:8e:
68:1c:3f:d6:b4:82:5f:58:50:c3:27:ef:4d:71:37:00:fb:23:
9c:65:27:a6:04:8e:7a:51:fa:26:b9:fb:df:6b:04:da:f1:24:
26:3c:55:34:fd:49:df:46:d1:3d:76:69:83:08:48:83:9f:23:
9b:1a:f8:25:7a:da:d5:ab:f0:73:82:2e:4f:0d:e6:1f:7c:f0:
7b:2f:c3:39:f7:48:45:d2:10:2a:4f:c3:70:12:b3:b0:e2:a2:
0b:1d:c7:22:6a:ef:b0:63:fd:3c:7f:d2:93:66:d5:9d:c7:37:
c5:99:47:b7:88:15:75:3c:8f:17:8b:a9:15:50:19:6b:0b:02:
fa:9e:cf:5a:d9:96:7f:05:c4:12:49:d2:e9:0e:9e:fe:90:29:
ed:40:0d:eb:23:2a:63:84:d8:4d:3c:4c:a4:c9:fe:06:db:07:
33:8b:57:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+clAIk/cRwUszvbFFEOpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ODI4OTBiN2VkMjMzNDc0NzhkNGQ2NWRiMDk0OGMzZGIy
M2ViZTcwHhcNMjUwNjA3MDYwMDE4WhcNMjUwNjA4MDYwMDE4WjAzMTEwLwYDVQQD
Eyg5NTQ2NmQ5OWJjODY1MzQzODI0NjFmZmFlZjY0ODE5YTdhYjA1YzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCJ0/lrotcxXurP+gdKj21Co0ui7
/YzPCZ8oDItrbkQpl772+R6gArg3wGZyDfBRmBwJMN1lZ1df+Rt2iIUjSnSDVGJv
ZZnlbxRcakG00fmYp8SDB+OH30Rp2Xyg5wn1NevIT11tHisxJooj/0AU3KwoDU3w
d//CXjAuIL4L+ZPLSSVTL99dGIM1zvMp7a9qj1/62SIZSSA19AizMRQltxES122O
d4nA7RJTEiDW3OGxOswe7KAvpwfGcmfQ2gg3KmlE3ZfMRCw5zlHql/PLbxO9MDQb
9DAWirYOmF6F4saty7l5mzrlRbNzCFtwE6pro9Cs8fQ7pNYxQAfGJWzIiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVGbZm8hlNDgkYf+u9kgZp6sFxAMB8GA1UdIwQY
MBaAFGaCiQt+0jNHR41NZdsJSMPbI+vnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yYTk4MWQtNjdmNS00ODRlLWJlMWIt
ZmY2NGE5YmE1OTdjLzEvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yYTk4MWQtNjdmNS00ODRlLWJlMWItZmY2NGE5YmE1OTdj
LzEvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2xo0td4
nH6Jn7E8PhTKRXD+Z5krvTA7IjhiNE3w4ieBs9LGbIlAVR8E3rpPQjJ9bmhDTskc
lL6uCCSZ36JeEprDsT2fOwVMP/Nf6Hu/UbqhoInCjezl6D2OaBw/1rSCX1hQwyfv
TXE3APsjnGUnpgSOelH6Jrn732sE2vEkJjxVNP1J30bRPXZpgwhIg58jmxr4JXra
1avwc4IuTw3mH3zwey/DOfdIRdIQKk/DcBKzsOKiCx3HImrvsGP9PH/Sk2bVncc3
xZlHt4gVdTyPF4upFVAZawsC+p7PWtmWfwXEEknS6Q6e/pAp7UAN6yMqY4TYTTxM
pMn+BtsHM4tXSg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:17 2025 by rpki-client