Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json)
Hash identifier: dj12F1ZQ+gx+yhTP6zpqhFTvxQXS498OKGeX+19M9kU=
Subject key identifier: D6:19:17:35:EA:5F:21:1C:67:8A:D0:0D:ED:18:34:48:94:9B:98:F9
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial: 01974E2069F277F2B45286C1956D272A55AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
Manifest number: 143F
Signing time: Sun 08 Jun 2025 06:00:36 +0000
Manifest this update: Sun 08 Jun 2025 06:00:36 +0000
Manifest next update: Mon 09 Jun 2025 06:00:36 +0000
Files and hashes: 1: AuI1_5gu81vs3cIDXIzNbaWND-I.roa (hash: lsSEgLcY/ack618oc/9NRlphXCxEIj/Wq+gUEc772OI=)
2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: W2IHcH1sBiVVSpF6HqFi5naolZlHCNp+yh4Sjf+VEYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:69:f2:77:f2:b4:52:86:c1:95:6d:27:2a:55:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Validity
Not Before: Jun 8 06:00:36 2025 GMT
Not After : Jun 9 06:00:36 2025 GMT
Subject: CN=d6191735ea5f211c678ad00ded183448949b98f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:51:ae:42:0f:a6:2b:a8:13:6e:d0:ce:5f:
21:df:b1:1b:e1:65:15:e6:6a:74:87:d3:68:c6:68:
8d:b3:5c:09:87:b1:04:d1:50:b1:4e:bf:1f:3e:2f:
10:5d:64:56:f7:be:13:99:c1:7f:47:68:29:a9:99:
06:e4:bf:79:2d:21:7d:5b:c8:0c:e4:82:9c:e7:ea:
89:68:1c:7c:52:e7:1a:01:38:62:77:1e:a8:0d:7f:
c0:da:07:99:62:84:92:2e:20:70:34:82:60:c2:12:
56:3f:89:cf:d4:f1:2c:7b:3c:15:2a:d3:9e:f3:9e:
ee:65:05:6f:48:72:0c:8c:1d:8a:a5:71:ed:a5:0e:
62:5b:5c:3c:2e:d8:88:ee:90:ad:6f:32:fb:1c:66:
4a:98:d3:d7:8f:21:b4:e4:30:97:dc:a7:d7:79:8a:
94:de:46:a1:22:e8:ea:d0:de:21:bd:d0:35:3d:2e:
78:30:ec:25:2d:1e:13:b2:49:93:18:49:c2:b3:f2:
0b:0b:cc:9b:d5:c8:6f:94:16:68:53:b3:fb:e9:82:
29:be:13:1e:68:6b:7a:02:c5:a9:42:c8:3c:70:41:
88:ca:ca:51:07:b8:65:72:f7:2a:37:d7:94:c7:df:
f8:72:b4:71:5f:1e:02:df:8f:ca:73:bb:c3:f8:b1:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:19:17:35:EA:5F:21:1C:67:8A:D0:0D:ED:18:34:48:94:9B:98:F9
X509v3 Authority Key Identifier:
keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:94:91:39:1d:2d:ae:61:84:69:d1:04:c9:c8:b7:20:0d:3b:
67:1c:4b:e6:02:86:5f:f2:d6:4b:a2:37:b6:11:6f:4f:45:6c:
c5:04:7d:85:b2:12:aa:95:ad:84:99:4f:7b:2c:e0:64:41:54:
29:0d:f4:e0:2b:d0:7d:ad:d4:a4:7a:25:f8:b9:08:6d:2c:f7:
51:4e:3b:98:ce:9c:6a:39:0d:35:c2:6a:65:6c:21:c0:f1:41:
bb:00:83:7e:03:d5:c8:bc:09:d1:88:03:11:b8:c1:eb:94:d7:
f0:eb:1c:21:8f:10:f2:e3:9c:23:67:ca:55:e3:b3:7f:37:63:
5f:a4:83:2f:93:9b:aa:ae:9c:d2:8d:db:32:c6:e3:80:ea:21:
db:58:53:2a:fd:43:2f:54:e5:03:f3:93:f0:d8:7b:57:c9:f9:
67:06:f4:74:05:16:e8:f9:c1:d1:a5:ca:d8:14:70:11:cb:20:
b0:c3:78:9e:51:b2:60:09:d0:50:13:37:af:6a:67:13:c9:3f:
38:78:8b:de:56:b0:12:b7:fe:4f:4d:e0:18:0e:1d:af:a4:23:
ec:f6:80:e7:cc:3c:44:1f:fb:b9:ef:6c:e2:1f:2e:07:1c:03:
a6:34:dc:82:03:4a:69:e1:24:aa:70:bc:a3:80:cb:84:94:c8:
c0:14:8f:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIGnyd/K0UobBlW0nKlWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YWI1MWU4ZTU4Y2MxNGVkOWNiMzU3MzFhZjFkMDExZGJl
MmUxMmUwHhcNMjUwNjA4MDYwMDM2WhcNMjUwNjA5MDYwMDM2WjAzMTEwLwYDVQQD
EyhkNjE5MTczNWVhNWYyMTFjNjc4YWQwMGRlZDE4MzQ0ODk0OWI5OGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKpRrkIPpiuoE27Qzl8h37Eb4WUV
5mp0h9NoxmiNs1wJh7EE0VCxTr8fPi8QXWRW974TmcF/R2gpqZkG5L95LSF9W8gM
5IKc5+qJaBx8UucaAThidx6oDX/A2geZYoSSLiBwNIJgwhJWP4nP1PEsezwVKtOe
857uZQVvSHIMjB2KpXHtpQ5iW1w8LtiI7pCtbzL7HGZKmNPXjyG05DCX3KfXeYqU
3kahIujq0N4hvdA1PS54MOwlLR4TskmTGEnCs/ILC8yb1chvlBZoU7P76YIpvhMe
aGt6AsWpQsg8cEGIyspRB7hlcvcqN9eUx9/4crRxXx4C34/Kc7vD+LFUYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYZFzXqXyEcZ4rQDe0YNEiUm5j5MB8GA1UdIwQY
MBaAFGWrUejljMFO2cs1cxrx0BHb4uEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jZWZmMWEtZWM2Ni00ZDQ1LWJhOWYt
NDg4YTIyMjk5Y2ExLzEvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9jZWZmMWEtZWM2Ni00ZDQ1LWJhOWYtNDg4YTIyMjk5Y2Ex
LzEvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpSROR0t
rmGEadEEyci3IA07ZxxL5gKGX/LWS6I3thFvT0VsxQR9hbISqpWthJlPeyzgZEFU
KQ304CvQfa3UpHol+LkIbSz3UU47mM6cajkNNcJqZWwhwPFBuwCDfgPVyLwJ0YgD
EbjB65TX8OscIY8Q8uOcI2fKVeOzfzdjX6SDL5Obqq6c0o3bMsbjgOoh21hTKv1D
L1TlA/OT8Nh7V8n5Zwb0dAUW6PnB0aXK2BRwEcsgsMN4nlGyYAnQUBM3r2pnE8k/
OHiL3lawErf+T03gGA4dr6Qj7PaA58w8RB/7ue9s4h8uBxwDpjTcggNKaeEkqnC8
o4DLhJTIwBSPGQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:56:11 2025 by rpki-client