Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: 3mSajQLgp7SobRWPcL6ijPAX+TKQyh3IXVo3YJeFEeU=
Subject key identifier: 5D:D8:71:E4:F6:A5:95:62:DA:AB:9E:04:9D:F0:C9:4B:A9:8C:15:2A
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 0197477965AAAF53E602B449971CA5843F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 0EBD
Signing time: Fri 06 Jun 2025 23:00:27 +0000
Manifest this update: Fri 06 Jun 2025 23:00:27 +0000
Manifest next update: Sat 07 Jun 2025 23:00:27 +0000
Files and hashes: 1: 36HTuZWVYznRWr-Y9OyOjFMfg8o.roa (hash: O957t7QaHPCxhX8NuJXHyZq8mGIQrTkuzTmAY9BjQ/g=)
2: lL65lPAfGESV3pA_MWeJ9kqZYO0.roa (hash: V0dTtQSyADkcZWVxG7jFvC5p0xl0WKclXQDVLvdY10Y=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: 38fSA5z+/5chUdpo3j+kkQXKnkQot/Zdy5aIoRjyda4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:65:aa:af:53:e6:02:b4:49:97:1c:a5:84:3f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Jun 6 23:00:27 2025 GMT
Not After : Jun 7 23:00:27 2025 GMT
Subject: CN=5dd871e4f6a59562daab9e049df0c94ba98c152a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:db:80:69:17:96:0c:5b:c5:70:ec:1d:10:43:
27:72:9a:88:8a:6d:5a:fd:e9:a5:5e:3a:ac:37:fc:
f3:c2:31:69:2c:93:07:dc:0a:aa:f4:35:7f:b6:2d:
6d:99:fb:6e:b4:b0:41:96:3f:56:3f:69:b8:76:29:
35:3a:62:c0:08:a3:b3:c3:2c:94:00:f5:88:1c:c2:
f8:5a:9a:e8:a1:c4:c5:c8:03:1e:f1:34:04:ec:4f:
08:5b:56:db:6b:4b:78:21:a4:d8:77:a9:87:da:13:
32:86:4e:84:2d:97:e8:5f:dc:69:ba:ec:65:c0:06:
fc:7c:0d:75:03:6a:bb:9a:6a:5e:4c:a6:cb:21:af:
30:de:ed:d4:d3:38:81:17:f0:db:97:f2:20:49:81:
08:74:71:5f:aa:82:92:1a:cf:b5:81:ac:16:ec:8c:
2a:61:db:60:99:17:76:20:da:e2:13:9f:fc:fc:87:
1d:31:f2:7a:3d:12:1c:2b:16:4a:9f:1b:88:83:cf:
9b:ea:5b:df:43:0a:1c:70:09:d0:f8:c1:dc:61:aa:
ab:9b:23:86:bb:4c:31:1a:db:56:39:51:1d:c1:ce:
a3:53:04:6a:c2:b3:7a:85:29:bb:cc:14:38:86:71:
86:5c:cd:a6:c9:e9:ee:cb:54:94:9d:2f:64:ad:cb:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D8:71:E4:F6:A5:95:62:DA:AB:9E:04:9D:F0:C9:4B:A9:8C:15:2A
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7b:78:a0:b8:e0:a0:89:f9:f3:f1:ac:ce:18:61:62:60:c3:
e7:a8:f8:5f:b2:96:25:a5:29:83:f7:83:bd:20:6b:26:64:b7:
68:e2:42:84:c9:ba:a9:97:35:53:73:87:66:30:1c:7a:65:05:
26:96:62:d3:9c:6d:87:b4:20:fc:86:05:30:2a:89:03:3d:84:
a9:7e:08:1f:be:db:02:a4:25:d5:dd:3f:fe:c6:37:19:41:57:
35:96:8d:0d:71:d0:c3:ec:d6:83:0a:d9:5c:9b:37:e5:96:cb:
43:77:93:1b:82:ae:95:af:94:ab:bb:68:f9:c2:42:76:4e:33:
08:0f:b3:c4:84:b6:01:ef:5e:b7:1d:88:22:8c:f7:c6:f9:8b:
ae:03:25:b3:16:0f:36:4e:b4:f5:39:1f:e0:7a:98:68:88:1f:
b6:1f:3a:26:9a:f7:9e:d6:da:5c:95:0a:b4:ea:a1:28:40:45:
86:d7:51:95:f2:57:c5:ff:ac:11:cb:32:b9:7d:58:e7:38:5d:
9b:cd:2a:fa:02:e3:fd:1e:6c:ed:d7:a5:74:fa:46:07:df:2d:
81:8e:20:a9:b4:db:ff:b4:13:98:98:54:66:6c:50:52:1e:ae:
09:f0:a1:cb:77:0e:29:95:13:33:45:1a:d6:3c:dc:90:fc:81:
c5:c6:07:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeWWqr1PmArRJlxylhD9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjM3NDY1N2Y1NzA3OGYzY2EyYzcxMTA5ZDM1OTI3YzIy
NDg2ODEwHhcNMjUwNjA2MjMwMDI3WhcNMjUwNjA3MjMwMDI3WjAzMTEwLwYDVQQD
Eyg1ZGQ4NzFlNGY2YTU5NTYyZGFhYjllMDQ5ZGYwYzk0YmE5OGMxNTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NuAaReWDFvFcOwdEEMncpqIim1a
/emlXjqsN/zzwjFpLJMH3Aqq9DV/ti1tmftutLBBlj9WP2m4dik1OmLACKOzwyyU
APWIHML4WproocTFyAMe8TQE7E8IW1bba0t4IaTYd6mH2hMyhk6ELZfoX9xpuuxl
wAb8fA11A2q7mmpeTKbLIa8w3u3U0ziBF/Dbl/IgSYEIdHFfqoKSGs+1gawW7Iwq
YdtgmRd2INriE5/8/IcdMfJ6PRIcKxZKnxuIg8+b6lvfQwoccAnQ+MHcYaqrmyOG
u0wxGttWOVEdwc6jUwRqwrN6hSm7zBQ4hnGGXM2myenuy1SUnS9krcusIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3YceT2pZVi2queBJ3wyUupjBUqMB8GA1UdIwQY
MBaAFM/zdGV/VwePPKLHEQnTWSfCJIaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEt
M2VhMmViZmU4NzA3LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEtM2VhMmViZmU4NzA3
LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHt4oLjg
oIn58/GszhhhYmDD56j4X7KWJaUpg/eDvSBrJmS3aOJChMm6qZc1U3OHZjAcemUF
JpZi05xth7Qg/IYFMCqJAz2EqX4IH77bAqQl1d0//sY3GUFXNZaNDXHQw+zWgwrZ
XJs35ZbLQ3eTG4Kula+Uq7to+cJCdk4zCA+zxIS2Ae9etx2IIoz3xvmLrgMlsxYP
Nk609Tkf4HqYaIgfth86Jpr3ntbaXJUKtOqhKEBFhtdRlfJXxf+sEcsyuX1Y5zhd
m80q+gLj/R5s7deldPpGB98tgY4gqbTb/7QTmJhUZmxQUh6uCfChy3cOKZUTM0Ua
1jzckPyBxcYHvQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:51 2025 by rpki-client