Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
File: zPFCMN6e_sYQ_90zngxEgLaLrUU.mft (raw, json)
Hash identifier: +B9VeIkUTBk70rBWg9MkXfgOV0OiSvF79oYSKIqAxbw=
Subject key identifier: 73:13:22:C6:CE:CE:1B:26:6F:5C:AA:7C:30:66:3E:F5:77:5B:06:B4
Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
Certificate issuer: /CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Certificate serial: 01974A7B53173AFA1323638FA9834108E3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
Manifest number: 0288
Signing time: Sat 07 Jun 2025 13:01:25 +0000
Manifest this update: Sat 07 Jun 2025 13:01:25 +0000
Manifest next update: Sun 08 Jun 2025 13:01:25 +0000
Files and hashes: 1: Jy9w65ZubGm0SY_59Wq1tFlq7gA.roa (hash: GAWYOmgt7SjOR4XrYGICCDsdlImXuLIEXBRuDs31QjI=)
2: zPFCMN6e_sYQ_90zngxEgLaLrUU.crl (hash: 26I7/+IFw/cXdSyGgWqCZmDkvj+7inWTbvixOFvRVvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:53:17:3a:fa:13:23:63:8f:a9:83:41:08:e3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Validity
Not Before: Jun 7 13:01:25 2025 GMT
Not After : Jun 8 13:01:25 2025 GMT
Subject: CN=731322c6cece1b266f5caa7c30663ef5775b06b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e0:dc:d6:d5:7a:0a:df:e7:aa:57:a1:c8:10:
cd:78:98:73:9c:af:9f:e6:2f:1e:61:0c:05:7b:18:
b6:84:fc:e3:9b:36:c0:5a:40:2d:df:de:c5:d3:b0:
ff:2c:cd:87:f8:45:0a:0a:43:ed:6d:5c:d8:0f:e5:
43:90:38:fb:3d:b5:a3:d1:78:09:b3:4b:d4:b7:87:
f7:63:0e:4c:95:e8:06:22:0a:30:70:f5:9e:bb:65:
44:f5:b5:4c:54:ad:38:f4:7e:3d:52:c5:59:e1:61:
c4:b3:5e:c7:64:0d:9e:48:81:6a:30:c2:5e:69:bb:
a3:85:21:e3:0f:6c:33:c0:2b:cb:34:39:12:66:35:
85:00:23:79:97:99:bc:fb:d1:1f:8c:0c:cd:33:36:
09:07:bb:75:26:b6:31:54:a4:4e:ce:df:d2:c2:36:
23:42:02:75:e1:95:8c:98:40:90:50:c2:5b:ac:fd:
b0:06:5a:b4:a6:26:69:45:93:35:88:66:cf:8e:4e:
2f:e3:a9:da:62:cd:da:64:d9:18:5b:5f:e7:ae:9f:
79:51:91:2d:39:85:07:d5:74:05:d4:56:f5:4a:3c:
73:d1:cb:47:c1:05:c7:8e:ce:46:6d:2a:af:27:ef:
fb:4f:18:4c:5e:ca:65:98:eb:8b:31:bc:44:c8:e0:
69:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:13:22:C6:CE:CE:1B:26:6F:5C:AA:7C:30:66:3E:F5:77:5B:06:B4
X509v3 Authority Key Identifier:
keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d2:22:f2:16:a3:4d:4e:16:36:36:e4:b8:a7:24:55:71:5e:
bb:1f:3b:1c:f4:1e:0c:d3:ec:cd:16:bc:19:42:d1:b8:84:6d:
0a:30:11:6f:95:a9:86:65:93:93:11:7f:81:ca:28:0b:9f:e4:
82:fc:c4:f8:5c:b5:20:eb:24:63:f1:82:e4:bf:dd:f9:01:20:
45:b6:d7:19:5f:79:26:50:2d:5e:26:71:5a:8a:a9:28:11:2e:
f9:c2:5d:93:59:e8:e7:a8:b1:2a:07:66:38:43:25:71:2f:e7:
5f:56:96:3c:0a:20:29:a7:d7:8c:ba:11:aa:3e:d9:e1:44:78:
59:ab:f2:28:ca:a1:c1:29:07:8c:00:b9:83:42:d1:38:68:0b:
28:0f:15:d2:46:58:a6:90:70:19:2d:f0:28:9b:0d:c1:75:11:
a1:a8:dd:06:34:4e:5a:18:0d:64:e0:80:68:36:f9:31:cd:f2:
52:f5:7f:55:7e:f2:5c:9f:91:d9:9b:36:70:5b:6b:09:8f:59:
76:1b:93:0e:90:2b:5f:4d:d6:c2:8f:14:06:ff:9e:ed:5f:3d:
3c:c2:3e:ad:85:39:b2:34:df:0f:f3:3b:56:58:69:2f:a0:11:
7f:97:b8:e2:78:5d:be:43:3b:f9:76:80:58:32:2d:bc:40:21:
8a:1c:7e:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe1MXOvoTI2OPqYNBCOO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjE0MjMwZGU5ZWZlYzYxMGZmZGQzMzllMGM0NDgwYjY4
YmFkNDUwHhcNMjUwNjA3MTMwMTI1WhcNMjUwNjA4MTMwMTI1WjAzMTEwLwYDVQQD
Eyg3MzEzMjJjNmNlY2UxYjI2NmY1Y2FhN2MzMDY2M2VmNTc3NWIwNmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+Dc1tV6Ct/nqlehyBDNeJhznK+f
5i8eYQwFexi2hPzjmzbAWkAt397F07D/LM2H+EUKCkPtbVzYD+VDkDj7PbWj0XgJ
s0vUt4f3Yw5MlegGIgowcPWeu2VE9bVMVK049H49UsVZ4WHEs17HZA2eSIFqMMJe
abujhSHjD2wzwCvLNDkSZjWFACN5l5m8+9EfjAzNMzYJB7t1JrYxVKROzt/SwjYj
QgJ14ZWMmECQUMJbrP2wBlq0piZpRZM1iGbPjk4v46naYs3aZNkYW1/nrp95UZEt
OYUH1XQF1Fb1Sjxz0ctHwQXHjs5GbSqvJ+/7TxhMXsplmOuLMbxEyOBpAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMTIsbOzhsmb1yqfDBmPvV3Wwa0MB8GA1UdIwQY
MBaAFMzxQjDenv7GEP/dM54MRIC2i61FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80ODI2MzMtYzlhOS00NjMzLWIxMzgt
YTE3YjgyZTZkNzg2LzEvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80ODI2MzMtYzlhOS00NjMzLWIxMzgtYTE3YjgyZTZkNzg2
LzEvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9Ii8haj
TU4WNjbkuKckVXFeux87HPQeDNPszRa8GULRuIRtCjARb5WphmWTkxF/gcooC5/k
gvzE+Fy1IOskY/GC5L/d+QEgRbbXGV95JlAtXiZxWoqpKBEu+cJdk1no56ixKgdm
OEMlcS/nX1aWPAogKafXjLoRqj7Z4UR4WavyKMqhwSkHjAC5g0LROGgLKA8V0kZY
ppBwGS3wKJsNwXURoajdBjROWhgNZOCAaDb5Mc3yUvV/VX7yXJ+R2Zs2cFtrCY9Z
dhuTDpArX03Wwo8UBv+e7V89PMI+rYU5sjTfD/M7VlhpL6ARf5e44nhdvkM7+XaA
WDItvEAhihx+HQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:50:12 2025 by rpki-client