Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File: z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier: 7JZQawXl5kChocaLt3mcRQ5GlNiU22js0QcZS0Yf5Fo=
Subject key identifier: 30:87:74:4E:B5:D0:93:6E:97:00:7F:F5:5B:07:28:80:2A:3A:34:08
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial: 01975A24620390ACEE0BBCA3AACA20BE5D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number: 1119
Signing time: Tue 10 Jun 2025 14:00:23 +0000
Manifest this update: Tue 10 Jun 2025 14:00:23 +0000
Manifest next update: Wed 11 Jun 2025 14:00:23 +0000
Files and hashes: 1: 4LDf3BAWYj8mO4n0cpZaSTYNCgQ.roa (hash: 2PsEN5j0ePjCMadYZW/XY72E9eg7u91QL60wRji2nxY=)
2: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: pSvhzc6kqe2F0pwF7yHuFg7gLBMC02dGs6YKoHom48I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:62:03:90:ac:ee:0b:bc:a3:aa:ca:20:be:5d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Validity
Not Before: Jun 10 14:00:23 2025 GMT
Not After : Jun 11 14:00:23 2025 GMT
Subject: CN=3087744eb5d0936e97007ff55b0728802a3a3408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:0e:9e:0e:c3:2d:91:99:71:79:5d:db:f0:
75:45:de:2b:62:42:dc:5c:9c:cd:5f:d4:22:1a:10:
a0:73:4f:0c:56:d8:70:b6:70:77:19:90:cc:54:a6:
5c:0f:ea:c2:b4:fe:c5:1f:a8:27:9d:db:5d:7c:44:
ca:90:71:27:c3:c2:e6:76:9e:c3:48:15:16:56:b8:
3b:9b:31:5c:93:3f:eb:db:c0:dc:b7:97:1d:15:7d:
e8:2d:cb:7e:b6:4c:8c:b1:e1:20:21:b5:cb:9c:a9:
7a:b4:40:7e:c5:c1:c0:7b:f8:fb:6a:66:d5:c3:29:
0c:9d:2f:45:81:7e:e7:09:2b:9e:4c:51:62:74:2c:
32:a3:de:44:e9:28:45:06:71:1a:eb:ab:0b:84:f7:
df:c3:af:e0:02:16:95:a1:be:9c:38:f7:18:29:b7:
6c:f2:2b:80:97:d7:e0:7b:49:f2:c0:88:fc:da:9c:
9d:a7:bc:d4:56:07:93:63:17:eb:a0:f9:b8:11:ef:
51:69:72:ee:b9:4e:c5:24:43:2f:c3:3c:34:b4:58:
95:3a:bc:49:e3:4e:af:05:99:03:d7:ca:82:02:1d:
06:1a:cf:97:93:e8:14:df:3f:e2:fb:7b:f4:d0:08:
d2:2a:1e:8c:77:e6:55:40:ba:3d:24:10:2d:32:46:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:87:74:4E:B5:D0:93:6E:97:00:7F:F5:5B:07:28:80:2A:3A:34:08
X509v3 Authority Key Identifier:
keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b1:d0:cd:00:50:10:d6:c8:50:38:9f:e7:11:cf:bd:6b:1b:
66:61:cd:79:e5:fe:99:86:85:06:61:3f:14:d4:1b:a1:8d:a2:
2f:01:84:82:39:3d:c4:96:20:08:34:b5:4c:25:0e:88:b9:e3:
24:62:9d:58:15:56:a2:7a:9e:1b:9d:37:bf:d5:c3:fe:ea:24:
5b:ef:3d:a5:26:0f:38:37:83:71:59:00:fd:28:c6:ed:cc:6d:
a2:e8:72:e7:3b:5a:9b:f0:be:07:bf:3a:9e:83:7d:11:35:f0:
9d:e0:11:d5:42:a2:c7:1c:7b:26:90:a7:c9:2d:e8:41:a1:82:
32:86:4a:62:19:19:8c:56:f1:d2:85:6e:24:54:dd:82:4b:b4:
2e:73:4f:26:5d:c2:9e:2c:a8:bc:7c:c0:83:bf:df:4e:00:2b:
de:a8:e5:ca:6b:5b:10:d3:47:02:f9:72:3f:90:ca:bf:f5:e9:
7e:10:7b:c6:af:0f:31:5d:55:f1:7c:22:6c:41:09:73:98:14:
93:22:61:81:55:2c:d8:8a:b3:fc:3e:33:86:07:57:8a:ed:4b:
8d:57:fe:24:e8:c1:d3:b0:cf:57:b6:f7:2b:b5:e5:06:b2:ca:
8f:f9:2c:4f:5b:e1:67:bf:6b:64:1c:59:6f:71:fa:a6:6e:bb:
2a:df:b9:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdaJGIDkKzuC7yjqsogvl1mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOTYyNTU0MWFiZTZiNWFlOTI2NjcxZGFhOThhYzZkODA5
NGVjN2IwHhcNMjUwNjEwMTQwMDIzWhcNMjUwNjExMTQwMDIzWjAzMTEwLwYDVQQD
EygzMDg3NzQ0ZWI1ZDA5MzZlOTcwMDdmZjU1YjA3Mjg4MDJhM2EzNDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QsOng7DLZGZcXld2/B1Rd4rYkLc
XJzNX9QiGhCgc08MVthwtnB3GZDMVKZcD+rCtP7FH6gnndtdfETKkHEnw8Lmdp7D
SBUWVrg7mzFckz/r28Dct5cdFX3oLct+tkyMseEgIbXLnKl6tEB+xcHAe/j7ambV
wykMnS9FgX7nCSueTFFidCwyo95E6ShFBnEa66sLhPffw6/gAhaVob6cOPcYKbds
8iuAl9fge0nywIj82pydp7zUVgeTYxfroPm4Ee9RaXLuuU7FJEMvwzw0tFiVOrxJ
406vBZkD18qCAh0GGs+Xk+gU3z/i+3v00AjSKh6Md+ZVQLo9JBAtMkaTqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCHdE610JNulwB/9VsHKIAqOjQIMB8GA1UdIwQY
MBaAFM+WJVQavmta6SZnHaqYrG2AlOx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzJlZDMtNDM0ZC00ZDQ5LTk1Y2Et
NTlhNTg3YmRlYTNmLzEvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xMzJlZDMtNDM0ZC00ZDQ5LTk1Y2EtNTlhNTg3YmRlYTNm
LzEvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbHQzQBQ
ENbIUDif5xHPvWsbZmHNeeX+mYaFBmE/FNQboY2iLwGEgjk9xJYgCDS1TCUOiLnj
JGKdWBVWonqeG503v9XD/uokW+89pSYPODeDcVkA/SjG7cxtouhy5ztam/C+B786
noN9ETXwneAR1UKixxx7JpCnyS3oQaGCMoZKYhkZjFbx0oVuJFTdgku0LnNPJl3C
niyovHzAg7/fTgAr3qjlymtbENNHAvlyP5DKv/XpfhB7xq8PMV1V8XwibEEJc5gU
kyJhgVUs2Iqz/D4zhgdXiu1LjVf+JOjB07DPV7b3K7XlBrLKj/ksT1vhZ79rZBxZ
b3H6pm67Kt+5ww==
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:01:39 2025 by rpki-client