Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File: z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier: +X4RE+p537EGeyGxpz0SCtXg0l99sU7p8P+QkmPEimo=
Subject key identifier: 04:4C:92:04:06:B8:FF:72:C8:11:63:7B:B6:64:83:37:65:CA:E2:49
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial: 019769977988BF475D9F5B7A2BEEF18334E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number: 1121
Signing time: Fri 13 Jun 2025 14:00:23 +0000
Manifest this update: Fri 13 Jun 2025 14:00:23 +0000
Manifest next update: Sat 14 Jun 2025 14:00:23 +0000
Files and hashes: 1: 4LDf3BAWYj8mO4n0cpZaSTYNCgQ.roa (hash: 2PsEN5j0ePjCMadYZW/XY72E9eg7u91QL60wRji2nxY=)
2: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: QsJp1aC7C3tSy+yOxFHDtQJR9iLKyPTbbo/58IOTjI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:79:88:bf:47:5d:9f:5b:7a:2b:ee:f1:83:34:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Validity
Not Before: Jun 13 14:00:23 2025 GMT
Not After : Jun 14 14:00:23 2025 GMT
Subject: CN=044c920406b8ff72c811637bb664833765cae249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:b0:83:83:9a:1e:6c:fc:a3:c8:c3:b9:e8:
5e:c1:ca:c7:4b:58:24:44:10:aa:c9:77:50:63:af:
67:a1:53:31:d5:6f:07:a0:0b:ef:28:85:9e:67:d2:
c9:79:2c:09:1f:4c:19:aa:a8:cc:2c:a7:30:93:f0:
74:90:e1:f6:1f:74:aa:38:71:5a:30:44:23:70:41:
36:c7:2f:28:90:17:36:1e:ec:a9:81:28:83:27:cd:
52:b0:de:32:48:8e:28:8e:cd:0b:88:58:c3:87:f1:
f2:11:00:23:5f:bd:f4:82:b7:ac:1c:32:cb:0a:83:
c4:e7:7a:fe:32:95:53:b4:d7:a8:85:d4:bb:b8:70:
22:6f:00:d3:eb:bb:c5:8b:2d:f0:62:37:38:e6:46:
b8:70:c3:1b:4e:f1:f9:41:7b:20:ab:5a:2b:e1:80:
15:fe:04:c4:78:f7:69:56:17:6e:c2:9f:bf:74:59:
21:c4:7d:8e:35:05:3d:be:69:11:33:02:f8:bd:02:
99:81:25:d5:e2:c1:a8:fa:18:e9:eb:56:f4:4a:88:
35:fc:01:9d:5a:58:2b:77:cb:54:00:9c:8c:c4:88:
18:e2:6e:65:b2:88:88:ea:98:b3:68:90:71:6f:b9:
c0:66:2c:9a:19:f7:de:62:c0:1d:1d:23:43:47:c3:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4C:92:04:06:B8:FF:72:C8:11:63:7B:B6:64:83:37:65:CA:E2:49
X509v3 Authority Key Identifier:
keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d6:02:6f:ce:5f:37:4d:93:ec:7c:e6:0b:65:6a:6f:92:af:
e6:c3:a7:72:e3:34:75:7e:eb:42:86:ad:70:d8:c8:93:78:b2:
41:72:fd:3f:ed:c4:ea:2a:ee:85:82:a3:cf:22:f2:06:0b:d0:
55:c9:63:60:c7:13:95:aa:1b:52:c3:01:23:63:8c:d5:c2:f8:
b4:cb:20:c3:13:43:e6:8d:2c:58:97:d4:35:5e:df:ad:be:6e:
96:c9:45:fd:6f:41:08:ab:5e:79:a7:d0:21:c0:5a:12:12:e2:
ef:e9:97:96:37:c9:bc:52:ac:61:de:89:c0:7f:6d:d7:ed:3a:
11:9e:c6:ae:53:26:a8:a1:5b:cf:fb:98:8f:bd:b7:3e:1e:2b:
e2:48:43:e7:74:a4:c4:43:e7:fc:76:9f:8a:2c:c7:97:92:3b:
4d:70:a0:c9:ab:1c:6a:0b:68:6f:9b:dd:ab:eb:b0:93:70:00:
be:55:84:c3:19:af:94:41:2d:76:3e:e5:bb:5a:98:0f:e6:88:
72:c5:68:36:82:55:64:e9:d8:30:f1:60:f3:37:b8:4d:c8:a0:
c3:72:2e:65:e8:39:cb:52:65:28:be:78:79:76:c3:d6:1e:2d:
d7:a1:dc:db:ef:f0:2a:08:09:71:0f:cc:a6:de:d5:58:61:19:
bd:98:7c:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl3mIv0ddn1t6K+7xgzTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOTYyNTU0MWFiZTZiNWFlOTI2NjcxZGFhOThhYzZkODA5
NGVjN2IwHhcNMjUwNjEzMTQwMDIzWhcNMjUwNjE0MTQwMDIzWjAzMTEwLwYDVQQD
EygwNDRjOTIwNDA2YjhmZjcyYzgxMTYzN2JiNjY0ODMzNzY1Y2FlMjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpGwg4OaHmz8o8jDuehewcrHS1gk
RBCqyXdQY69noVMx1W8HoAvvKIWeZ9LJeSwJH0wZqqjMLKcwk/B0kOH2H3SqOHFa
MEQjcEE2xy8okBc2HuypgSiDJ81SsN4ySI4ojs0LiFjDh/HyEQAjX730gresHDLL
CoPE53r+MpVTtNeohdS7uHAibwDT67vFiy3wYjc45ka4cMMbTvH5QXsgq1or4YAV
/gTEePdpVhduwp+/dFkhxH2ONQU9vmkRMwL4vQKZgSXV4sGo+hjp61b0Sog1/AGd
Wlgrd8tUAJyMxIgY4m5lsoiI6pizaJBxb7nAZiyaGffeYsAdHSNDR8O1vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARMkgQGuP9yyBFje7ZkgzdlyuJJMB8GA1UdIwQY
MBaAFM+WJVQavmta6SZnHaqYrG2AlOx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzJlZDMtNDM0ZC00ZDQ5LTk1Y2Et
NTlhNTg3YmRlYTNmLzEvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xMzJlZDMtNDM0ZC00ZDQ5LTk1Y2EtNTlhNTg3YmRlYTNm
LzEvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9YCb85f
N02T7HzmC2Vqb5Kv5sOncuM0dX7rQoatcNjIk3iyQXL9P+3E6iruhYKjzyLyBgvQ
VcljYMcTlaobUsMBI2OM1cL4tMsgwxND5o0sWJfUNV7frb5ulslF/W9BCKteeafQ
IcBaEhLi7+mXljfJvFKsYd6JwH9t1+06EZ7GrlMmqKFbz/uYj723Ph4r4khD53Sk
xEPn/HafiizHl5I7TXCgyascagtob5vdq+uwk3AAvlWEwxmvlEEtdj7lu1qYD+aI
csVoNoJVZOnYMPFg8ze4Tcigw3IuZeg5y1JlKL54eXbD1h4t16Hc2+/wKggJcQ/M
pt7VWGEZvZh8dg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 22:21:31 2025 by rpki-client