Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json)
Hash identifier: ln6hSXubCmECL8X0BR2EIqB4W1c9QeG03IeMOkdWAMg=
Subject key identifier: 10:B0:DC:51:CA:D0:47:9E:3D:33:31:F1:8B:1A:BD:F0:09:C7:F5:F3
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 0197530FB4458168418A7BDC49119A0AEA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
Manifest number: 0C7F
Signing time: Mon 09 Jun 2025 05:00:27 +0000
Manifest this update: Mon 09 Jun 2025 05:00:27 +0000
Manifest next update: Tue 10 Jun 2025 05:00:27 +0000
Files and hashes: 1: NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa (hash: leptyc1ArNcvItJ2wmbr4PCi0dhI2TNC9iUamda0cJ8=)
2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: SyfL8rd+WErLpwaEmPBtLV9xxmVbz9BtwfiPb8Q4nWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:b4:45:81:68:41:8a:7b:dc:49:11:9a:0a:ea:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: Jun 9 05:00:27 2025 GMT
Not After : Jun 10 05:00:27 2025 GMT
Subject: CN=10b0dc51cad0479e3d3331f18b1abdf009c7f5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:81:9d:ce:96:dc:24:27:9a:76:c6:6d:4b:
89:a7:f2:5a:bd:d2:b5:eb:a1:94:b9:c0:ca:72:2d:
25:be:7e:68:80:e4:b5:9b:88:cf:d2:89:22:9c:bc:
db:97:9a:f5:2c:37:1c:e1:51:7c:1a:bb:0b:8d:77:
c7:fb:04:43:1b:5d:16:a4:24:bd:ca:31:ac:76:44:
40:98:9c:84:9d:9e:5b:95:07:66:47:75:cd:78:36:
e9:9c:40:87:f5:60:87:d3:12:68:14:a8:70:fe:b8:
8b:23:6d:27:0a:99:6a:29:16:1a:22:41:78:82:ba:
80:e1:e2:90:c7:37:01:8b:7f:a4:e6:77:b4:60:a7:
bc:3a:56:51:00:26:d7:b6:55:3b:3c:12:45:1a:54:
ee:46:13:29:54:89:90:83:eb:d8:d4:96:29:03:d5:
90:e1:9a:54:4e:70:39:fe:16:9c:fc:23:b8:82:3c:
e8:ac:dc:6d:69:42:dd:e0:15:02:45:5e:11:17:df:
89:2d:39:a1:ef:ff:29:9c:12:77:c5:34:ee:6e:5a:
1c:5a:b9:ff:7d:55:c8:92:94:51:e1:ad:e5:44:16:
19:32:a7:e8:fd:e7:9c:fc:8b:35:f5:d6:45:a5:4a:
a0:10:d6:8e:06:2a:41:6e:4f:a1:fe:1b:c8:9f:a7:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B0:DC:51:CA:D0:47:9E:3D:33:31:F1:8B:1A:BD:F0:09:C7:F5:F3
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f7:12:f7:49:70:43:fd:14:69:b3:57:c1:64:94:aa:42:f3:
f5:89:2f:86:ed:b5:49:4c:b7:46:20:6d:03:ba:b5:8d:70:ed:
5d:90:24:38:56:11:7c:ba:e2:b3:77:f7:02:a9:d5:f7:83:01:
06:16:ad:af:c5:9d:b5:9c:1a:b0:cb:84:32:e9:14:4d:c9:ad:
ed:51:6b:47:1b:fc:d5:c3:bd:05:24:b8:57:b0:4b:8b:4f:9c:
33:82:bc:4b:dd:fc:dc:13:54:41:ab:81:c7:50:fd:31:09:b2:
42:d6:48:1e:e9:13:bb:07:e8:f7:3a:ad:f9:21:b9:0c:d5:44:
80:de:df:e4:69:42:98:cf:46:91:e2:35:23:0f:34:84:89:f0:
a4:35:2a:cf:84:ca:2d:e8:2a:7a:ba:79:a4:40:ed:15:be:05:
20:43:dc:00:8e:37:ca:1d:0b:84:ec:42:08:f4:30:01:60:7f:
34:e0:3b:c7:82:1e:0e:27:ae:6f:02:86:de:e8:d4:98:88:67:
eb:e3:e1:c4:c2:9c:47:e6:d6:e6:6a:bf:2d:83:2f:07:4d:ee:
e7:b1:f7:b2:a0:f0:92:3c:8f:e8:8f:9e:3e:f6:1e:56:7b:8c:
b7:1f:b2:33:a1:cc:09:9a:0e:46:9b:d1:55:23:b6:d9:2f:5f:
39:57:f2:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTD7RFgWhBinvcSRGaCupdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MzE3ODViNjIzNDkyZWQwYzk5ZWQ3OWM3ZGI3NDA0YWQ0
Y2IxNzEwHhcNMjUwNjA5MDUwMDI3WhcNMjUwNjEwMDUwMDI3WjAzMTEwLwYDVQQD
EygxMGIwZGM1MWNhZDA0NzllM2QzMzMxZjE4YjFhYmRmMDA5YzdmNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKqBnc6W3CQnmnbGbUuJp/JavdK1
66GUucDKci0lvn5ogOS1m4jP0okinLzbl5r1LDcc4VF8GrsLjXfH+wRDG10WpCS9
yjGsdkRAmJyEnZ5blQdmR3XNeDbpnECH9WCH0xJoFKhw/riLI20nCplqKRYaIkF4
grqA4eKQxzcBi3+k5ne0YKe8OlZRACbXtlU7PBJFGlTuRhMpVImQg+vY1JYpA9WQ
4ZpUTnA5/hac/CO4gjzorNxtaULd4BUCRV4RF9+JLTmh7/8pnBJ3xTTublocWrn/
fVXIkpRR4a3lRBYZMqfo/eec/Is19dZFpUqgENaOBipBbk+h/hvIn6ciPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCw3FHK0EeePTMx8YsavfAJx/XzMB8GA1UdIwQY
MBaAFGUxeFtiNJLtDJntecfbdAStTLFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMt
MTI2Y2UwODE1MjlhLzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMtMTI2Y2UwODE1Mjlh
LzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPcS90lw
Q/0UabNXwWSUqkLz9Ykvhu21SUy3RiBtA7q1jXDtXZAkOFYRfLris3f3AqnV94MB
Bhatr8WdtZwasMuEMukUTcmt7VFrRxv81cO9BSS4V7BLi0+cM4K8S9383BNUQauB
x1D9MQmyQtZIHukTuwfo9zqt+SG5DNVEgN7f5GlCmM9GkeI1Iw80hInwpDUqz4TK
Legqerp5pEDtFb4FIEPcAI43yh0LhOxCCPQwAWB/NOA7x4IeDieubwKG3ujUmIhn
6+PhxMKcR+bW5mq/LYMvB03u57H3sqDwkjyP6I+ePvYeVnuMtx+yM6HMCZoORpvR
VSO22S9fOVfyhw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:52:35 2025 by rpki-client