Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: eBSKoKn5ej3VGstP/iJ3Keb+1IW/PjtQmnQ8Yr+1Ifk=
Subject key identifier: 06:D0:C8:6A:8F:C7:4B:19:C3:06:BB:4D:85:C3:65:D2:21:BB:EB:B5
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 0197507C60EB6491F4F739975F35984119F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 17:00:17 +0000
Manifest this update: Sun 08 Jun 2025 17:00:17 +0000
Manifest next update: Mon 09 Jun 2025 17:00:17 +0000
Files and hashes: 1: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: eSPkXnMPe9B8XfFcIdbOygUU6A8gb4ybilOx2b4UZWA=)
2: yg4sGgC5KBzP9wrpfNuvhuojK2M.roa (hash: e1y06aA1s62UqKwjDXe9gE31sK3hItmKrNoYCjTILV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:60:eb:64:91:f4:f7:39:97:5f:35:98:41:19:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Jun 8 17:00:17 2025 GMT
Not After : Jun 9 17:00:17 2025 GMT
Subject: CN=06d0c86a8fc74b19c306bb4d85c365d221bbebb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:ca:6f:2f:80:fb:9b:d1:3f:1e:9e:d8:dc:
e2:10:a2:4d:3e:87:4b:f9:e6:6c:d1:1f:47:93:6f:
80:f5:85:68:a7:0c:90:fe:64:d2:ac:c6:13:5c:86:
c4:11:c5:07:b6:1d:a2:a8:ef:7c:67:e7:42:d0:d6:
27:ce:f2:ed:0b:5b:57:f6:8a:fd:3e:74:25:00:52:
a4:35:f4:15:d6:05:a7:7c:45:65:42:cf:ab:51:3c:
5a:f8:24:c8:7f:c2:0d:9a:12:72:09:c3:89:10:ce:
8e:01:8b:2b:d1:a3:f4:8d:92:ee:d3:53:bd:02:ef:
56:b3:94:79:8c:31:7b:0a:6f:9d:6b:8b:51:c4:18:
9b:ba:74:f6:95:af:a9:06:47:3c:b4:d9:aa:3d:00:
44:47:42:29:30:52:12:18:7b:14:62:e0:97:f2:b7:
3b:ae:9c:b6:0d:78:25:35:a0:0c:39:95:d5:c9:0a:
74:af:f2:15:d2:8d:84:a3:67:11:61:65:7c:51:6b:
6c:7c:fe:52:b9:6b:18:5e:c1:7a:da:ae:4d:82:50:
73:2a:32:90:90:e9:6c:f4:35:7f:f8:1e:55:f9:b8:
4a:ed:41:bf:64:a7:79:57:39:30:82:0c:9f:8e:e3:
d0:2d:ac:d7:b5:73:61:8b:36:b4:35:83:87:4d:ed:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D0:C8:6A:8F:C7:4B:19:C3:06:BB:4D:85:C3:65:D2:21:BB:EB:B5
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0b:7d:e4:cb:74:39:88:66:b6:66:ac:e2:f0:fa:a6:07:8d:
92:94:00:9e:d3:18:7c:cd:0a:48:24:e0:68:9c:88:9d:8e:af:
5f:82:3a:e4:70:99:a2:b4:3f:a4:6a:3a:b6:e1:59:90:75:68:
a0:62:ee:fe:46:51:17:4d:d2:11:ab:4e:57:51:76:0c:2b:45:
02:cd:db:bb:3b:3a:a7:c2:13:44:21:86:ba:22:96:84:11:e1:
8f:b7:4b:20:76:66:27:44:57:21:6c:f6:4a:f7:f2:d8:2d:36:
95:32:4a:80:7a:ab:00:b9:92:5b:3e:80:9d:91:fe:22:57:a0:
2b:83:ea:bb:8c:1e:26:37:f5:b6:04:6a:fc:37:7f:ce:48:15:
68:a8:29:93:c3:e3:e5:82:7a:16:48:86:bc:76:d7:fa:9b:7f:
f0:62:56:a5:6d:00:0a:09:f0:f0:0e:c2:1c:a8:3f:91:9e:b6:
5c:32:99:6c:ed:53:03:16:c6:c6:e2:04:3a:78:7b:ba:b9:a0:
16:8e:82:a7:b6:89:03:15:a1:cc:26:5c:08:11:2b:d8:4d:5d:
7f:cd:be:1c:50:b0:21:2e:24:cf:bd:c5:31:88:5a:44:d7:47:
4e:27:93:2c:74:3a:72:5d:ba:5b:69:53:df:ef:4b:97:35:07:
cf:3f:ed:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQfGDrZJH09zmXXzWYQRn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTQyNGNlZTJmZGIwMDcyYjU0MTQzOGQ5MTNkMjY2MzZh
OWI4OGIwHhcNMjUwNjA4MTcwMDE3WhcNMjUwNjA5MTcwMDE3WjAzMTEwLwYDVQQD
EygwNmQwYzg2YThmYzc0YjE5YzMwNmJiNGQ4NWMzNjVkMjIxYmJlYmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo3Kby+A+5vRPx6e2NziEKJNPodL
+eZs0R9Hk2+A9YVopwyQ/mTSrMYTXIbEEcUHth2iqO98Z+dC0NYnzvLtC1tX9or9
PnQlAFKkNfQV1gWnfEVlQs+rUTxa+CTIf8INmhJyCcOJEM6OAYsr0aP0jZLu01O9
Au9Ws5R5jDF7Cm+da4tRxBibunT2la+pBkc8tNmqPQBER0IpMFISGHsUYuCX8rc7
rpy2DXglNaAMOZXVyQp0r/IV0o2Eo2cRYWV8UWtsfP5SuWsYXsF62q5NglBzKjKQ
kOls9DV/+B5V+bhK7UG/ZKd5VzkwggyfjuPQLazXtXNhiza0NYOHTe2PuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbQyGqPx0sZwwa7TYXDZdIhu+u1MB8GA1UdIwQY
MBaAFGWkJM7i/bAHK1QUONkT0mY2qbiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWIt
MmI4MDM4MjgzMDE3LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWItMmI4MDM4MjgzMDE3
LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQt95Mt0
OYhmtmas4vD6pgeNkpQAntMYfM0KSCTgaJyInY6vX4I65HCZorQ/pGo6tuFZkHVo
oGLu/kZRF03SEatOV1F2DCtFAs3buzs6p8ITRCGGuiKWhBHhj7dLIHZmJ0RXIWz2
Svfy2C02lTJKgHqrALmSWz6AnZH+IlegK4Pqu4weJjf1tgRq/Dd/zkgVaKgpk8Pj
5YJ6FkiGvHbX+pt/8GJWpW0ACgnw8A7CHKg/kZ62XDKZbO1TAxbGxuIEOnh7urmg
Fo6Cp7aJAxWhzCZcCBEr2E1df82+HFCwIS4kz73FMYhaRNdHTieTLHQ6cl26W2lT
3+9LlzUHzz/tLw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:50 2025 by rpki-client