
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
File: Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json)
Hash identifier: knFYZ6fftvYqFGAZKJ+BlMGL0rKia/itTXlVvrSlC1s=
Subject key identifier: 06:07:8D:66:2B:53:7E:BA:8D:B3:BE:25:F5:77:85:78:4A:86:51:57
Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Certificate issuer: /CN=6745314516483fe27c0530ccb9707c376d20e7f0
Certificate serial: 01975BDCF05090990D4637F7B90E2C2BDADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
Manifest number: 0A69
Signing time: Tue 10 Jun 2025 22:01:35 +0000
Manifest this update: Tue 10 Jun 2025 22:01:35 +0000
Manifest next update: Wed 11 Jun 2025 22:01:35 +0000
Files and hashes: 1: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: 2qhWkD9aNt4NbuAqDgisYUElsBiMNuC8ji+V5NZHp2U=)
2: omUHhrKSJPjXc3fnFI7A_uy7HUU.roa (hash: xj7VTWYKB+CTrZ+OfVzTG694MjcNSO25Qbd0GhfZgnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:f0:50:90:99:0d:46:37:f7:b9:0e:2c:2b:da:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0
Validity
Not Before: Jun 10 22:01:35 2025 GMT
Not After : Jun 11 22:01:35 2025 GMT
Subject: CN=06078d662b537eba8db3be25f57785784a865157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:a5:01:74:9d:4d:73:ca:e5:0b:6e:74:b7:
e1:b7:e3:31:87:a5:29:cb:10:b4:3e:7c:5f:35:cf:
4b:9d:3e:13:9e:cc:fa:ca:43:d7:2c:35:c5:c3:55:
5c:6c:dd:57:f5:37:73:01:bd:3e:c2:91:7b:6f:8b:
d5:c0:6f:5b:56:35:a4:08:46:f8:fb:7e:ec:27:f0:
08:4c:f1:b1:1a:c4:b0:6b:ec:36:4e:87:76:b1:c5:
84:92:d8:7e:c5:19:76:48:f5:b1:40:3f:76:df:23:
3c:94:eb:8a:17:45:ed:b0:9f:87:52:4f:e3:0a:f7:
84:5d:04:98:82:27:7f:33:13:ee:7c:2f:4f:d0:5d:
0e:64:28:e4:22:71:3b:31:0e:9e:8c:72:1d:41:fb:
5f:37:cf:04:df:ed:52:dd:ca:f4:8c:f6:e7:e0:3f:
8b:df:2c:bd:31:a6:9c:6d:6f:09:0b:75:cd:9b:d7:
8c:99:84:a8:34:3f:7e:47:0a:dd:32:04:f8:55:d6:
76:0d:52:2f:6d:e8:93:ca:89:a4:67:c1:22:e3:d1:
ea:13:d2:b1:4b:c4:f4:1f:a4:6f:ab:38:ec:84:8c:
81:bc:c0:37:a8:4b:69:55:cc:ec:13:1e:bd:71:f1:
62:4a:f0:d5:96:6d:6b:4d:8a:ad:55:48:10:20:ad:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:07:8D:66:2B:53:7E:BA:8D:B3:BE:25:F5:77:85:78:4A:86:51:57
X509v3 Authority Key Identifier:
keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ef:b8:9a:05:24:ff:89:ff:ad:43:ea:71:e8:3a:4d:94:d3:
c2:a1:42:75:56:87:b4:bd:ea:d3:f9:d1:f7:5b:16:34:09:58:
f8:42:69:6e:ae:49:39:e9:c7:eb:a0:67:df:2b:1c:d2:62:10:
31:42:07:90:6c:6d:1e:02:4e:4f:5c:02:60:fe:39:3d:18:e4:
2b:f5:dd:2d:5c:4e:8e:d5:79:ff:e7:57:a5:45:1a:c0:39:b3:
ca:b1:5d:fd:d5:3c:7e:03:6d:cf:58:60:4c:69:89:b5:0e:1f:
af:16:b0:cd:2d:79:25:85:07:ab:04:02:3c:16:06:56:97:e3:
d8:3e:9d:34:f4:98:86:20:d5:d9:3b:2f:e6:fe:07:bd:06:26:
b6:07:84:33:20:37:3f:7a:57:37:22:32:b7:a1:47:cb:66:47:
69:ce:bb:91:a0:aa:45:08:c1:d4:fb:19:dc:16:1f:91:9d:19:
78:df:8d:b9:0c:da:08:e2:65:ec:ba:68:69:08:bc:c9:7a:b9:
bf:cd:db:93:70:20:39:0a:b9:c2:2a:08:78:f9:94:42:df:96:
ab:17:c1:7e:02:29:83:c4:7a:d8:c6:ad:d4:18:38:96:64:bb:
4d:70:2f:e1:61:f2:cf:44:b3:f4:19:6b:04:af:59:15:83:bd:
84:64:12:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdb3PBQkJkNRjf3uQ4sK9rbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDUzMTQ1MTY0ODNmZTI3YzA1MzBjY2I5NzA3YzM3NmQy
MGU3ZjAwHhcNMjUwNjEwMjIwMTM1WhcNMjUwNjExMjIwMTM1WjAzMTEwLwYDVQQD
EygwNjA3OGQ2NjJiNTM3ZWJhOGRiM2JlMjVmNTc3ODU3ODRhODY1MTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotGlAXSdTXPK5QtudLfht+Mxh6Up
yxC0PnxfNc9LnT4Tnsz6ykPXLDXFw1VcbN1X9TdzAb0+wpF7b4vVwG9bVjWkCEb4
+37sJ/AITPGxGsSwa+w2Tod2scWEkth+xRl2SPWxQD923yM8lOuKF0XtsJ+HUk/j
CveEXQSYgid/MxPufC9P0F0OZCjkInE7MQ6ejHIdQftfN88E3+1S3cr0jPbn4D+L
3yy9MaacbW8JC3XNm9eMmYSoND9+RwrdMgT4VdZ2DVIvbeiTyomkZ8Ei49HqE9Kx
S8T0H6RvqzjshIyBvMA3qEtpVczsEx69cfFiSvDVlm1rTYqtVUgQIK0tyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYHjWYrU366jbO+JfV3hXhKhlFXMB8GA1UdIwQY
MBaAFGdFMUUWSD/ifAUwzLlwfDdtIOfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mYjQ4ZmQtNGVjNS00M2YxLTkzY2Mt
ODY1NDc4NmUyMGE5LzEvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9mYjQ4ZmQtNGVjNS00M2YxLTkzY2MtODY1NDc4NmUyMGE5
LzEvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACu+4mgUk
/4n/rUPqceg6TZTTwqFCdVaHtL3q0/nR91sWNAlY+EJpbq5JOenH66Bn3ysc0mIQ
MUIHkGxtHgJOT1wCYP45PRjkK/XdLVxOjtV5/+dXpUUawDmzyrFd/dU8fgNtz1hg
TGmJtQ4frxawzS15JYUHqwQCPBYGVpfj2D6dNPSYhiDV2Tsv5v4HvQYmtgeEMyA3
P3pXNyIyt6FHy2ZHac67kaCqRQjB1PsZ3BYfkZ0ZeN+NuQzaCOJl7LpoaQi8yXq5
v83bk3AgOQq5wioIePmUQt+WqxfBfgIpg8R62Mat1Bg4lmS7TXAv4WHyz0Sz9Blr
BK9ZFYO9hGQS/w==
-----END CERTIFICATE-----
Generated at Wed Jun 11 08:45:40 2025 by rpki-client