Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
File: Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json)
Hash identifier: wkkwJG8C8G6NSzdyDzUj2Xkttll3JJrHr4IHPFeAFss=
Subject key identifier: 9D:8D:3B:8B:D4:78:DB:1A:E0:AE:33:80:0B:04:73:EE:EB:6F:F3:86
Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Certificate issuer: /CN=6745314516483fe27c0530ccb9707c376d20e7f0
Certificate serial: 019757FFB2517C5950C6A5F3D7684D3D564B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
Manifest number: 0A67
Signing time: Tue 10 Jun 2025 04:01:04 +0000
Manifest this update: Tue 10 Jun 2025 04:01:04 +0000
Manifest next update: Wed 11 Jun 2025 04:01:04 +0000
Files and hashes: 1: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: NnKWO8ld1ptrncSRAH7Y2b3afw11FxHJXcEfNe35M88=)
2: omUHhrKSJPjXc3fnFI7A_uy7HUU.roa (hash: xj7VTWYKB+CTrZ+OfVzTG694MjcNSO25Qbd0GhfZgnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:ff:b2:51:7c:59:50:c6:a5:f3:d7:68:4d:3d:56:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0
Validity
Not Before: Jun 10 04:01:04 2025 GMT
Not After : Jun 11 04:01:04 2025 GMT
Subject: CN=9d8d3b8bd478db1ae0ae33800b0473eeeb6ff386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:cd:68:c2:84:43:11:51:4f:6f:da:56:86:
07:b7:7a:9e:f4:07:32:e4:bf:12:0a:8a:ca:1d:58:
4d:54:6d:bc:77:e8:9c:4f:06:14:aa:fc:a8:c4:ae:
a8:a1:bc:8a:70:91:ca:25:68:90:44:1b:65:60:0d:
ce:23:a0:4e:05:6f:94:a3:7d:fe:99:3d:72:ab:0b:
43:ab:ba:76:35:15:ec:8b:79:6b:3f:df:8a:68:6e:
6e:61:78:49:e9:ad:ee:f2:91:01:ac:74:3c:f0:c6:
9a:7f:ed:6b:6c:32:d9:bd:46:5b:9f:ab:df:69:b8:
0a:15:a9:ba:d5:33:57:0f:00:24:b1:de:88:61:1a:
6a:64:9f:21:97:e4:4e:3e:a5:e7:73:a8:cf:ff:87:
bd:80:28:a7:56:6e:e2:47:f5:0a:0d:bd:14:a8:0f:
eb:75:47:05:8a:80:4e:ed:6a:51:e4:db:8c:d3:19:
89:7f:14:be:7b:42:5d:f4:20:a5:25:23:21:12:d0:
96:eb:12:38:c2:37:ba:6c:d8:1e:59:62:48:31:11:
95:34:2e:6f:09:75:9e:20:a6:a4:7c:a6:86:58:df:
2c:22:aa:d7:04:c2:0a:dd:7e:7e:97:e3:c5:a3:4a:
cd:75:e3:43:e0:fc:06:cd:ba:0b:0d:81:e0:68:6c:
7a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8D:3B:8B:D4:78:DB:1A:E0:AE:33:80:0B:04:73:EE:EB:6F:F3:86
X509v3 Authority Key Identifier:
keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:39:cc:ad:5b:dc:5c:2b:be:78:fb:ad:14:42:0e:58:ba:aa:
be:c7:a3:fb:f1:26:c1:2b:70:2f:11:e2:12:7b:47:68:f3:8d:
27:ff:b4:8f:dd:6a:7c:1a:ac:50:7f:13:df:8b:36:8d:f8:5d:
09:c9:a1:8c:36:41:df:20:9b:f8:cf:94:95:9e:65:f5:3c:89:
ab:af:1a:11:b7:3e:df:43:76:79:64:f0:ff:9c:a1:f5:1b:65:
39:1e:cf:2e:ef:5c:38:ab:37:0e:d2:84:7b:97:ef:f0:a1:43:
46:3e:8b:c7:f1:bd:c2:ac:e6:cb:98:71:be:14:19:31:17:75:
3d:d0:43:eb:37:9b:b9:98:da:0a:6d:23:cd:07:79:78:6a:80:
1f:83:69:0f:c2:e5:f0:0c:e8:ac:51:5b:9b:a9:61:4a:a0:bd:
88:03:dc:75:c3:eb:31:16:10:90:64:43:fd:09:84:eb:a4:64:
56:f1:85:a2:4d:cf:68:3f:ba:c6:b2:f9:db:f7:80:d3:e8:07:
eb:29:f5:a9:fa:2a:c2:75:5f:a2:94:aa:1f:9f:01:c2:1a:da:
20:c5:22:3b:fb:fe:a6:64:70:3e:e4:3c:3c:90:5e:db:61:20:
1a:3d:3c:57:bf:5c:06:8c:cf:a7:11:2c:1e:ce:3e:6d:5a:99:
94:57:e7:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdX/7JRfFlQxqXz12hNPVZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDUzMTQ1MTY0ODNmZTI3YzA1MzBjY2I5NzA3YzM3NmQy
MGU3ZjAwHhcNMjUwNjEwMDQwMTA0WhcNMjUwNjExMDQwMTA0WjAzMTEwLwYDVQQD
Eyg5ZDhkM2I4YmQ0NzhkYjFhZTBhZTMzODAwYjA0NzNlZWViNmZmMzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfbNaMKEQxFRT2/aVoYHt3qe9Acy
5L8SCorKHVhNVG28d+icTwYUqvyoxK6oobyKcJHKJWiQRBtlYA3OI6BOBW+Uo33+
mT1yqwtDq7p2NRXsi3lrP9+KaG5uYXhJ6a3u8pEBrHQ88Maaf+1rbDLZvUZbn6vf
abgKFam61TNXDwAksd6IYRpqZJ8hl+ROPqXnc6jP/4e9gCinVm7iR/UKDb0UqA/r
dUcFioBO7WpR5NuM0xmJfxS+e0Jd9CClJSMhEtCW6xI4wje6bNgeWWJIMRGVNC5v
CXWeIKakfKaGWN8sIqrXBMIK3X5+l+PFo0rNdeND4PwGzboLDYHgaGx63wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2NO4vUeNsa4K4zgAsEc+7rb/OGMB8GA1UdIwQY
MBaAFGdFMUUWSD/ifAUwzLlwfDdtIOfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mYjQ4ZmQtNGVjNS00M2YxLTkzY2Mt
ODY1NDc4NmUyMGE5LzEvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9mYjQ4ZmQtNGVjNS00M2YxLTkzY2MtODY1NDc4NmUyMGE5
LzEvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjnMrVvc
XCu+ePutFEIOWLqqvsej+/EmwStwLxHiEntHaPONJ/+0j91qfBqsUH8T34s2jfhd
CcmhjDZB3yCb+M+UlZ5l9TyJq68aEbc+30N2eWTw/5yh9RtlOR7PLu9cOKs3DtKE
e5fv8KFDRj6Lx/G9wqzmy5hxvhQZMRd1PdBD6zebuZjaCm0jzQd5eGqAH4NpD8Ll
8AzorFFbm6lhSqC9iAPcdcPrMRYQkGRD/QmE66RkVvGFok3PaD+6xrL52/eA0+gH
6yn1qfoqwnVfopSqH58BwhraIMUiO/v+pmRwPuQ8PJBe22EgGj08V79cBozPpxEs
Hs4+bVqZlFfndQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 11:37:20 2025 by rpki-client