Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
File: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json)
Hash identifier: +Zezn+8lypZe4FL2j7iVZY7ZAp8chosjcRJyxL25NPM=
Subject key identifier: 24:51:49:95:8A:AC:89:30:6C:CD:13:46:3F:D7:E5:9E:2F:2A:2F:90
Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Certificate serial: 019748C32CFC68E00382726BEF8F5F637AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 05:00:39 +0000
Manifest this update: Sat 07 Jun 2025 05:00:39 +0000
Manifest next update: Sun 08 Jun 2025 05:00:39 +0000
Files and hashes: 1: cvViwCnJHbOmjnS2VIR4xe7m6w0.roa (hash: fo4ubxrjnffY7zW1GcJNKmk2YbysHvDvLAY+YQK8Gj8=)
2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: CaTcm4dLiokFnys5gOubnb7OMziCFOsqCFeEm8JNIh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:2c:fc:68:e0:03:82:72:6b:ef:8f:5f:63:7a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Validity
Not Before: Jun 7 05:00:39 2025 GMT
Not After : Jun 8 05:00:39 2025 GMT
Subject: CN=245149958aac89306ccd13463fd7e59e2f2a2f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:b9:8d:c6:04:94:21:34:60:51:75:e8:32:
84:ce:bd:32:0f:fa:99:c1:cf:b1:11:02:3b:b4:f9:
e6:8a:b5:03:45:ec:25:76:85:28:d2:54:a0:84:5e:
7e:32:a3:68:d0:b0:55:5a:01:c9:aa:e2:eb:d8:f4:
59:6c:7a:43:8a:9f:94:70:10:61:a4:80:fd:60:5d:
f7:1b:19:da:fe:b6:4f:80:73:74:85:ea:85:18:c9:
34:8f:24:75:01:3a:89:b8:23:bf:10:bf:0d:48:f9:
47:32:cc:24:c6:b7:61:74:44:e4:be:cb:b3:1e:34:
f4:a7:0d:1a:51:09:84:2f:62:f1:6a:17:4d:c1:8a:
50:b5:bc:71:25:ac:0a:93:52:d1:d2:1a:99:69:4f:
4e:e2:7d:75:df:6f:8c:59:38:89:c3:8a:0d:e0:b2:
ed:cc:df:e4:73:e3:4c:cd:18:a0:6d:3f:d6:30:2e:
83:99:fa:c0:0c:d9:00:42:9c:d0:fe:82:0f:6e:be:
04:6d:42:38:2b:8f:86:c7:8b:30:06:8d:f2:b4:a2:
35:22:90:23:a0:e8:57:8c:16:80:4f:2b:66:53:ad:
a7:75:1e:26:67:be:09:b9:a9:98:27:0e:88:59:ec:
b3:a4:98:a8:ad:6d:7d:d5:c1:43:04:07:2e:63:2d:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:51:49:95:8A:AC:89:30:6C:CD:13:46:3F:D7:E5:9E:2F:2A:2F:90
X509v3 Authority Key Identifier:
keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9c:4b:eb:10:2d:26:72:e4:4c:a7:a6:4a:56:fe:be:60:0b:
87:08:ae:3d:50:1d:3f:c6:8e:55:e4:42:04:b6:7a:8e:d9:01:
53:b7:a1:6f:0e:07:68:4f:3d:a3:2a:57:22:bb:2f:89:aa:6b:
3e:53:02:1e:cf:7a:a4:ed:a4:3f:37:1a:53:c2:ae:fd:37:df:
5f:82:94:4a:83:ac:73:b1:e3:cc:bc:7e:da:eb:3c:24:5c:02:
93:7a:a4:98:2c:1b:23:c2:f3:6b:8f:eb:11:6b:7d:d8:43:9f:
41:88:8d:84:2e:ec:a6:34:3a:0f:d6:20:9f:b6:4a:c1:65:27:
7e:8c:45:64:4e:3c:ad:1f:35:a3:e2:df:99:6d:38:48:cd:28:
01:09:88:2e:c1:6b:50:1f:30:a2:bd:37:a6:00:ee:3d:1a:e1:
70:0c:d9:e5:33:af:78:b3:d8:7a:88:10:cc:8d:e8:e2:b0:61:
06:e8:24:5c:c7:1b:d0:3d:b0:5d:f7:49:b1:0a:48:e4:00:5c:
0b:68:d9:a0:d6:8c:01:cf:49:13:4f:26:c1:a8:f5:d8:8a:44:
0d:69:48:d3:39:85:ca:41:e4:93:44:16:f5:4e:5f:98:34:58:
2d:61:fc:72:1c:ef:bf:f4:1a:53:2a:1d:c1:e2:d6:c0:cc:15:
68:2e:fc:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwyz8aOADgnJr749fY3rDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMzIzMTYzYmJiNDY1ZjJhMGZhMmY5M2ZhNTBlZjNiMGQ0
YzZhOWEwHhcNMjUwNjA3MDUwMDM5WhcNMjUwNjA4MDUwMDM5WjAzMTEwLwYDVQQD
EygyNDUxNDk5NThhYWM4OTMwNmNjZDEzNDYzZmQ3ZTU5ZTJmMmEyZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEK5jcYElCE0YFF16DKEzr0yD/qZ
wc+xEQI7tPnmirUDRewldoUo0lSghF5+MqNo0LBVWgHJquLr2PRZbHpDip+UcBBh
pID9YF33Gxna/rZPgHN0heqFGMk0jyR1ATqJuCO/EL8NSPlHMswkxrdhdETkvsuz
HjT0pw0aUQmEL2LxahdNwYpQtbxxJawKk1LR0hqZaU9O4n1132+MWTiJw4oN4LLt
zN/kc+NMzRigbT/WMC6DmfrADNkAQpzQ/oIPbr4EbUI4K4+Gx4swBo3ytKI1IpAj
oOhXjBaATytmU62ndR4mZ74JuamYJw6IWeyzpJiorW191cFDBAcuYy27twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRRSZWKrIkwbM0TRj/X5Z4vKi+QMB8GA1UdIwQY
MBaAFMwyMWO7tGXyoPovk/pQ7zsNTGqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTIt
MWVmMDA5MGI3MTU0LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTItMWVmMDA5MGI3MTU0
LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZxL6xAt
JnLkTKemSlb+vmALhwiuPVAdP8aOVeRCBLZ6jtkBU7ehbw4HaE89oypXIrsviapr
PlMCHs96pO2kPzcaU8Ku/TffX4KUSoOsc7HjzLx+2us8JFwCk3qkmCwbI8Lza4/r
EWt92EOfQYiNhC7spjQ6D9Ygn7ZKwWUnfoxFZE48rR81o+LfmW04SM0oAQmILsFr
UB8wor03pgDuPRrhcAzZ5TOveLPYeogQzI3o4rBhBugkXMcb0D2wXfdJsQpI5ABc
C2jZoNaMAc9JE08mwaj12IpEDWlI0zmFykHkk0QW9U5fmDRYLWH8chzvv/QaUyod
weLWwMwVaC78CQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:34:00 2025 by rpki-client