Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json)
Hash identifier: Pwz+OTddz1p8YSXxOyrlvCxa+lUYRpds8x7GIgTiOMc=
Subject key identifier: F3:2B:5F:23:50:17:77:C2:BB:2B:35:C4:6C:BF:19:60:2A:16:97:D9
Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Certificate serial: 019753EBE4C3621D7AFA3FC264CB376EE944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
Manifest number: 0EEE
Signing time: Mon 09 Jun 2025 09:00:57 +0000
Manifest this update: Mon 09 Jun 2025 09:00:57 +0000
Manifest next update: Tue 10 Jun 2025 09:00:57 +0000
Files and hashes: 1: i-wVHRnuTYtFq7EOptpWJBt3Mdw.roa (hash: dyBwX82dFdjJwih5rdCwN8ZxNRpPJvl5rysORp718qc=)
2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: QhD9/dSv3OUDw+xAkhhyoaj2ZRiFhOIoWjZgfa4wbjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:e4:c3:62:1d:7a:fa:3f:c2:64:cb:37:6e:e9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Validity
Not Before: Jun 9 09:00:57 2025 GMT
Not After : Jun 10 09:00:57 2025 GMT
Subject: CN=f32b5f23501777c2bb2b35c46cbf19602a1697d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:7d:48:a9:e4:0b:78:6a:fe:57:41:25:94:
74:75:01:47:4a:61:d6:71:e9:b8:2f:7a:96:1a:b8:
e8:0d:7b:3a:a4:08:65:fe:0f:01:e3:7a:4e:c3:a7:
da:41:0e:07:af:93:87:37:5f:01:55:02:fb:73:6c:
57:1b:dc:48:f5:5d:d3:2b:53:04:f6:99:03:3c:1a:
50:1a:be:1c:61:c7:7a:7e:df:c4:cb:b0:59:22:b8:
b6:1c:8f:08:7f:1e:d3:70:33:d3:2f:4a:40:c0:c5:
a6:b7:99:e3:7a:d5:b9:75:c3:82:5d:17:ad:2c:ff:
8b:6c:d6:d8:26:b0:b8:19:68:de:b5:43:f2:e0:57:
bc:2f:70:39:b5:e7:13:ce:47:5e:8a:fd:71:0f:26:
a0:a4:14:e9:09:f2:0d:7e:36:af:0d:3a:ab:de:18:
aa:26:bb:80:19:bf:6f:ce:22:04:72:9b:fe:ec:3d:
8f:6b:91:2d:37:a7:01:92:3f:1e:03:8a:d9:d4:0e:
b4:16:41:8a:8e:80:91:2f:4c:95:e3:d2:75:61:6b:
14:8d:4c:01:25:6b:7e:cc:fd:31:05:b2:09:31:d0:
bc:2f:73:e9:d8:07:55:81:22:29:0f:e9:3b:3b:7c:
6f:26:b7:e4:68:b5:ea:6c:35:79:d8:75:7c:0a:b8:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2B:5F:23:50:17:77:C2:BB:2B:35:C4:6C:BF:19:60:2A:16:97:D9
X509v3 Authority Key Identifier:
keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:72:56:7c:8d:a4:9f:eb:39:70:c4:77:d4:46:00:24:d1:d0:
36:3a:7a:18:54:4f:76:f7:49:fe:80:b4:93:75:04:ef:12:b6:
17:d1:77:f8:8e:e6:d5:d1:68:de:24:ab:a2:f2:d9:69:f7:ba:
ab:b9:88:21:67:13:c6:4b:5f:a0:17:dd:21:61:34:12:70:5c:
94:bb:d5:ce:5e:e3:1a:82:b4:b8:a4:ad:18:eb:69:10:b7:64:
1c:77:d3:c2:c9:9b:c6:87:c8:bf:de:58:f0:1a:a2:1c:5a:8d:
e9:dc:d4:fa:8d:36:ef:b0:41:c6:79:ff:9a:03:05:ee:4e:54:
58:d9:55:a2:e8:59:4b:a3:31:8a:87:6e:8d:1f:56:26:80:07:
5b:96:4b:d2:4f:af:96:4f:7a:ea:a5:f8:72:66:e1:64:0b:8f:
d3:09:d3:bb:2c:b7:53:f3:83:c0:c3:1a:31:c6:1d:fd:68:cf:
fe:ff:2b:47:0c:fb:ec:b4:18:25:d1:60:94:9d:1f:11:0b:18:
72:a1:df:d8:7f:43:f5:d2:ab:c5:44:20:41:e1:32:e5:0c:0d:
6d:72:6d:4e:a9:8d:f8:13:3e:c1:ec:c8:21:e5:87:8e:90:78:
b9:86:be:83:86:74:2f:d4:e6:c9:b9:7f:fc:ad:59:e8:7c:1b:
f2:2e:1b:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdT6+TDYh16+j/CZMs3bulEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNTU4MWQyNzQ4YWZjZjc3OTY2Nzk3N2Y3YjY3MzllZTRm
OWZjMGQwHhcNMjUwNjA5MDkwMDU3WhcNMjUwNjEwMDkwMDU3WjAzMTEwLwYDVQQD
EyhmMzJiNWYyMzUwMTc3N2MyYmIyYjM1YzQ2Y2JmMTk2MDJhMTY5N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yl9SKnkC3hq/ldBJZR0dQFHSmHW
cem4L3qWGrjoDXs6pAhl/g8B43pOw6faQQ4Hr5OHN18BVQL7c2xXG9xI9V3TK1ME
9pkDPBpQGr4cYcd6ft/Ey7BZIri2HI8Ifx7TcDPTL0pAwMWmt5njetW5dcOCXRet
LP+LbNbYJrC4GWjetUPy4Fe8L3A5tecTzkdeiv1xDyagpBTpCfINfjavDTqr3hiq
JruAGb9vziIEcpv+7D2Pa5EtN6cBkj8eA4rZ1A60FkGKjoCRL0yV49J1YWsUjUwB
JWt+zP0xBbIJMdC8L3Pp2AdVgSIpD+k7O3xvJrfkaLXqbDV52HV8Crjn7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMrXyNQF3fCuys1xGy/GWAqFpfZMB8GA1UdIwQY
MBaAFM5VgdJ0ivz3eWZ5d/e2c57k+fwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NDE0ZjEtZDQ2OC00ZDk3LWIyOTkt
ZDc2OGE3N2Q1N2Y0LzEvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NDE0ZjEtZDQ2OC00ZDk3LWIyOTktZDc2OGE3N2Q1N2Y0
LzEvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXJWfI2k
n+s5cMR31EYAJNHQNjp6GFRPdvdJ/oC0k3UE7xK2F9F3+I7m1dFo3iSrovLZafe6
q7mIIWcTxktfoBfdIWE0EnBclLvVzl7jGoK0uKStGOtpELdkHHfTwsmbxofIv95Y
8BqiHFqN6dzU+o0277BBxnn/mgMF7k5UWNlVouhZS6MxiodujR9WJoAHW5ZL0k+v
lk966qX4cmbhZAuP0wnTuyy3U/ODwMMaMcYd/WjP/v8rRwz77LQYJdFglJ0fEQsY
cqHf2H9D9dKrxUQgQeEy5QwNbXJtTqmN+BM+wezIIeWHjpB4uYa+g4Z0L9Tmybl/
/K1Z6Hwb8i4blA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 15:13:17 2025 by rpki-client