Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: mLB5Lwa4tnL5GU6yIt/imRHwoJGknFCYpkMVyO7ijA4=
Subject key identifier: 18:24:3C:F1:0D:9F:B5:D1:0D:E5:41:D1:D8:4F:E9:54:5C:5A:C9:38
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 01974DB291C9C514BA3C3F20290CED2D5B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 158C
Signing time: Sun 08 Jun 2025 04:00:37 +0000
Manifest this update: Sun 08 Jun 2025 04:00:37 +0000
Manifest next update: Mon 09 Jun 2025 04:00:37 +0000
Files and hashes: 1: kNClGUwsPzE1RbZ5kG_8xETA5bQ.roa (hash: roFZQPowyRc/yMP0/ECMaCg3rilRHfIteyaYIvj0RIc=)
2: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: BR7pJs58v1ZGjTRg9FuVev5UKdRWPtfeGNWtXX4+J9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:91:c9:c5:14:ba:3c:3f:20:29:0c:ed:2d:5b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Jun 8 04:00:37 2025 GMT
Not After : Jun 9 04:00:37 2025 GMT
Subject: CN=18243cf10d9fb5d10de541d1d84fe9545c5ac938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2b:e3:68:f0:d5:72:93:06:c5:f3:1c:1b:a9:
20:55:2f:20:21:b8:ae:a1:9b:2c:7b:eb:3d:3d:10:
da:48:c8:de:ab:23:fb:f7:b4:6a:d8:ee:94:9f:b1:
b5:3c:d1:9a:86:b9:f4:2b:2c:a6:f3:c3:9d:4e:b3:
8f:28:22:9e:4f:96:67:94:24:92:b1:d9:0b:02:1c:
7f:f5:a9:cd:7a:9a:eb:e3:f8:23:2b:54:ea:bf:5e:
24:a4:e7:e5:e2:03:0c:43:07:ee:54:e6:2d:62:81:
66:b7:84:18:60:50:76:64:fc:d6:e1:87:b4:6a:68:
79:77:44:0c:ba:11:b1:0b:05:d3:c5:a1:cf:b1:3f:
e8:88:89:fb:83:a6:3e:77:99:3a:3b:36:70:fa:9b:
5a:04:d7:4c:f2:72:be:bb:2e:ab:82:53:02:32:68:
09:52:1a:5f:59:9f:67:39:ec:a4:5d:ea:fe:c6:6e:
36:6e:38:03:07:a9:1e:2a:01:0f:de:d7:ba:dc:d1:
24:9c:05:0f:22:17:ae:c8:33:78:80:9d:14:d4:ba:
21:0e:92:32:84:34:58:53:62:af:a5:49:83:97:a0:
39:0f:42:e9:dc:6a:f4:c9:f9:61:c8:43:e0:20:1d:
1d:ac:08:c6:2b:3b:68:77:d5:49:57:d4:89:d4:53:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:24:3C:F1:0D:9F:B5:D1:0D:E5:41:D1:D8:4F:E9:54:5C:5A:C9:38
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b9:f0:97:e0:6a:bb:1e:b8:7b:03:9a:4d:de:8d:27:b5:8f:
fa:4e:92:7b:b7:a7:b2:2a:86:8a:ee:0f:a3:97:19:54:4e:c2:
c7:a3:f6:2c:ef:5e:a2:c5:61:5f:24:fc:d7:14:02:b2:60:0e:
94:01:f9:31:19:70:85:88:82:01:d9:0b:8d:87:5e:fa:f0:2f:
1c:60:18:9d:f9:0c:f2:af:a8:47:95:2d:a7:b9:0c:9d:97:1b:
1a:cf:98:bb:a4:a1:13:71:c0:79:bc:40:ab:10:ec:fd:5f:e6:
7e:12:b4:f6:7f:9c:3b:d4:e6:05:80:7b:90:12:50:da:4e:f4:
0b:8f:f7:61:a6:19:3c:60:d8:d9:d6:af:78:ba:9c:88:04:8e:
cc:01:bd:5f:ed:94:e0:ee:4a:b1:4c:67:1c:89:f1:ca:c5:3c:
da:15:9a:8b:36:e4:35:84:b6:0d:a3:c9:7d:b1:fe:18:bb:99:
3c:7f:72:6a:ca:e0:1a:ab:8f:d7:f3:45:29:4e:4d:17:2a:a0:
d7:be:bb:5e:6a:20:2f:2d:a5:4f:a5:f7:e7:c1:14:c5:c3:a9:
f5:d3:b8:c5:cb:10:57:9d:89:74:2d:a7:49:e2:6d:6f:83:27:
8f:78:23:54:06:2e:f3:e9:03:4e:d7:7f:16:11:c2:bc:13:24:
09:11:05:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNspHJxRS6PD8gKQztLVs0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYmY2NWUwMDY5ZGJjYzc2YjdiNTU2ZThjMWQ3MDU4ODlk
ZjI3ZTkwHhcNMjUwNjA4MDQwMDM3WhcNMjUwNjA5MDQwMDM3WjAzMTEwLwYDVQQD
EygxODI0M2NmMTBkOWZiNWQxMGRlNTQxZDFkODRmZTk1NDVjNWFjOTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yvjaPDVcpMGxfMcG6kgVS8gIbiu
oZsse+s9PRDaSMjeqyP797Rq2O6Un7G1PNGahrn0Kyym88OdTrOPKCKeT5ZnlCSS
sdkLAhx/9anNeprr4/gjK1Tqv14kpOfl4gMMQwfuVOYtYoFmt4QYYFB2ZPzW4Ye0
amh5d0QMuhGxCwXTxaHPsT/oiIn7g6Y+d5k6OzZw+ptaBNdM8nK+uy6rglMCMmgJ
UhpfWZ9nOeykXer+xm42bjgDB6keKgEP3te63NEknAUPIheuyDN4gJ0U1LohDpIy
hDRYU2KvpUmDl6A5D0Lp3Gr0yflhyEPgIB0drAjGKztod9VJV9SJ1FOaPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgkPPENn7XRDeVB0dhP6VRcWsk4MB8GA1UdIwQY
MBaAFM6/ZeAGnbzHa3tVbowdcFiJ3yfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2Yt
MjNiYTRhOTFhMTA1LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2YtMjNiYTRhOTFhMTA1
LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrnwl+Bq
ux64ewOaTd6NJ7WP+k6Se7ensiqGiu4Po5cZVE7Cx6P2LO9eosVhXyT81xQCsmAO
lAH5MRlwhYiCAdkLjYde+vAvHGAYnfkM8q+oR5Utp7kMnZcbGs+Yu6ShE3HAebxA
qxDs/V/mfhK09n+cO9TmBYB7kBJQ2k70C4/3YaYZPGDY2daveLqciASOzAG9X+2U
4O5KsUxnHInxysU82hWaizbkNYS2DaPJfbH+GLuZPH9yasrgGquP1/NFKU5NFyqg
1767XmogLy2lT6X358EUxcOp9dO4xcsQV52JdC2nSeJtb4Mnj3gjVAYu8+kDTtd/
FhHCvBMkCREFfw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:08:27 2025 by rpki-client