Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File: ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier: XXMk4kQEz1/OtqkaNSNdijNdVDECAiaRM58kIRnJEHU=
Subject key identifier: C7:92:EB:BF:22:EA:1C:B6:C9:2C:96:1F:09:70:1F:E0:23:3E:91:95
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 0197500F3ACB0000E2B7EBE72CABB88F1BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number: 0A37
Signing time: Sun 08 Jun 2025 15:01:04 +0000
Manifest this update: Sun 08 Jun 2025 15:01:04 +0000
Manifest next update: Mon 09 Jun 2025 15:01:04 +0000
Files and hashes: 1: 7Z7IzpBHNDRFWYLe_OokcTNbBnw.roa (hash: 24No6BP2DTZdRjBSm6KFYcGax0GtKenfx9uqKb2W2tw=)
2: OAC5V3ngkZFG4cbcfwTqgC0RbUw.roa (hash: amgbjuIRYLpnsd8z61aY9wLmq9odfVbwcJCZF+luhjo=)
3: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: OGhZtGx/rzjV5OVtQq07IaeTOgudSOdMqJg18UNVwXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0f:3a:cb:00:00:e2:b7:eb:e7:2c:ab:b8:8f:1b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Jun 8 15:01:04 2025 GMT
Not After : Jun 9 15:01:04 2025 GMT
Subject: CN=c792ebbf22ea1cb6c92c961f09701fe0233e9195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2a:46:ae:d1:aa:56:0d:7f:65:26:bb:cf:d5:
1a:7a:bd:e9:e1:9d:ad:93:9e:71:42:b7:16:3a:f7:
b7:70:c4:6a:25:fd:01:f6:0a:bf:5e:29:54:5c:7e:
74:96:bd:62:8e:0e:2f:27:85:0b:f3:e5:79:a8:81:
51:6d:a7:05:41:de:fb:d2:72:92:69:58:4c:d9:b3:
f4:ed:01:b6:51:e3:4d:e8:d2:57:a9:a9:ac:9f:ab:
9f:6d:dc:c0:eb:f9:18:db:ab:c6:68:33:9b:80:d4:
bf:80:27:56:af:f0:b2:34:ff:f6:ee:0f:02:dd:21:
f3:bd:51:0c:2e:a4:83:94:3d:aa:31:d7:77:ad:88:
eb:19:e4:dd:d0:d9:e7:ee:73:04:67:f1:10:fc:06:
44:39:26:ff:a0:ef:bd:88:ba:99:35:67:9f:b1:84:
6f:1c:b5:73:30:dd:fc:fc:7a:78:c3:48:99:6f:3f:
b2:cd:fc:fb:b7:82:e6:e9:68:24:e6:43:cd:0d:aa:
6a:68:3f:81:8a:cb:71:92:4e:cc:14:5e:48:97:1b:
52:52:2d:f4:02:f8:d0:a3:4e:f5:e1:af:9b:e3:0b:
ca:fd:f1:86:b4:05:99:98:69:ec:33:8d:87:38:78:
f2:29:03:9a:53:31:e1:84:a0:1a:5e:20:b7:0c:d3:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:92:EB:BF:22:EA:1C:B6:C9:2C:96:1F:09:70:1F:E0:23:3E:91:95
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3f:39:31:a1:1d:c7:6d:19:27:a5:d3:9d:10:1a:3c:f3:8b:
d1:3d:1f:00:b4:6a:d4:26:9c:87:11:59:2d:7b:40:ec:cb:2e:
fa:65:f7:cf:3b:bf:ea:f1:bd:ab:0c:27:81:0d:8a:06:f4:fb:
b8:08:ae:1b:36:75:ae:81:38:9b:af:f2:55:2b:1f:8d:07:96:
10:12:aa:16:e1:4c:95:77:49:2f:fa:af:ef:b7:28:5a:d4:4d:
47:45:fb:de:4e:e6:f3:99:64:eb:e4:30:31:cf:61:5f:f7:8a:
9a:33:a0:e2:d6:d8:61:bb:19:c2:aa:7b:d9:ad:34:76:aa:94:
66:ca:99:e2:41:cf:26:89:02:b7:03:60:3a:2b:e5:a5:c4:d7:
b5:8a:d0:79:2f:bc:34:33:5e:0f:4e:5c:3a:6b:b4:13:24:6c:
39:93:73:61:f1:dd:cb:0a:f9:e1:79:5f:7d:bc:56:77:f1:b5:
5e:a8:d0:ee:98:77:ff:16:50:74:3f:80:cc:be:9d:64:fe:2e:
10:f1:b0:25:63:da:b6:fb:e4:8c:9b:b4:5f:e2:cb:c4:1f:3a:
9b:e3:cf:97:4f:af:ca:de:7a:8d:7b:f1:9b:d0:5a:db:1b:03:
c9:7e:2b:23:f7:a6:8a:ca:41:9a:f7:ff:79:6b:60:27:84:d1:
1c:22:90:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQDzrLAADit+vnLKu4jxv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjAzNGNhNmExNmJiZDAxNDRhYmRmNWNmMjQ1OGY5Njhi
MTU4OWMwHhcNMjUwNjA4MTUwMTA0WhcNMjUwNjA5MTUwMTA0WjAzMTEwLwYDVQQD
EyhjNzkyZWJiZjIyZWExY2I2YzkyYzk2MWYwOTcwMWZlMDIzM2U5MTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ipGrtGqVg1/ZSa7z9Uaer3p4Z2t
k55xQrcWOve3cMRqJf0B9gq/XilUXH50lr1ijg4vJ4UL8+V5qIFRbacFQd770nKS
aVhM2bP07QG2UeNN6NJXqamsn6ufbdzA6/kY26vGaDObgNS/gCdWr/CyNP/27g8C
3SHzvVEMLqSDlD2qMdd3rYjrGeTd0Nnn7nMEZ/EQ/AZEOSb/oO+9iLqZNWefsYRv
HLVzMN38/Hp4w0iZbz+yzfz7t4Lm6Wgk5kPNDapqaD+Bistxkk7MFF5IlxtSUi30
AvjQo0714a+b4wvK/fGGtAWZmGnsM42HOHjyKQOaUzHhhKAaXiC3DNNvPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeS678i6hy2ySyWHwlwH+AjPpGVMB8GA1UdIwQY
MBaAFGZgNMpqFrvQFEq99c8kWPlosVicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDIt
NWQ0OGJjZDdjMWRjLzEvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDItNWQ0OGJjZDdjMWRj
LzEvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADz85MaEd
x20ZJ6XTnRAaPPOL0T0fALRq1CachxFZLXtA7Msu+mX3zzu/6vG9qwwngQ2KBvT7
uAiuGzZ1roE4m6/yVSsfjQeWEBKqFuFMlXdJL/qv77coWtRNR0X73k7m85lk6+Qw
Mc9hX/eKmjOg4tbYYbsZwqp72a00dqqUZsqZ4kHPJokCtwNgOivlpcTXtYrQeS+8
NDNeD05cOmu0EyRsOZNzYfHdywr54XlffbxWd/G1XqjQ7ph3/xZQdD+AzL6dZP4u
EPGwJWPatvvkjJu0X+LLxB86m+PPl0+vyt56jXvxm9Ba2xsDyX4rI/emispBmvf/
eWtgJ4TRHCKQEA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:49:30 2025 by rpki-client