Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: mhUXCN1BORuVaxEbr3svSoDBpln8MZFg4+NSwDWQtNE=
Subject key identifier: 74:25:25:80:A8:B3:D2:7F:1B:2C:C7:45:F0:52:51:8A:EE:CF:6B:F4
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 01974B1F390C8F448B0833BC34B6459B9035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 05B5
Signing time: Sat 07 Jun 2025 16:00:26 +0000
Manifest this update: Sat 07 Jun 2025 16:00:26 +0000
Manifest next update: Sun 08 Jun 2025 16:00:26 +0000
Files and hashes: 1: 0QIFKfV7XQ0j_NX645lYUUtY2-o.roa (hash: 7LNZ2ckLWt9kDraFIFwQN/kugVtMuC1qB6bNkP46hLY=)
2: tkPBYkbqHBQBIn0BHV-X-SO1suM.roa (hash: UbAqMwZmfegZ1hqELkSkDP8x8h7o/IponAOjYN5W65Y=)
3: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: zT9A6//Kh7vLx6W4CBT4jX8W7z4ot7wzb0UMIMw3EpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:39:0c:8f:44:8b:08:33:bc:34:b6:45:9b:90:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Jun 7 16:00:26 2025 GMT
Not After : Jun 8 16:00:26 2025 GMT
Subject: CN=74252580a8b3d27f1b2cc745f052518aeecf6bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:35:0e:50:1a:f5:fe:ac:8e:21:07:e0:28:
c5:3e:ae:8d:fa:15:4d:cf:33:35:b5:8d:35:cb:9b:
2d:75:fb:ad:d3:68:cb:f3:08:63:8b:13:e8:95:ba:
6a:7f:cc:1f:16:85:62:fc:28:95:45:e1:42:ec:05:
e3:43:3b:54:e5:d1:78:bb:88:1a:84:a5:be:46:bc:
20:b6:34:d9:a6:26:8c:dc:64:8d:69:6c:4c:e3:02:
17:fb:11:6d:27:b0:81:3e:b2:55:46:3a:ec:82:69:
f2:ca:f3:fe:10:f9:a5:8f:8c:cc:76:a4:00:ad:61:
6f:6a:f9:92:9b:70:65:b6:74:b1:b3:39:ae:47:d0:
f9:b2:fa:1b:d8:6c:f9:dd:9e:b3:69:f5:8a:c4:e7:
e1:dc:38:b5:03:62:18:ab:f4:09:95:8f:4c:90:e4:
2d:e3:59:a2:2a:18:ee:0a:bc:f4:c2:8c:48:04:cd:
0b:0a:5d:98:27:ce:30:63:fc:14:bf:e2:f1:0d:a5:
dc:d9:09:06:2a:35:7a:89:cd:32:f4:46:40:8d:5c:
16:74:d3:91:44:fd:29:e8:64:ab:18:41:38:3c:3e:
77:2f:c7:7c:90:5f:f5:f5:e0:73:7f:87:43:30:49:
68:09:e3:6a:b6:81:1d:53:85:ac:84:31:a3:c6:11:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:25:25:80:A8:B3:D2:7F:1B:2C:C7:45:F0:52:51:8A:EE:CF:6B:F4
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a2:1c:b1:bb:e7:21:76:e2:9b:f1:a7:23:ed:16:07:db:2e:
18:c9:6e:35:2d:71:b5:22:9a:50:2d:94:e0:8c:cc:2a:a1:1e:
36:4c:0f:6c:54:2a:5e:74:29:05:81:e2:7e:3f:34:ab:10:c2:
63:b9:ce:a2:91:b5:7d:bd:23:70:d0:92:31:e6:62:85:1a:bb:
c4:71:25:56:c9:ae:ec:b5:55:bd:17:a4:6b:a3:0c:27:04:0d:
dc:c5:06:85:6e:e1:31:d1:1b:22:0f:49:bf:96:7d:4f:27:8b:
26:38:33:44:5e:60:b5:8d:e2:9e:28:6d:c0:d6:19:ae:04:86:
fc:4a:da:c6:13:92:bc:22:71:fb:d9:08:6c:5e:79:ff:26:7d:
c7:be:9a:67:5e:04:a8:1c:01:d9:70:ec:ae:28:eb:08:7d:35:
eb:71:b3:50:7a:f0:23:69:a6:f6:8e:70:34:cc:9b:75:08:29:
18:fd:5b:18:22:d9:88:fb:f3:23:bb:93:45:89:29:c9:af:3a:
92:65:33:ab:1a:65:96:c2:38:f2:3b:af:df:51:56:35:37:4f:
58:84:32:9f:02:a1:da:92:cc:c9:f0:b9:b5:80:33:55:6a:a7:
76:48:32:45:d7:30:be:66:3e:e2:ae:b5:2e:51:1d:e2:03:ea:
11:f6:f3:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLHzkMj0SLCDO8NLZFm5A1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZWZmZmMxNWE4M2EzOGJkZGE4Y2ZlMTIwYzMzNTI2N2Rj
ZTUwZjMwHhcNMjUwNjA3MTYwMDI2WhcNMjUwNjA4MTYwMDI2WjAzMTEwLwYDVQQD
Eyg3NDI1MjU4MGE4YjNkMjdmMWIyY2M3NDVmMDUyNTE4YWVlY2Y2YmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV41DlAa9f6sjiEH4CjFPq6N+hVN
zzM1tY01y5stdfut02jL8whjixPolbpqf8wfFoVi/CiVReFC7AXjQztU5dF4u4ga
hKW+RrwgtjTZpiaM3GSNaWxM4wIX+xFtJ7CBPrJVRjrsgmnyyvP+EPmlj4zMdqQA
rWFvavmSm3BltnSxszmuR9D5svob2Gz53Z6zafWKxOfh3Di1A2IYq/QJlY9MkOQt
41miKhjuCrz0woxIBM0LCl2YJ84wY/wUv+LxDaXc2QkGKjV6ic0y9EZAjVwWdNOR
RP0p6GSrGEE4PD53L8d8kF/19eBzf4dDMEloCeNqtoEdU4WshDGjxhEiGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQlJYCos9J/GyzHRfBSUYruz2v0MB8GA1UdIwQY
MBaAFMzv/8Fag6OL3ajP4SDDNSZ9zlDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTct
NGJlYjVkZmYxNzAxLzEvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTctNGJlYjVkZmYxNzAx
LzEvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKIcsbvn
IXbim/GnI+0WB9suGMluNS1xtSKaUC2U4IzMKqEeNkwPbFQqXnQpBYHifj80qxDC
Y7nOopG1fb0jcNCSMeZihRq7xHElVsmu7LVVvReka6MMJwQN3MUGhW7hMdEbIg9J
v5Z9TyeLJjgzRF5gtY3inihtwNYZrgSG/EraxhOSvCJx+9kIbF55/yZ9x76aZ14E
qBwB2XDsrijrCH0163GzUHrwI2mm9o5wNMybdQgpGP1bGCLZiPvzI7uTRYkpya86
kmUzqxpllsI48juv31FWNTdPWIQynwKh2pLMyfC5tYAzVWqndkgyRdcwvmY+4q61
LlEd4gPqEfbzjg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:17:19 2025 by rpki-client