Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
File: ZpDQciFADjewHnSnEvrnxtcDFZU.mft (raw, json)
Hash identifier: itu+qnVqZvjbJsBAE0OcH9xxKykxcsjoGk4WKi/YVZU=
Subject key identifier: 8E:68:1B:C3:FD:F4:82:6F:88:E3:43:74:C9:C5:48:A7:6E:01:11:09
Authority key identifier: 66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
Certificate issuer: /CN=6690d07221400e37b01e74a712fae7c6d7031595
Certificate serial: 019749D5B4464F420A5FB92B158564A54D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
Manifest number: 102A
Signing time: Sat 07 Jun 2025 10:00:31 +0000
Manifest this update: Sat 07 Jun 2025 10:00:31 +0000
Manifest next update: Sun 08 Jun 2025 10:00:31 +0000
Files and hashes: 1: ZpDQciFADjewHnSnEvrnxtcDFZU.crl (hash: E6RA61Vxqw1BarWmfoOkRjRURLFRZv6Ysu9PSsl4Lzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:b4:46:4f:42:0a:5f:b9:2b:15:85:64:a5:4d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6690d07221400e37b01e74a712fae7c6d7031595
Validity
Not Before: Jun 7 10:00:31 2025 GMT
Not After : Jun 8 10:00:31 2025 GMT
Subject: CN=8e681bc3fdf4826f88e34374c9c548a76e011109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:de:de:66:39:49:87:bb:ee:31:30:06:8d:
b5:d1:c0:ec:f0:99:83:4c:30:38:43:cb:a9:68:57:
62:ea:f3:71:ae:96:84:9d:59:ec:66:76:93:77:23:
a4:ff:9c:55:d7:f7:3e:9f:b5:84:62:14:e9:ad:e5:
bd:23:ce:e3:e9:43:97:38:1a:21:3e:1f:01:7e:95:
b5:d0:f1:89:fe:c5:0e:0d:ff:34:8b:eb:38:65:3b:
5d:9c:2b:4f:88:6b:9d:fc:9d:91:d2:14:de:92:20:
cc:f5:73:43:df:3d:33:e6:7d:07:06:a8:5d:82:0a:
e0:e5:b9:14:2a:cc:63:7e:7c:7a:a6:12:cd:bb:75:
30:c4:51:9c:4a:be:57:60:59:77:79:95:b4:99:24:
6c:19:5f:b5:94:71:32:fb:48:3a:53:90:3f:80:b4:
44:b6:a2:bd:5c:f6:0d:ff:0a:0a:14:e5:57:00:1b:
0c:05:3e:60:a6:0c:b7:0f:ac:a0:a1:ba:3d:03:e5:
44:0a:67:98:62:03:5f:d6:a0:92:6b:9d:8f:2d:cd:
e2:2b:16:88:1d:1a:35:65:6a:a5:2b:c9:18:ad:a5:
1f:dd:c8:a9:32:1f:04:21:32:bb:df:34:03:4b:bb:
16:df:4d:7a:e5:1f:d7:ad:c0:52:ad:3c:25:b0:d0:
dc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:68:1B:C3:FD:F4:82:6F:88:E3:43:74:C9:C5:48:A7:6E:01:11:09
X509v3 Authority Key Identifier:
keyid:66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a1:ef:f2:2f:4a:18:c4:de:50:5b:72:dc:6f:41:db:63:d3:
7f:f1:ba:f0:49:24:b8:eb:2f:47:fc:a9:5b:93:af:fe:f6:1a:
d0:36:3b:6e:0f:97:b8:8c:3a:33:b5:89:52:4e:50:54:03:1a:
71:88:9b:b7:fc:6e:f8:3c:94:ba:4f:bc:7c:18:db:09:49:a6:
7e:d5:73:35:35:94:4a:04:a5:a5:ec:ae:7b:62:ca:9e:4b:42:
dd:40:8a:f1:36:32:c9:28:ea:ab:71:7b:6f:f1:c3:7c:ff:59:
6e:b0:48:68:f5:68:6a:d1:8b:6e:0b:66:20:bd:15:99:9c:97:
d9:89:cf:2d:90:40:10:dd:6f:60:02:27:44:c8:17:4d:f0:67:
71:6e:c7:cc:78:1e:1e:a1:44:77:62:93:ab:81:e3:03:50:f8:
ba:fe:af:92:91:fe:f2:9a:39:84:32:37:e1:7a:57:2d:67:62:
b2:97:c5:7b:96:2e:ac:a8:5c:a2:e4:d7:86:3e:7d:53:ae:99:
af:11:79:7b:b2:45:6a:a7:26:8e:73:9f:e2:29:91:8b:dc:9e:
ff:cf:e5:fc:a9:34:77:7c:fe:04:a3:2e:fc:53:6f:19:67:d6:
b0:17:d1:f3:40:da:c3:f3:87:58:4f:d9:0a:df:ba:0b:d0:ec:
00:88:81:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1bRGT0IKX7krFYVkpU0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTBkMDcyMjE0MDBlMzdiMDFlNzRhNzEyZmFlN2M2ZDcw
MzE1OTUwHhcNMjUwNjA3MTAwMDMxWhcNMjUwNjA4MTAwMDMxWjAzMTEwLwYDVQQD
Eyg4ZTY4MWJjM2ZkZjQ4MjZmODhlMzQzNzRjOWM1NDhhNzZlMDExMTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtze3mY5SYe77jEwBo210cDs8JmD
TDA4Q8upaFdi6vNxrpaEnVnsZnaTdyOk/5xV1/c+n7WEYhTpreW9I87j6UOXOBoh
Ph8BfpW10PGJ/sUODf80i+s4ZTtdnCtPiGud/J2R0hTekiDM9XND3z0z5n0HBqhd
ggrg5bkUKsxjfnx6phLNu3UwxFGcSr5XYFl3eZW0mSRsGV+1lHEy+0g6U5A/gLRE
tqK9XPYN/woKFOVXABsMBT5gpgy3D6ygobo9A+VECmeYYgNf1qCSa52PLc3iKxaI
HRo1ZWqlK8kYraUf3cipMh8EITK73zQDS7sW30165R/XrcBSrTwlsNDcxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5oG8P99IJviONDdMnFSKduAREJMB8GA1UdIwQY
MBaAFGaQ0HIhQA43sB50pxL658bXAxWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBEUWNpRkFEamV3SG5TbkV2cm54dGNERlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNTY1YjItZGMxOC00NDYwLWJmMDIt
NDYxYWNiOGExYzlmLzEvWnBEUWNpRkFEamV3SG5TbkV2cm54dGNERlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kNTY1YjItZGMxOC00NDYwLWJmMDItNDYxYWNiOGExYzlm
LzEvWnBEUWNpRkFEamV3SG5TbkV2cm54dGNERlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYaHv8i9K
GMTeUFty3G9B22PTf/G68EkkuOsvR/ypW5Ov/vYa0DY7bg+XuIw6M7WJUk5QVAMa
cYibt/xu+DyUuk+8fBjbCUmmftVzNTWUSgSlpeyue2LKnktC3UCK8TYyySjqq3F7
b/HDfP9ZbrBIaPVoatGLbgtmIL0VmZyX2YnPLZBAEN1vYAInRMgXTfBncW7HzHge
HqFEd2KTq4HjA1D4uv6vkpH+8po5hDI34XpXLWdispfFe5YurKhcouTXhj59U66Z
rxF5e7JFaqcmjnOf4imRi9ye/8/l/Kk0d3z+BKMu/FNvGWfWsBfR80Daw/OHWE/Z
Ct+6C9DsAIiBwg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:23:41 2025 by rpki-client