
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: pwLOadHtzxwVT2l5Fb9wwM9jYP6iArn+Mhr4AvhrCKM=
Subject key identifier: 75:CA:5F:C8:C8:6F:8D:FB:21:D5:66:B9:5C:2F:06:FE:A4:AE:CF:A7
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 01974D4485F01A1462C5FEF6BB9B6CD7DE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 1586
Signing time: Sun 08 Jun 2025 02:00:25 +0000
Manifest this update: Sun 08 Jun 2025 02:00:25 +0000
Manifest next update: Mon 09 Jun 2025 02:00:25 +0000
Files and hashes: 1: 34m9tu8-VJMAF9BtHbwX9Jvv0x4.roa (hash: 8cDtrdeF9xJMrCFVsKTBOunUF2EsP6IX5xqHU+sWq6o=)
2: Cy2f1uXj9wbLpl4Aw6ZgdQs_Gm4.roa (hash: otz2U+ZxypMp06tq5uA+DLYREXHhlkXwvT+2vtKIHr0=)
3: L9Pl17zWKblG0Neut33hMgnvNwg.roa (hash: KjUxc5uZUEZddoMKFPfgxm4nuEI/U5FS/VZwNLhDnYw=)
4: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: 0ObFLremG4Qtm/NqlBNUf7vsC6xM9+WOqCAwNbSqgvM=)
5: nHMt9tnZDRx6m3JgaG-0g5rC0g0.roa (hash: 1doY6wOIAWaSvtGgJud3474i9gzt/qEdhjfPhIJDXfE=)
6: pN9I61NTpOf1iptAeMEH4NWfXYw.roa (hash: /osyl/RRKnWZO9AXYWEI4cWy1HpYeLX7qYgqul7Ks0g=)
7: rVSBtBZCrH1-ozjLs4EWsLxZEKw.roa (hash: qYE3kOU/oBIWRjp9IVavev7WPsnGehT5UmTJ3lg1M9g=)
8: tonrQJbYKEeFepF8Mg5lWiEbslA.roa (hash: la8VTc6fuTFi7aBGI/izVEZyhP/KVuebx7O6/rsxC7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:85:f0:1a:14:62:c5:fe:f6:bb:9b:6c:d7:de:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Jun 8 02:00:25 2025 GMT
Not After : Jun 9 02:00:25 2025 GMT
Subject: CN=75ca5fc8c86f8dfb21d566b95c2f06fea4aecfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:1d:a0:00:90:29:a8:bc:de:4c:fd:7c:c3:
ef:ee:15:ba:0f:5a:ac:05:25:f8:f0:2a:89:0e:97:
7f:0c:b2:ae:8f:e5:c8:bb:65:47:24:77:33:08:d0:
35:4c:e8:ff:28:f7:eb:f5:70:41:f0:e4:0f:f9:b7:
ab:10:7b:49:3e:b0:c9:64:61:9c:79:00:57:4d:b1:
e4:e3:a3:b6:5c:12:b0:18:67:75:d2:51:b0:53:d6:
e9:66:18:af:1f:4d:7c:82:fa:dd:e3:21:77:a0:f0:
63:0c:d9:af:5d:68:27:98:64:68:fa:3b:c1:4d:3a:
5f:c8:fe:93:1a:72:2a:2e:d1:ac:56:46:e7:e2:af:
f6:09:20:c5:f5:d3:b4:d1:70:14:96:a0:07:12:f5:
97:ac:72:6d:b2:f0:4b:2c:f6:af:b3:90:5a:00:2b:
00:08:ec:7a:c2:35:c1:0a:2d:07:4e:58:a2:d7:49:
b1:a7:11:04:45:ee:73:3f:de:ad:af:5e:68:1c:7d:
03:02:f0:f8:46:2b:82:0d:2f:6f:38:e4:be:09:b3:
e0:05:79:5a:a8:57:ff:a0:f9:d5:12:c7:1b:bd:17:
a1:92:88:3c:0c:29:42:43:fb:66:11:81:20:6e:e2:
69:db:e8:fb:61:37:c5:4a:77:0b:7d:33:49:58:53:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CA:5F:C8:C8:6F:8D:FB:21:D5:66:B9:5C:2F:06:FE:A4:AE:CF:A7
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cf:b5:38:a1:5c:28:e4:33:8a:93:f9:25:2c:ea:c8:89:83:
db:1b:e0:0f:e3:31:73:66:d1:49:60:55:7a:3d:c4:69:4b:72:
b1:ea:26:b2:b6:5a:f8:6c:7a:dd:a7:c0:ab:f7:0e:28:56:76:
7e:63:16:89:11:72:dc:83:95:f2:20:6a:25:77:e6:91:9c:3a:
12:c7:47:92:fd:4b:db:1e:97:2d:79:ce:ad:f9:9d:95:69:a5:
22:a9:be:44:12:ba:45:31:e1:06:06:b7:c0:57:0a:e8:20:7e:
88:09:30:d5:02:d5:fc:5f:58:eb:e5:6e:bf:8a:70:4d:a2:09:
f0:8d:97:4d:84:2f:cf:07:81:08:6f:ae:66:d8:ae:2a:4a:8f:
f2:de:ba:67:7f:6a:e4:ec:f9:be:ff:0c:b6:7a:1a:1f:38:9e:
96:f0:02:55:6b:a1:1c:d5:23:ef:7e:a5:7c:83:ec:b7:48:04:
31:9d:1c:6c:74:e4:a5:50:03:4f:5d:2b:fd:73:87:91:02:21:
f6:c2:b2:fb:5a:14:90:7d:89:f7:39:6e:da:52:ca:32:f2:7e:
b0:a1:ab:f0:2a:08:06:18:e8:64:21:de:96:dc:1b:0c:1a:60:
ec:e3:d6:c4:98:22:07:21:8a:21:59:7d:71:34:30:5d:12:13:
54:9e:2f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRIXwGhRixf72u5ts194XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3
OGIzOGQwHhcNMjUwNjA4MDIwMDI1WhcNMjUwNjA5MDIwMDI1WjAzMTEwLwYDVQQD
Eyg3NWNhNWZjOGM4NmY4ZGZiMjFkNTY2Yjk1YzJmMDZmZWE0YWVjZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqucdoACQKai83kz9fMPv7hW6D1qs
BSX48CqJDpd/DLKuj+XIu2VHJHczCNA1TOj/KPfr9XBB8OQP+berEHtJPrDJZGGc
eQBXTbHk46O2XBKwGGd10lGwU9bpZhivH018gvrd4yF3oPBjDNmvXWgnmGRo+jvB
TTpfyP6TGnIqLtGsVkbn4q/2CSDF9dO00XAUlqAHEvWXrHJtsvBLLPavs5BaACsA
COx6wjXBCi0HTlii10mxpxEERe5zP96tr15oHH0DAvD4RiuCDS9vOOS+CbPgBXla
qFf/oPnVEscbvRehkog8DClCQ/tmEYEgbuJp2+j7YTfFSncLfTNJWFNKkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXKX8jIb437IdVmuVwvBv6krs+nMB8GA1UdIwQY
MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt
NmIxNDY5YzNiOTVhLzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh
LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGs+1OKFc
KOQzipP5JSzqyImD2xvgD+Mxc2bRSWBVej3EaUtyseomsrZa+Gx63afAq/cOKFZ2
fmMWiRFy3IOV8iBqJXfmkZw6EsdHkv1L2x6XLXnOrfmdlWmlIqm+RBK6RTHhBga3
wFcK6CB+iAkw1QLV/F9Y6+Vuv4pwTaIJ8I2XTYQvzweBCG+uZtiuKkqP8t66Z39q
5Oz5vv8MtnoaHzielvACVWuhHNUj736lfIPst0gEMZ0cbHTkpVADT10r/XOHkQIh
9sKy+1oUkH2J9zlu2lLKMvJ+sKGr8CoIBhjoZCHeltwbDBpg7OPWxJgiByGKIVl9
cTQwXRITVJ4vwg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:32:34 2025 by rpki-client