Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier: vmFayR42gwI0yRlW3ddZv7v34qSHbWwI2s7WjWI9rx4=
Subject key identifier: CF:3D:E7:71:9F:65:70:42:0E:AA:75:DF:B7:9A:A7:39:EE:9E:7A:D8
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 01975045824161017108852AD9B6F8812D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number: 12C0
Signing time: Sun 08 Jun 2025 16:00:21 +0000
Manifest this update: Sun 08 Jun 2025 16:00:21 +0000
Manifest next update: Mon 09 Jun 2025 16:00:21 +0000
Files and hashes: 1: 1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa (hash: 8zLMXDHfnNNjoX0VOIs5QNAoq7kKY/ejXy/m4VQalNM=)
2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: BYGQua56jlnyPpcCRdhJ5Mjnsih9mn5PBg7z6/j9gbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:82:41:61:01:71:08:85:2a:d9:b6:f8:81:2d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Jun 8 16:00:21 2025 GMT
Not After : Jun 9 16:00:21 2025 GMT
Subject: CN=cf3de7719f6570420eaa75dfb79aa739ee9e7ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:c9:a6:78:4d:bb:0e:7d:19:51:e7:04:82:
94:96:2a:7b:5d:8a:24:21:22:9d:b6:1d:49:c4:d4:
9d:b5:e3:f0:35:d2:45:48:de:78:9f:43:71:b8:85:
b0:50:e8:e8:62:a1:29:48:03:fc:35:10:29:8b:c7:
e5:0f:ac:5e:fd:c0:55:1a:3c:df:a2:91:9e:2c:38:
f5:e6:6c:f5:64:bb:dd:e2:04:cb:13:6b:ce:08:2c:
1b:b4:97:61:3c:12:71:00:84:f2:d8:94:af:bf:8e:
e3:24:14:e3:f7:26:10:db:40:2c:b4:45:e4:5a:bd:
98:6e:1f:63:2e:49:c3:77:85:aa:02:db:25:08:b6:
54:b2:d9:c5:17:e9:df:89:b3:e0:f9:df:0a:cd:26:
49:81:90:3a:73:11:72:db:80:f3:17:50:56:e5:10:
dc:79:7e:a0:da:77:20:f8:1a:29:d6:1d:97:74:3e:
aa:3b:e5:02:3f:b4:85:6b:a6:b9:ee:3a:74:f8:78:
3a:10:fc:9e:a0:e5:28:ff:b6:93:ff:7c:dc:ea:75:
d7:aa:7e:b5:2a:8b:f9:fb:14:8e:3e:f6:0a:01:41:
36:d8:e7:c9:5a:1e:04:11:3e:2b:7f:a2:ce:f7:bb:
ce:82:7f:5b:50:cf:4b:71:e5:2c:b3:bf:61:61:64:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3D:E7:71:9F:65:70:42:0E:AA:75:DF:B7:9A:A7:39:EE:9E:7A:D8
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:76:1f:73:3c:ab:ab:87:e7:e6:ec:13:50:85:d9:f8:79:0e:
f2:60:e7:9e:22:d4:ac:fe:81:5e:e6:95:ae:38:23:80:94:85:
5b:49:db:2a:d3:e0:e6:e3:b7:8e:5b:e9:2f:a6:a4:dd:a6:b9:
4c:00:b0:77:c2:a6:31:75:98:b8:b0:a3:52:16:6d:50:9b:75:
d5:11:28:b9:e3:fa:e2:e2:1b:42:0f:9e:95:90:f5:44:be:9f:
f2:7f:9d:36:bf:76:bb:56:f2:05:3d:5e:9b:36:59:9f:04:b4:
7b:4c:53:31:b3:b2:0e:05:87:32:f5:5c:51:f1:81:19:20:ba:
a6:fa:73:8b:9b:37:79:16:70:b8:4f:06:55:33:f9:db:b3:0d:
9a:62:31:11:db:fe:43:31:08:c8:b9:b9:39:16:a7:1a:53:ce:
a4:44:3b:41:a8:ed:b8:25:1c:6a:ad:31:8d:c2:8c:84:07:2f:
29:12:b8:3b:45:69:61:16:5c:0c:99:50:ce:7f:6a:e3:7d:7c:
36:0a:e5:4e:62:23:79:83:0c:5c:00:88:ee:02:ca:d6:b6:e7:
44:4d:72:84:21:26:27:f8:30:84:7a:24:76:2d:cf:ab:28:7b:
c6:d7:2a:50:a0:7e:99:ee:95:d2:54:d8:c1:28:7f:d0:5d:03:
4e:21:35:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRYJBYQFxCIUq2bb4gS1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMzhhNTEzYjVjMzc3ZjkxZmU0Yzc4NDc0YmMyNmExYjYx
YjRhMjAwHhcNMjUwNjA4MTYwMDIxWhcNMjUwNjA5MTYwMDIxWjAzMTEwLwYDVQQD
EyhjZjNkZTc3MTlmNjU3MDQyMGVhYTc1ZGZiNzlhYTczOWVlOWU3YWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtzJpnhNuw59GVHnBIKUlip7XYok
ISKdth1JxNSdtePwNdJFSN54n0NxuIWwUOjoYqEpSAP8NRApi8flD6xe/cBVGjzf
opGeLDj15mz1ZLvd4gTLE2vOCCwbtJdhPBJxAITy2JSvv47jJBTj9yYQ20AstEXk
Wr2Ybh9jLknDd4WqAtslCLZUstnFF+nfibPg+d8KzSZJgZA6cxFy24DzF1BW5RDc
eX6g2ncg+Bop1h2XdD6qO+UCP7SFa6a57jp0+Hg6EPyeoOUo/7aT/3zc6nXXqn61
Kov5+xSOPvYKAUE22OfJWh4EET4rf6LO97vOgn9bUM9LceUss79hYWQbTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8953GfZXBCDqp137eapznunnrYMB8GA1UdIwQY
MBaAFM84pRO1w3f5H+THhHS8JqG2G0ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWIt
ZmVjMDgzZjYzZTBlLzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWItZmVjMDgzZjYzZTBl
LzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHYfczyr
q4fn5uwTUIXZ+HkO8mDnniLUrP6BXuaVrjgjgJSFW0nbKtPg5uO3jlvpL6ak3aa5
TACwd8KmMXWYuLCjUhZtUJt11REoueP64uIbQg+elZD1RL6f8n+dNr92u1byBT1e
mzZZnwS0e0xTMbOyDgWHMvVcUfGBGSC6pvpzi5s3eRZwuE8GVTP527MNmmIxEdv+
QzEIyLm5ORanGlPOpEQ7QajtuCUcaq0xjcKMhAcvKRK4O0VpYRZcDJlQzn9q4318
NgrlTmIjeYMMXACI7gLK1rbnRE1yhCEmJ/gwhHokdi3Pqyh7xtcqUKB+me6V0lTY
wSh/0F0DTiE1KA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:44:02 2025 by rpki-client