Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
File: zyJMhK66hZuQyJNsumFn7kxE7Oc.mft (raw, json)
Hash identifier: YNWjWSEgLAe5aS/ByKpVhsBIrg5FBm7zNThqmqF7YbY=
Subject key identifier: A7:B1:F1:BF:D9:68:22:1C:BD:61:1D:B1:B9:D8:05:BB:99:C7:2F:67
Authority key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
Certificate issuer: /CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Certificate serial: 019745C2123C578D5E74A046E03FFF8B183D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
Manifest number: 05EE
Signing time: Fri 06 Jun 2025 15:00:35 +0000
Manifest this update: Fri 06 Jun 2025 15:00:35 +0000
Manifest next update: Sat 07 Jun 2025 15:00:35 +0000
Files and hashes: 1: n3lj8Imlf54KOqF_Kqk-h0qcwVk.roa (hash: 2POYPsdH+jKImtpOmPpWEy8yit+ATY6Eb8geD/u6vK4=)
2: zyJMhK66hZuQyJNsumFn7kxE7Oc.crl (hash: eqSGIYHlZYhKKF1T8FRhOU98MqzkxAe9YWoqtMGuSl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:12:3c:57:8d:5e:74:a0:46:e0:3f:ff:8b:18:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Validity
Not Before: Jun 6 15:00:35 2025 GMT
Not After : Jun 7 15:00:35 2025 GMT
Subject: CN=a7b1f1bfd968221cbd611db1b9d805bb99c72f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:cd:13:ce:4d:a0:fd:94:da:75:98:cd:23:
6f:7b:a2:59:b3:81:e5:1f:f8:67:00:e1:2d:34:f4:
e4:c9:10:c7:7e:8a:8b:ec:87:26:80:30:6b:ce:a3:
f3:5c:09:63:a2:cf:6b:e7:e2:6c:ef:48:78:e4:1e:
77:34:3c:17:f9:de:17:8c:0a:1d:ae:42:95:d0:4b:
82:12:99:e2:bf:b1:8f:ca:42:30:ad:2b:28:6f:26:
3d:10:a0:c6:41:b8:ca:23:f4:5b:db:f7:ea:ae:49:
80:8a:90:e6:1a:e8:8d:93:df:9b:8b:18:d2:00:98:
70:3a:f4:b0:b5:e2:c2:fb:f0:9c:33:55:28:bc:35:
df:2a:dc:13:ab:5c:d4:a6:54:af:91:1d:be:a5:e5:
e9:48:70:36:ef:e3:d7:b0:29:c2:d3:58:a3:2a:6d:
e8:8b:34:0e:79:22:c9:2d:e8:62:eb:6c:9c:d7:01:
46:e5:e0:09:f2:b2:6c:27:ad:e2:96:19:b3:2b:04:
7e:02:b3:96:d3:1f:56:30:0c:98:44:aa:83:5d:08:
c6:93:75:1f:4c:68:29:9a:fc:ea:bb:c1:d6:a5:84:
3a:fc:58:30:42:dc:7d:d0:e1:2b:52:fd:b3:d2:fa:
55:f8:47:c2:cf:2c:49:e5:ac:04:00:a4:33:b9:b3:
d8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B1:F1:BF:D9:68:22:1C:BD:61:1D:B1:B9:D8:05:BB:99:C7:2F:67
X509v3 Authority Key Identifier:
keyid:CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d2:43:68:b3:42:d4:ff:7d:2d:06:93:87:3f:eb:4d:c2:9b:
5d:f0:0c:80:33:2d:20:f7:69:3d:df:1e:79:5f:69:79:99:7a:
af:11:2e:db:21:71:99:55:aa:ea:28:7a:92:4e:33:9a:6d:41:
40:92:db:7a:56:7b:79:3f:3c:14:ab:57:42:8b:e4:f8:48:fa:
97:e8:26:c3:97:d4:c4:be:1c:28:d0:4b:4e:b8:39:f3:b2:46:
7f:d9:c6:90:1e:34:5f:b9:39:50:88:14:a7:f8:73:85:89:b5:
06:e8:30:d3:9d:f1:9d:9f:81:d8:06:53:03:e7:0e:d7:22:38:
be:31:86:1f:5b:1d:89:0b:8d:e2:f2:1b:e3:6b:d9:1b:f9:71:
85:55:ca:d0:8d:c5:4b:74:61:f9:15:8d:cd:46:d9:be:34:92:
62:10:80:e2:e7:1a:33:8b:96:5e:b1:88:46:39:32:39:e7:02:
2f:d1:7e:04:9b:19:37:55:4a:b5:9d:76:da:af:3c:2c:1b:6a:
67:c5:98:fd:57:2f:49:b5:94:ae:45:63:f2:7d:5d:13:04:0e:
8b:05:73:62:be:46:fa:4b:cf:9f:f6:04:d6:27:68:a7:d3:78:
9a:c1:03:19:09:4f:b9:04:8f:12:3f:d1:88:ea:1b:83:f1:e1:
da:b1:06:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFwhI8V41edKBG4D//ixg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjI0Yzg0YWViYTg1OWI5MGM4OTM2Y2JhNjE2N2VlNGM0
NGVjZTcwHhcNMjUwNjA2MTUwMDM1WhcNMjUwNjA3MTUwMDM1WjAzMTEwLwYDVQQD
EyhhN2IxZjFiZmQ5NjgyMjFjYmQ2MTFkYjFiOWQ4MDViYjk5YzcyZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP/NE85NoP2U2nWYzSNve6JZs4Hl
H/hnAOEtNPTkyRDHfoqL7IcmgDBrzqPzXAljos9r5+Js70h45B53NDwX+d4XjAod
rkKV0EuCEpniv7GPykIwrSsobyY9EKDGQbjKI/Rb2/fqrkmAipDmGuiNk9+bixjS
AJhwOvSwteLC+/CcM1UovDXfKtwTq1zUplSvkR2+peXpSHA27+PXsCnC01ijKm3o
izQOeSLJLehi62yc1wFG5eAJ8rJsJ63ilhmzKwR+ArOW0x9WMAyYRKqDXQjGk3Uf
TGgpmvzqu8HWpYQ6/FgwQtx90OErUv2z0vpV+EfCzyxJ5awEAKQzubPYVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKex8b/ZaCIcvWEdsbnYBbuZxy9nMB8GA1UdIwQY
MBaAFM8iTISuuoWbkMiTbLphZ+5MROznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenlKTWhLNjZoWnVReUpOc3VtRm43a3hFN09jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wNzE2ZGYtMzQxYi00YTA4LWE0NTEt
NTk2MjI1MDMxZWUzLzEvenlKTWhLNjZoWnVReUpOc3VtRm43a3hFN09jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wNzE2ZGYtMzQxYi00YTA4LWE0NTEtNTk2MjI1MDMxZWUz
LzEvenlKTWhLNjZoWnVReUpOc3VtRm43a3hFN09jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNJDaLNC
1P99LQaThz/rTcKbXfAMgDMtIPdpPd8eeV9peZl6rxEu2yFxmVWq6ih6kk4zmm1B
QJLbelZ7eT88FKtXQovk+Ej6l+gmw5fUxL4cKNBLTrg587JGf9nGkB40X7k5UIgU
p/hzhYm1Bugw053xnZ+B2AZTA+cO1yI4vjGGH1sdiQuN4vIb42vZG/lxhVXK0I3F
S3Rh+RWNzUbZvjSSYhCA4ucaM4uWXrGIRjkyOecCL9F+BJsZN1VKtZ122q88LBtq
Z8WY/VcvSbWUrkVj8n1dEwQOiwVzYr5G+kvPn/YE1idop9N4msEDGQlPuQSPEj/R
iOobg/Hh2rEGcg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:55 2025 by rpki-client