Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: pmw2YVp7gV41NZVmaCqh18/JS1GepclveoKCKt1HHOs=
Subject key identifier: 5A:C9:C2:56:E5:18:1E:1D:76:73:C3:A8:B1:59:BF:21:17:FD:88:A8
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 019765F1B5245951E908816033DCC08394BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 14CB
Signing time: Thu 12 Jun 2025 21:00:28 +0000
Manifest this update: Thu 12 Jun 2025 21:00:28 +0000
Manifest next update: Fri 13 Jun 2025 21:00:28 +0000
Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: q+SkG7qT049uAcCrHoXBk5bltwPqjBBHOuLjlDqD/nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 15:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:f1:b5:24:59:51:e9:08:81:60:33:dc:c0:83:94:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Jun 12 21:00:28 2025 GMT
Not After : Jun 13 21:00:28 2025 GMT
Subject: CN=5ac9c256e5181e1d7673c3a8b159bf2117fd88a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:35:72:19:7b:e9:85:0f:9a:d1:a7:23:70:
71:2b:48:cd:95:c6:a4:de:29:ff:2e:df:36:c2:76:
c7:cc:63:62:37:1a:d0:23:df:18:74:45:99:3d:19:
de:af:b3:b8:29:71:50:7f:a0:8d:50:da:61:be:49:
f0:a9:31:ff:bb:5a:d7:43:ca:16:7b:68:74:2c:43:
e9:83:7c:82:16:03:b7:e5:e2:c2:6e:98:a9:fb:ee:
0a:33:36:7b:a5:7d:23:60:73:a5:ae:3d:5c:11:0e:
8b:71:7f:46:d5:47:b2:04:e5:d8:8d:80:79:7e:86:
8c:d2:9f:5b:ad:aa:0f:69:52:66:08:b9:3b:aa:3c:
92:29:cc:e3:93:1f:98:b7:81:79:09:57:3e:a7:4d:
8c:a4:ba:74:7e:74:91:ab:41:65:36:c0:f1:a4:5c:
b1:57:39:b8:fd:dd:64:8e:6b:b3:7c:28:c1:3c:0b:
36:8f:b8:a0:20:4b:61:60:7a:80:54:c9:ec:c8:f5:
1c:00:7a:c8:a3:a9:9f:67:fa:ea:54:ab:b0:20:0f:
83:21:99:85:ce:39:2f:44:85:3f:7b:4c:5a:da:4c:
29:a8:4f:23:fd:30:f0:cf:14:88:4e:58:0f:ec:1d:
a2:a4:78:84:78:ef:18:ac:90:e7:aa:a1:06:f1:a6:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C9:C2:56:E5:18:1E:1D:76:73:C3:A8:B1:59:BF:21:17:FD:88:A8
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7c:aa:17:2a:a0:a7:1d:0b:10:b0:f8:71:50:a9:72:5f:cc:
69:82:eb:ff:30:0b:cd:ab:2f:37:55:04:c7:8f:39:d3:fe:98:
e9:69:e8:46:7a:4f:ac:a2:4d:57:d8:a7:88:8d:95:d0:f8:59:
85:7b:6f:79:3a:01:66:f3:c8:f5:77:22:3d:ac:bc:cd:27:0e:
60:53:06:05:e9:9b:d4:8f:51:ee:0a:ae:86:06:0a:b4:57:ca:
6a:c5:de:0f:ad:1a:f0:0e:b7:fb:be:d8:6b:77:3a:61:3d:b4:
77:96:29:c4:06:14:a2:f0:8b:bd:06:c4:ea:b6:e9:c5:b4:26:
a2:ed:40:00:f4:bb:c9:52:d5:64:30:77:7a:dd:cf:10:2c:a9:
62:c7:ba:7a:fd:ef:3a:a4:ee:e3:b5:0b:ca:6b:e2:2f:cd:e1:
a9:b5:ff:5c:62:15:e9:12:9c:97:8d:8e:99:21:68:9f:f7:2e:
06:bf:5d:eb:19:0b:a3:58:d7:24:77:17:53:a8:0a:8d:fa:20:
5b:d2:20:f7:e5:3d:51:2a:5a:4d:42:b9:73:69:b3:cb:8c:a5:
09:42:50:1a:1a:8f:64:a0:64:3a:df:3c:d3:bf:ac:7a:d0:63:
f5:11:60:31:10:af:ca:54:35:e2:82:b7:59:99:ba:03:8a:c2:
6f:0e:eb:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdl8bUkWVHpCIFgM9zAg5S9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMzdjYTNhYmNhNWUxNGFjMTFiYzdmM2MxNTYyYTY0ZDYz
OTFkMjIwHhcNMjUwNjEyMjEwMDI4WhcNMjUwNjEzMjEwMDI4WjAzMTEwLwYDVQQD
Eyg1YWM5YzI1NmU1MTgxZTFkNzY3M2MzYThiMTU5YmYyMTE3ZmQ4OGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui41chl76YUPmtGnI3BxK0jNlcak
3in/Lt82wnbHzGNiNxrQI98YdEWZPRner7O4KXFQf6CNUNphvknwqTH/u1rXQ8oW
e2h0LEPpg3yCFgO35eLCbpip++4KMzZ7pX0jYHOlrj1cEQ6LcX9G1UeyBOXYjYB5
foaM0p9braoPaVJmCLk7qjySKczjkx+Yt4F5CVc+p02MpLp0fnSRq0FlNsDxpFyx
Vzm4/d1kjmuzfCjBPAs2j7igIEthYHqAVMnsyPUcAHrIo6mfZ/rqVKuwIA+DIZmF
zjkvRIU/e0xa2kwpqE8j/TDwzxSITlgP7B2ipHiEeO8YrJDnqqEG8aaLXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrJwlblGB4ddnPDqLFZvyEX/YioMB8GA1UdIwQY
MBaAFM43yjq8peFKwRvH88FWKmTWOR0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvempmS09yeWw0VXJCRzhmendWWXFaTlk1SFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iZTY2YmYtNTYxYy00ZDU1LTgyNmQt
MDM4MDM1ZDgwYzBiLzEvempmS09yeWw0VXJCRzhmendWWXFaTlk1SFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9iZTY2YmYtNTYxYy00ZDU1LTgyNmQtMDM4MDM1ZDgwYzBi
LzEvempmS09yeWw0VXJCRzhmendWWXFaTlk1SFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnyqFyqg
px0LELD4cVCpcl/MaYLr/zALzasvN1UEx4850/6Y6WnoRnpPrKJNV9iniI2V0PhZ
hXtveToBZvPI9XciPay8zScOYFMGBemb1I9R7gquhgYKtFfKasXeD60a8A63+77Y
a3c6YT20d5YpxAYUovCLvQbE6rbpxbQmou1AAPS7yVLVZDB3et3PECypYse6ev3v
OqTu47ULymviL83hqbX/XGIV6RKcl42OmSFon/cuBr9d6xkLo1jXJHcXU6gKjfog
W9Ig9+U9USpaTUK5c2mzy4ylCUJQGhqPZKBkOt8807+setBj9RFgMRCvylQ14oK3
WZm6A4rCbw7rWw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 23:35:26 2025 by rpki-client