Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
File: Zpauprq3nEj13e5KRr9Ktk2GMWA.mft (raw, json)
Hash identifier: Z4h8NyKyIos9ofIfKCeT7gm5BjGHyElaTyWw4H5uz2E=
Subject key identifier: 8E:E2:3E:37:53:47:D6:C7:D2:90:C6:AA:08:15:D4:55:6E:B6:AA:87
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Certificate issuer: /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial: 019747B0FB58DC0D379B5F7850F3F48F8ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
Manifest number: 1588
Signing time: Sat 07 Jun 2025 00:01:10 +0000
Manifest this update: Sat 07 Jun 2025 00:01:10 +0000
Manifest next update: Sun 08 Jun 2025 00:01:10 +0000
Files and hashes: 1: 7xOVAQAhGxaXhRVB4CbcZXKNaLc.roa (hash: k+U35adZwDUqbZfONZN9YxBvYnb8OmgnqwbSFhlvMsw=)
2: Ss4p2Wi9YLUTVxVEOHNi-gD-YLo.roa (hash: IbN6B6NWFefTjZbMVpJkmbwj8ZHivUrVhvuHXNdd+oQ=)
3: Zpauprq3nEj13e5KRr9Ktk2GMWA.crl (hash: Rh8k2On9qSdX439UsMPZCMiIuAp86xv7lmwFk+MGN68=)
4: jFXSmkjEC26c8mxhOetY3rp2Ccc.roa (hash: olcLB40Oa+I2BCFt/Z0AGNONx90qq/xMtLVV5Y1vQVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:fb:58:dc:0d:37:9b:5f:78:50:f3:f4:8f:8e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Validity
Not Before: Jun 7 00:01:10 2025 GMT
Not After : Jun 8 00:01:10 2025 GMT
Subject: CN=8ee23e375347d6c7d290c6aa0815d4556eb6aa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:61:6e:60:d2:42:db:e8:33:6b:7e:74:a9:
8e:ae:80:13:ce:8d:a5:92:25:b5:02:11:a8:63:ae:
37:1a:9c:aa:7d:cd:f6:27:75:84:2b:af:b3:17:e9:
3a:2f:f3:09:67:9d:99:4c:f8:29:ad:62:7e:2d:85:
5a:48:e4:2d:7d:e3:26:a9:72:5c:40:2d:6a:d2:92:
c3:2a:3d:74:a5:8a:36:b4:bb:e6:8b:ef:95:f8:cd:
10:42:52:df:31:2b:3d:cc:41:8f:6e:ed:02:67:0a:
e5:db:ed:41:5e:aa:36:57:da:12:de:8b:60:1d:76:
c6:56:97:2b:57:63:f0:f8:5a:54:a2:3d:9d:d0:ad:
d6:b0:8c:da:15:28:c8:4a:34:48:92:9c:35:ac:ea:
1d:a9:76:97:bb:b8:8a:63:05:07:4b:72:7b:9a:b4:
89:0c:55:d4:e4:9c:66:ec:16:f5:43:c9:60:79:d9:
64:31:d6:c5:ad:0b:98:c6:ac:89:05:64:f7:4d:ef:
0f:0c:e0:af:6a:d4:f8:5c:8b:77:90:9b:38:b3:9d:
6d:35:d6:17:c1:b1:57:bd:e0:5e:7f:d5:1b:0e:2b:
a6:75:89:b5:20:ae:c0:46:16:42:83:d8:0e:2f:00:
ed:2c:41:c5:73:b5:a2:94:83:4b:3a:49:34:07:bd:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E2:3E:37:53:47:D6:C7:D2:90:C6:AA:08:15:D4:55:6E:B6:AA:87
X509v3 Authority Key Identifier:
keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:68:5e:91:d3:b9:3f:44:73:0a:f8:5a:ee:a5:09:f6:d1:3c:
b5:08:19:ed:9a:e6:d8:40:8e:10:9b:1b:03:08:b7:c4:c3:1c:
9c:b9:96:15:d4:66:e3:95:b9:f2:90:db:8a:16:97:f9:32:35:
08:0b:70:ed:97:08:99:88:d3:dc:96:3c:b4:b7:50:77:99:f1:
3a:38:c7:12:5e:0c:92:87:e5:43:9c:65:3a:46:df:99:b0:c0:
2c:d4:d0:45:4e:d5:26:1a:f1:6b:25:0e:3a:05:93:72:56:bd:
e7:ef:a2:e9:90:7a:55:20:8a:99:68:65:1b:ad:cc:bf:56:ff:
ac:e2:24:11:e3:78:cf:50:21:da:86:0a:d0:bc:77:72:62:f4:
84:7a:e8:79:ff:ba:bb:48:50:8f:25:3f:a0:3b:e3:ad:ce:1a:
ae:60:f2:26:c3:70:ab:fc:b0:32:71:6e:9e:70:83:f4:31:e8:
5c:4b:d8:e8:9e:db:b3:73:55:c5:bb:d8:e0:fa:68:22:69:f2:
34:40:49:5b:02:8f:f8:7c:fa:0e:d4:10:80:1b:47:34:7c:7e:
e0:4c:11:34:a6:28:f5:d9:4c:d4:84:01:f6:2d:a8:bb:8a:43:
63:d7:0a:bd:0f:86:fc:af:73:32:0b:4f:8f:84:47:97:a0:79:
0e:17:94:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsPtY3A03m194UPP0j47TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTZhZWE2YmFiNzljNDhmNWRkZWU0YTQ2YmY0YWI2NGQ4
NjMxNjAwHhcNMjUwNjA3MDAwMTEwWhcNMjUwNjA4MDAwMTEwWjAzMTEwLwYDVQQD
Eyg4ZWUyM2UzNzUzNDdkNmM3ZDI5MGM2YWEwODE1ZDQ1NTZlYjZhYTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeBhbmDSQtvoM2t+dKmOroATzo2l
kiW1AhGoY643Gpyqfc32J3WEK6+zF+k6L/MJZ52ZTPgprWJ+LYVaSOQtfeMmqXJc
QC1q0pLDKj10pYo2tLvmi++V+M0QQlLfMSs9zEGPbu0CZwrl2+1BXqo2V9oS3otg
HXbGVpcrV2Pw+FpUoj2d0K3WsIzaFSjISjRIkpw1rOodqXaXu7iKYwUHS3J7mrSJ
DFXU5Jxm7Bb1Q8lgedlkMdbFrQuYxqyJBWT3Te8PDOCvatT4XIt3kJs4s51tNdYX
wbFXveBef9UbDiumdYm1IK7ARhZCg9gOLwDtLEHFc7WilINLOkk0B737BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7iPjdTR9bH0pDGqggV1FVutqqHMB8GA1UdIwQY
MBaAFGaWrqa6t5xI9d3uSka/SrZNhjFgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NTJjMmItZjJjZi00YTkyLWExY2Qt
ZjAxOThjNmMyNDc0LzEvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80NTJjMmItZjJjZi00YTkyLWExY2QtZjAxOThjNmMyNDc0
LzEvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWhekdO5
P0RzCvha7qUJ9tE8tQgZ7Zrm2ECOEJsbAwi3xMMcnLmWFdRm45W58pDbihaX+TI1
CAtw7ZcImYjT3JY8tLdQd5nxOjjHEl4MkoflQ5xlOkbfmbDALNTQRU7VJhrxayUO
OgWTcla95++i6ZB6VSCKmWhlG63Mv1b/rOIkEeN4z1Ah2oYK0Lx3cmL0hHroef+6
u0hQjyU/oDvjrc4armDyJsNwq/ywMnFunnCD9DHoXEvY6J7bs3NVxbvY4PpoImny
NEBJWwKP+Hz6DtQQgBtHNHx+4EwRNKYo9dlM1IQB9i2ou4pDY9cKvQ+G/K9zMgtP
j4RHl6B5DheUtg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:24:49 2025 by rpki-client