Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json)
Hash identifier: /yxwkkttqGoJ9KOsFC97p3yjSKaFpehhHxS0BAOKvtI=
Subject key identifier: 56:37:C7:1D:B2:7F:AC:60:5B:62:B9:3D:EF:57:B9:4F:8E:1D:A6:DB
Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Certificate serial: 01975234D78CC7209F7A737398C9A8C4275C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
Manifest number: 0843
Signing time: Mon 09 Jun 2025 01:01:24 +0000
Manifest this update: Mon 09 Jun 2025 01:01:24 +0000
Manifest next update: Tue 10 Jun 2025 01:01:24 +0000
Files and hashes: 1: 1-TNKHUQBd0JEmyJIvaoUUde-kRY.roa (hash: G2e9u8Y6Td6qmoghBsuFWq6jIrLhCoLM2r2ooj9I44k=)
2: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: k3tdMVtkmbTb5IgBXg2wgmH7jUzBv50RPrCWNtVsQ7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:d7:8c:c7:20:9f:7a:73:73:98:c9:a8:c4:27:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Validity
Not Before: Jun 9 01:01:24 2025 GMT
Not After : Jun 10 01:01:24 2025 GMT
Subject: CN=5637c71db27fac605b62b93def57b94f8e1da6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fd:4a:20:67:31:6f:0b:35:05:c4:6a:de:4a:
16:77:46:fb:2a:db:2e:a2:8a:50:ae:74:c4:c2:93:
f8:60:01:ab:ff:f0:52:05:d9:15:5c:69:09:b4:64:
ad:a0:dc:91:52:d6:df:40:3b:66:3b:34:f6:06:4c:
6f:27:96:6e:cc:dc:a2:49:14:ca:63:34:d6:7b:79:
aa:87:59:2d:70:3a:83:69:2e:a7:54:ba:3a:e1:31:
8b:a1:8f:31:08:1e:b6:21:7e:b4:b7:73:21:be:8e:
4d:de:68:99:79:8d:a6:2d:6f:83:f7:62:50:0b:f7:
82:3d:bb:94:8d:d5:17:e8:7d:fa:41:e0:4b:fd:e0:
8f:65:bf:a7:af:d1:de:73:24:44:f5:0d:14:12:a0:
a5:de:a4:09:b7:cf:8e:e1:4c:57:01:51:ff:0d:6b:
86:6e:22:9a:dd:b3:bb:d5:f6:0c:74:bc:af:7b:19:
f7:7c:2d:d1:64:27:8c:2e:90:5c:c8:05:db:91:9e:
29:fb:d6:6b:1b:4e:93:76:8d:72:e4:31:85:29:8a:
b8:d1:9c:46:97:b9:60:e3:e2:4a:ba:5d:e3:75:4e:
e6:13:8f:54:2a:10:41:3b:9a:f6:45:51:ad:ce:e5:
46:36:9c:88:32:57:30:6d:d5:56:8e:27:aa:e9:7b:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:37:C7:1D:B2:7F:AC:60:5B:62:B9:3D:EF:57:B9:4F:8E:1D:A6:DB
X509v3 Authority Key Identifier:
keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7d:4c:f3:99:01:42:19:3e:a4:ff:a5:19:04:3d:02:15:d5:
2a:ee:df:f1:07:16:bc:ab:f3:b5:e1:f5:5a:e6:ec:26:98:ce:
bf:86:e6:b2:4f:48:d1:f8:95:2f:4d:fb:f5:cd:fc:70:68:f5:
80:85:2b:db:87:2e:88:cf:1e:a1:37:0f:d3:fd:b1:58:09:07:
5c:50:2f:36:1e:6a:a9:31:c0:85:91:b5:66:69:51:bf:7c:f4:
ff:f0:dd:4d:95:6c:f2:20:77:2a:47:df:54:3e:4a:53:b5:a2:
94:4a:7d:8b:f9:aa:d4:b7:8b:5e:39:81:c7:9e:83:fe:6e:2e:
46:bf:c4:1e:26:12:5b:4b:df:c8:19:86:00:5f:c6:26:0f:4d:
a1:91:dc:d1:d4:f7:8d:7a:70:8a:7c:7e:b7:23:c0:df:55:14:
e0:b3:12:e8:cf:86:32:eb:e1:30:3f:c2:4d:74:45:5f:3d:96:
67:78:ea:8c:7a:7e:1d:aa:fc:48:dc:15:e2:04:75:08:f9:3d:
25:ee:2f:ba:93:aa:cf:40:f8:3d:db:cd:d7:4a:f6:6a:12:9f:
eb:72:89:25:98:06:56:37:61:40:87:b9:1d:b8:51:81:be:72:
c5:e6:51:4f:2b:d0:33:39:d0:9b:9e:4c:65:ec:c9:1c:f8:4c:
66:26:fe:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSNNeMxyCfenNzmMmoxCdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTllZDg0ZTRiMjExY2M4YmFhODkxNDk3NDEzNTRmODg1
MGVmMGYwHhcNMjUwNjA5MDEwMTI0WhcNMjUwNjEwMDEwMTI0WjAzMTEwLwYDVQQD
Eyg1NjM3YzcxZGIyN2ZhYzYwNWI2MmI5M2RlZjU3Yjk0ZjhlMWRhNmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P1KIGcxbws1BcRq3koWd0b7Ktsu
oopQrnTEwpP4YAGr//BSBdkVXGkJtGStoNyRUtbfQDtmOzT2BkxvJ5ZuzNyiSRTK
YzTWe3mqh1ktcDqDaS6nVLo64TGLoY8xCB62IX60t3Mhvo5N3miZeY2mLW+D92JQ
C/eCPbuUjdUX6H36QeBL/eCPZb+nr9HecyRE9Q0UEqCl3qQJt8+O4UxXAVH/DWuG
biKa3bO71fYMdLyvexn3fC3RZCeMLpBcyAXbkZ4p+9ZrG06Tdo1y5DGFKYq40ZxG
l7lg4+JKul3jdU7mE49UKhBBO5r2RVGtzuVGNpyIMlcwbdVWjieq6XtKfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFY3xx2yf6xgW2K5Pe9XuU+OHabbMB8GA1UdIwQY
MBaAFEWZ7YTkshHMi6qJFJdBNU+IUO8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDkt
MTZmZmExMTQ2OTljLzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDktMTZmZmExMTQ2OTlj
LzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAan1M85kB
Qhk+pP+lGQQ9AhXVKu7f8QcWvKvzteH1WubsJpjOv4bmsk9I0fiVL0379c38cGj1
gIUr24cuiM8eoTcP0/2xWAkHXFAvNh5qqTHAhZG1ZmlRv3z0//DdTZVs8iB3Kkff
VD5KU7WilEp9i/mq1LeLXjmBx56D/m4uRr/EHiYSW0vfyBmGAF/GJg9NoZHc0dT3
jXpwinx+tyPA31UU4LMS6M+GMuvhMD/CTXRFXz2WZ3jqjHp+Har8SNwV4gR1CPk9
Je4vupOqz0D4PdvN10r2ahKf63KJJZgGVjdhQIe5HbhRgb5yxeZRTyvQMznQm55M
ZezJHPhMZib+GA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:27:45 2025 by rpki-client