Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier: QA1PQOy0C0umVzyxKaHh4U3H8Nto136ny5K3Nm1OQ2I=
Subject key identifier: 21:09:E7:3C:3C:0B:84:66:B9:0B:2E:FF:B3:E7:FF:46:0F:59:ED:EC
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 0197488D2095F4EAB405E8D529110DF749D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number: 1087
Signing time: Sat 07 Jun 2025 04:01:37 +0000
Manifest this update: Sat 07 Jun 2025 04:01:37 +0000
Manifest next update: Sun 08 Jun 2025 04:01:37 +0000
Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: mhKQ36wJSTYdLTFE6EiHgsq89XUMGNUa6AIe2swcu1g=)
2: ZIWXo67jPvL3hLYa3gap-960Rno.roa (hash: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:20:95:f4:ea:b4:05:e8:d5:29:11:0d:f7:49:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Jun 7 04:01:37 2025 GMT
Not After : Jun 8 04:01:37 2025 GMT
Subject: CN=2109e73c3c0b8466b90b2effb3e7ff460f59edec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:dd:03:3e:a2:80:25:83:d8:2b:dd:4b:9f:
80:c0:d3:64:56:2c:d6:d3:f8:d0:be:a3:d5:b6:ba:
29:ea:be:df:b2:7b:a1:6b:81:21:0a:ce:e2:40:01:
04:92:dc:a6:c1:ff:1b:95:c6:95:05:08:49:9d:89:
55:bb:1f:bf:c3:ef:e4:7e:15:55:aa:59:89:2f:98:
90:de:41:68:ae:3c:f0:25:3c:a7:5d:13:9b:50:df:
d7:05:ff:45:f1:45:13:d1:d3:b2:90:40:51:7f:c7:
af:62:35:98:f4:56:4b:8b:e7:44:07:b3:a7:65:50:
3f:05:31:46:87:72:9d:e0:97:dc:29:7d:46:d8:57:
7f:6a:24:07:c7:cf:93:ae:6b:7f:f3:f4:e3:07:98:
9c:5f:7b:e5:98:35:a5:03:7b:4a:24:81:eb:6f:db:
ee:d5:40:16:c5:f9:68:f8:ab:3c:b7:76:de:b6:60:
f3:0e:69:c8:e9:75:3f:83:2d:c3:18:55:cb:53:43:
80:cf:a0:07:2a:2e:4e:9d:f5:6f:f9:40:96:25:50:
19:7d:ee:f3:4e:e8:d3:fd:b9:2b:2a:30:2e:b1:09:
40:ae:cd:de:c6:96:b7:cc:d1:6a:62:d4:52:8b:54:
ed:87:3e:fd:bd:49:42:5d:25:e7:3e:83:73:76:c6:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:09:E7:3C:3C:0B:84:66:B9:0B:2E:FF:B3:E7:FF:46:0F:59:ED:EC
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:12:86:0d:54:1a:b7:79:2a:d2:ea:db:29:e9:bc:19:84:ad:
91:f5:6f:84:fd:73:7f:aa:9e:01:67:f4:3f:71:e6:a8:8a:b1:
f0:15:5b:25:d6:00:68:2b:98:3b:f4:63:b2:5e:05:c6:62:c3:
e2:f5:2a:0e:ae:85:e8:82:35:5e:b6:33:88:f9:45:0d:5f:d1:
23:28:6c:db:f0:c2:f2:97:87:59:56:e7:f8:fb:85:f5:bc:5d:
29:25:35:8b:14:c0:b7:2a:14:84:bf:b1:cf:89:80:05:5c:58:
59:f8:c7:c3:1d:b2:c7:dc:83:62:fd:7d:f0:b4:50:e9:35:9d:
d9:69:e2:c5:da:72:ed:58:82:cc:e7:5d:35:78:18:dc:32:84:
35:77:f3:38:4c:91:3a:dc:df:e1:7f:3c:97:4d:a0:b9:d6:34:
45:0e:b6:7e:53:7f:e8:06:a0:69:aa:2d:e0:72:b2:af:b6:04:
7b:23:8f:1f:99:bc:bb:2c:10:fc:06:f4:4d:e7:34:df:af:e2:
73:99:27:56:e8:c1:40:32:fb:0c:d3:2e:5e:80:7f:4b:17:1a:
d5:20:9e:c3:e9:fa:a5:26:77:b1:b0:fc:e6:34:8e:6f:60:2c:
56:d0:25:8d:9b:fd:ca:fc:87:d5:d1:b0:a9:1b:9a:bd:41:15:
05:9d:df:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjSCV9Oq0BejVKREN90nQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjcwNjgzMDYyY2Q4YjM1YzFiNzYwMjE4YTc4OWI5MDhj
YjRjOGQwHhcNMjUwNjA3MDQwMTM3WhcNMjUwNjA4MDQwMTM3WjAzMTEwLwYDVQQD
EygyMTA5ZTczYzNjMGI4NDY2YjkwYjJlZmZiM2U3ZmY0NjBmNTllZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl7dAz6igCWD2CvdS5+AwNNkVizW
0/jQvqPVtrop6r7fsnuha4EhCs7iQAEEktymwf8blcaVBQhJnYlVux+/w+/kfhVV
qlmJL5iQ3kForjzwJTynXRObUN/XBf9F8UUT0dOykEBRf8evYjWY9FZLi+dEB7On
ZVA/BTFGh3Kd4JfcKX1G2Fd/aiQHx8+Trmt/8/TjB5icX3vlmDWlA3tKJIHrb9vu
1UAWxflo+Ks8t3betmDzDmnI6XU/gy3DGFXLU0OAz6AHKi5OnfVv+UCWJVAZfe7z
TujT/bkrKjAusQlArs3expa3zNFqYtRSi1Tthz79vUlCXSXnPoNzdsZaHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEJ5zw8C4RmuQsu/7Pn/0YPWe3sMB8GA1UdIwQY
MBaAFGdnBoMGLNizXBt2AhinibkIy0yNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGIt
N2Q4Y2I1M2RjMDg2LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGItN2Q4Y2I1M2RjMDg2
LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRKGDVQa
t3kq0urbKem8GYStkfVvhP1zf6qeAWf0P3HmqIqx8BVbJdYAaCuYO/Rjsl4FxmLD
4vUqDq6F6II1XrYziPlFDV/RIyhs2/DC8peHWVbn+PuF9bxdKSU1ixTAtyoUhL+x
z4mABVxYWfjHwx2yx9yDYv198LRQ6TWd2Wnixdpy7ViCzOddNXgY3DKENXfzOEyR
Otzf4X88l02gudY0RQ62flN/6Aagaaot4HKyr7YEeyOPH5m8uywQ/Ab0Tec036/i
c5knVujBQDL7DNMuXoB/Sxca1SCew+n6pSZ3sbD85jSOb2AsVtAljZv9yvyH1dGw
qRuavUEVBZ3fkg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:25:09 2025 by rpki-client