Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier: agfxwPa1JC+jMoO+1EAT3RNgeTFXLzjsiBzMAmhn9ug=
Subject key identifier: C9:31:50:1F:D1:71:9C:88:6B:E3:07:D1:35:92:48:EC:B4:19:A4:D8
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial: 01975A24DEE5887F590176AA40BE12CD4E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number: 0EED
Signing time: Tue 10 Jun 2025 14:00:55 +0000
Manifest this update: Tue 10 Jun 2025 14:00:55 +0000
Manifest next update: Wed 11 Jun 2025 14:00:55 +0000
Files and hashes: 1: DkGvgDnbdtEHDMx7b64dzBjhPco.roa (hash: 8mB0OA1c8Mmrq7iJrmaJaIVGUwLhqVKrizBW/uXLsCE=)
2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: wjW7sDiUUIu5GG0jeMPsqhLC0cQjdXw5d7+LXTjhaKE=)
3: ZiWYCsD1Dry724z5OmJJ8Oawr6w.roa (hash: pA+krdDNaZYU7n+P4r9c22BIzRTJGvLkmVz3LgTk2aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:de:e5:88:7f:59:01:76:aa:40:be:12:cd:4e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Validity
Not Before: Jun 10 14:00:55 2025 GMT
Not After : Jun 11 14:00:55 2025 GMT
Subject: CN=c931501fd1719c886be307d1359248ecb419a4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:2d:e3:22:83:6d:3c:ce:30:71:50:32:74:
32:51:cc:9e:64:56:05:83:72:3b:27:e9:81:93:c6:
db:4c:c9:e5:84:97:3b:e1:27:b1:a0:3a:0d:b8:ae:
0b:e7:28:3d:9f:07:0e:5b:9d:20:a1:ef:ec:4e:84:
f8:89:fb:2b:e0:31:49:c8:f3:95:9e:cc:38:41:4c:
4b:a3:90:81:c1:92:fc:dc:24:79:34:32:5e:b3:65:
32:64:d9:72:8c:c5:b0:d8:83:d8:bd:7c:89:b2:ea:
77:60:6a:82:ad:35:ca:46:19:e8:a5:13:f4:dd:3a:
8b:76:74:54:fd:75:9a:4a:a0:16:27:c5:5b:5d:bd:
64:61:cc:a6:43:9a:4e:7d:a7:14:db:f5:e4:fa:19:
1e:06:11:5d:32:9e:a0:4d:f1:de:7c:25:39:3c:8b:
33:53:33:25:81:b7:1d:33:2f:21:23:d1:03:df:76:
47:f7:c2:17:eb:c9:ba:43:6a:9b:d8:2a:85:7e:3f:
9a:69:1d:ee:e0:96:92:0b:09:9b:a7:74:e8:b5:a2:
c4:bb:93:53:57:75:ce:11:20:74:d5:3b:f3:30:85:
a1:29:5c:6f:d4:b4:92:1d:f5:b2:c9:28:62:ff:92:
cc:a3:0b:d1:2f:aa:02:d0:81:15:da:12:7c:35:66:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:31:50:1F:D1:71:9C:88:6B:E3:07:D1:35:92:48:EC:B4:19:A4:D8
X509v3 Authority Key Identifier:
keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d4:d4:a2:ab:b2:6f:93:8b:73:ea:70:15:e7:b3:27:17:69:
a6:db:eb:35:1c:55:b5:eb:3b:bf:96:e6:96:d6:b1:fc:9a:2d:
b4:e7:68:6e:bf:81:c9:df:df:5e:8a:ca:45:62:00:21:35:fc:
56:aa:7d:03:f3:57:e4:7c:00:88:c6:6d:6a:05:62:e5:56:c5:
84:7c:c7:6c:ff:02:56:33:69:9e:bb:5a:c1:25:c2:94:50:5f:
66:73:dd:b7:f3:4e:bb:ec:56:a0:db:bf:46:04:bd:5b:fc:87:
9d:61:a9:2f:c5:a0:43:03:11:80:f6:71:8a:f3:c5:1e:d1:a5:
3f:53:71:b8:a0:a1:33:6c:88:58:c3:f8:e2:ab:70:73:1e:77:
ff:bc:69:ce:0b:2d:25:c8:04:35:db:fe:25:1a:05:2a:29:45:
da:d1:4d:2b:68:36:48:f6:89:1b:50:46:da:d8:dd:cc:8a:22:
0a:b0:2d:ef:53:bb:a8:fc:b0:d0:af:5d:88:66:88:85:0a:82:
cf:0c:f6:a6:2a:2d:fa:e4:1f:e5:82:e2:d4:9b:c0:c5:b6:fc:
9a:52:53:8a:fd:fd:61:55:fb:0f:30:d7:dc:11:06:0b:42:56:
89:5e:36:1e:bd:e2:de:a4:d0:48:4d:9e:2c:60:d4:41:47:86:
b7:5d:b3:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdaJN7liH9ZAXaqQL4SzU4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODNkMzIyZWYyNGM4NzE5OGI3NjVlYTFkMWM0MmMyODNh
N2Y4ZjYwHhcNMjUwNjEwMTQwMDU1WhcNMjUwNjExMTQwMDU1WjAzMTEwLwYDVQQD
EyhjOTMxNTAxZmQxNzE5Yzg4NmJlMzA3ZDEzNTkyNDhlY2I0MTlhNGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7Yt4yKDbTzOMHFQMnQyUcyeZFYF
g3I7J+mBk8bbTMnlhJc74SexoDoNuK4L5yg9nwcOW50goe/sToT4ifsr4DFJyPOV
nsw4QUxLo5CBwZL83CR5NDJes2UyZNlyjMWw2IPYvXyJsup3YGqCrTXKRhnopRP0
3TqLdnRU/XWaSqAWJ8VbXb1kYcymQ5pOfacU2/Xk+hkeBhFdMp6gTfHefCU5PIsz
UzMlgbcdMy8hI9ED33ZH98IX68m6Q2qb2CqFfj+aaR3u4JaSCwmbp3TotaLEu5NT
V3XOESB01TvzMIWhKVxv1LSSHfWyyShi/5LMowvRL6oC0IEV2hJ8NWZYiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkxUB/RcZyIa+MH0TWSSOy0GaTYMB8GA1UdIwQY
MBaAFGWD0yLvJMhxmLdl6h0cQsKDp/j2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMt
NWJlOWUxMTdkYmRhLzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMtNWJlOWUxMTdkYmRh
LzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9TUoquy
b5OLc+pwFeezJxdpptvrNRxVtes7v5bmltax/JottOdobr+Byd/fXorKRWIAITX8
Vqp9A/NX5HwAiMZtagVi5VbFhHzHbP8CVjNpnrtawSXClFBfZnPdt/NOu+xWoNu/
RgS9W/yHnWGpL8WgQwMRgPZxivPFHtGlP1NxuKChM2yIWMP44qtwcx53/7xpzgst
JcgENdv+JRoFKilF2tFNK2g2SPaJG1BG2tjdzIoiCrAt71O7qPyw0K9diGaIhQqC
zwz2piot+uQf5YLi1JvAxbb8mlJTiv39YVX7DzDX3BEGC0JWiV42Hr3i3qTQSE2e
LGDUQUeGt12z4Q==
-----END CERTIFICATE-----
Generated at Tue Jun 10 17:49:14 2025 by rpki-client