Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: A/2s1CRil6u/YzCYnhvKTtDwGtbDmT2mOPlCAio9xtU=
Subject key identifier: A3:44:35:F6:9E:B0:CC:7F:EF:92:02:35:19:20:85:9B:D7:D0:A1:98
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 0197451DB76432ED4390A04DACF024B1BEB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 128A
Signing time: Fri 06 Jun 2025 12:01:04 +0000
Manifest this update: Fri 06 Jun 2025 12:01:04 +0000
Manifest next update: Sat 07 Jun 2025 12:01:04 +0000
Files and hashes: 1: O0pEQEzhWfGPoGN9_GYQs2aEBkA.roa (hash: SE3IDQJtlW1HyYxGFEmw6qC9BXcob4+h3FZns0TYNu4=)
2: sVJ8yb4YMNZC8SR4z31lotsJRHA.roa (hash: +zzqZHb3MjdSyZ19xzKBnWrbrHGVz+kt5/OJZPLUdEA=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: +R402dVe5b48aaNlb9/dfaunLSuAEYGvytyzKonUnRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:1d:b7:64:32:ed:43:90:a0:4d:ac:f0:24:b1:be:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Jun 6 12:01:04 2025 GMT
Not After : Jun 7 12:01:04 2025 GMT
Subject: CN=a34435f69eb0cc7fef9202351920859bd7d0a198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:84:2f:6f:4e:6e:37:b5:50:54:57:00:92:7f:
c1:d1:8c:d3:e0:85:e5:7a:d3:f5:c1:33:77:97:62:
a9:3c:80:aa:86:5e:bf:13:97:36:9b:36:bc:af:06:
1b:2d:97:e6:74:3c:9a:8d:81:ae:d0:4c:d5:80:1f:
3e:0a:66:04:de:46:aa:ed:aa:ef:26:10:bf:75:01:
a2:36:22:71:3f:b7:6a:02:11:65:0c:ca:dc:e5:bc:
48:e1:dd:2b:88:52:57:15:9b:c8:ea:06:de:0f:6a:
85:a9:bc:91:34:97:64:ab:0c:9a:78:18:21:02:f1:
32:d6:be:4a:05:28:3d:a9:09:76:45:6a:8b:6c:5b:
09:05:5a:5f:10:94:09:84:d1:19:c0:c7:67:ef:f8:
8e:66:c3:99:3c:0f:11:8c:c8:bb:11:e9:c0:33:72:
3a:19:32:4b:c9:d1:12:76:1a:32:4f:a4:9b:09:66:
f2:52:fa:e4:e5:67:2b:dc:6e:a1:aa:ce:90:5d:0f:
83:51:5e:1c:4b:b5:46:fe:ed:b2:17:55:3d:d5:ae:
9c:dc:70:5c:10:13:37:4d:27:1b:85:8c:8f:e5:95:
5e:bf:b5:b6:97:48:c6:fc:1b:28:99:f4:04:45:af:
cd:49:20:a5:01:f5:6f:26:71:24:30:b0:c9:c8:38:
db:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:44:35:F6:9E:B0:CC:7F:EF:92:02:35:19:20:85:9B:D7:D0:A1:98
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:36:40:4c:04:dc:4b:f0:d2:f1:6b:31:89:30:cd:71:9f:37:
15:11:9c:5f:16:55:fc:d6:e0:f4:64:77:f6:de:fc:84:f3:dc:
95:5c:bf:ce:db:51:c4:16:6e:07:99:78:de:4b:6b:24:3d:68:
0e:d0:0c:b3:0f:2b:2d:e0:87:d3:77:30:b6:d1:63:f7:69:1a:
cb:ec:ff:d4:ba:bd:00:c9:66:9a:1b:bf:65:0f:6c:0e:c8:d3:
c6:a0:ea:78:fb:6c:6b:e1:9a:41:2c:47:c5:05:e7:27:1e:58:
12:13:74:f9:22:7b:ec:0f:14:0b:70:63:98:b4:fe:74:37:a7:
31:c5:44:a7:bd:64:2f:06:d0:20:f9:a1:a0:6c:0f:5b:06:fe:
5a:2b:ad:f2:cf:cf:39:b6:77:20:6e:2a:bf:3f:71:16:05:aa:
73:ca:aa:b2:58:40:2f:91:f5:e5:25:17:fd:08:5c:8e:26:70:
0a:ba:9d:d0:a2:dc:10:f1:c3:d2:d4:9d:81:eb:5b:0a:64:d9:
2b:db:fc:2b:93:4e:fe:c7:5b:4a:5d:72:b1:99:78:e8:41:1f:
c3:97:df:65:77:3d:12:bc:1b:e7:a7:aa:17:69:63:1c:9b:71:
a6:e4:e1:51:ff:c0:48:00:a6:1a:33:b2:5c:e6:c7:4c:30:bc:
52:a3:a9:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFHbdkMu1DkKBNrPAksb65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZWE0YWRlZTgwYjA2NTE5Y2U0MGRkM2QxM2YyOGJhOWY1
NzU5NTcwHhcNMjUwNjA2MTIwMTA0WhcNMjUwNjA3MTIwMTA0WjAzMTEwLwYDVQQD
EyhhMzQ0MzVmNjllYjBjYzdmZWY5MjAyMzUxOTIwODU5YmQ3ZDBhMTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54Qvb05uN7VQVFcAkn/B0YzT4IXl
etP1wTN3l2KpPICqhl6/E5c2mza8rwYbLZfmdDyajYGu0EzVgB8+CmYE3kaq7arv
JhC/dQGiNiJxP7dqAhFlDMrc5bxI4d0riFJXFZvI6gbeD2qFqbyRNJdkqwyaeBgh
AvEy1r5KBSg9qQl2RWqLbFsJBVpfEJQJhNEZwMdn7/iOZsOZPA8RjMi7EenAM3I6
GTJLydESdhoyT6SbCWbyUvrk5Wcr3G6hqs6QXQ+DUV4cS7VG/u2yF1U91a6c3HBc
EBM3TScbhYyP5ZVev7W2l0jG/BsomfQERa/NSSClAfVvJnEkMLDJyDjbjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNENfaesMx/75ICNRkghZvX0KGYMB8GA1UdIwQY
MBaAFM3qSt7oCwZRnOQN09E/KLqfV1lXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemVwSzN1Z0xCbEdjNUEzVDBUOG91cDlYV1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81YjVmMGMtM2MzZC00ZTIwLWIwMzUt
MDU2YzdiZjZkN2Q4LzEvemVwSzN1Z0xCbEdjNUEzVDBUOG91cDlYV1ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81YjVmMGMtM2MzZC00ZTIwLWIwMzUtMDU2YzdiZjZkN2Q4
LzEvemVwSzN1Z0xCbEdjNUEzVDBUOG91cDlYV1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjZATATc
S/DS8WsxiTDNcZ83FRGcXxZV/Nbg9GR39t78hPPclVy/zttRxBZuB5l43ktrJD1o
DtAMsw8rLeCH03cwttFj92kay+z/1Lq9AMlmmhu/ZQ9sDsjTxqDqePtsa+GaQSxH
xQXnJx5YEhN0+SJ77A8UC3BjmLT+dDenMcVEp71kLwbQIPmhoGwPWwb+Wiut8s/P
ObZ3IG4qvz9xFgWqc8qqslhAL5H15SUX/QhcjiZwCrqd0KLcEPHD0tSdgetbCmTZ
K9v8K5NO/sdbSl1ysZl46EEfw5ffZXc9Erwb56eqF2ljHJtxpuThUf/ASACmGjOy
XObHTDC8UqOpFw==
-----END CERTIFICATE-----
Generated at Fri Jun 6 17:44:22 2025 by rpki-client