Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
File: ZGASnCIfekeBKIWmSDixLuaxXtU.mft (raw, json)
Hash identifier: S/HvXmFKE8Tl2Ev+FcJwONEBBOHAyi80B0KHWv7rU+c=
Subject key identifier: D4:66:63:30:23:5D:14:DE:41:86:24:3B:E5:56:A5:2A:23:08:A9:21
Authority key identifier: 64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
Certificate issuer: /CN=6460129c221f7a47812885a64838b12ee6b15ed5
Certificate serial: 01974C68E8FDBEBA20E42CFD8E2ED6B7B491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
Manifest number: 0B98
Signing time: Sat 07 Jun 2025 22:00:33 +0000
Manifest this update: Sat 07 Jun 2025 22:00:33 +0000
Manifest next update: Sun 08 Jun 2025 22:00:33 +0000
Files and hashes: 1: JmllacFYtWc-oOoWU-KiBC-dzBI.roa (hash: ofZ7OlX/Buue/GMQQmZdmktJZ/jzN3/Huw6iGY9j4no=)
2: ZGASnCIfekeBKIWmSDixLuaxXtU.crl (hash: vYA+J6bYbSZVeS8zD97/uDA5lgye1siY/vEOru73xgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:e8:fd:be:ba:20:e4:2c:fd:8e:2e:d6:b7:b4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6460129c221f7a47812885a64838b12ee6b15ed5
Validity
Not Before: Jun 7 22:00:33 2025 GMT
Not After : Jun 8 22:00:33 2025 GMT
Subject: CN=d4666330235d14de4186243be556a52a2308a921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5c:42:c4:54:11:fc:14:12:cf:fe:2d:df:46:
fe:98:8e:06:5b:c0:30:0a:4a:b6:e0:23:dc:f3:2d:
42:b1:18:46:1f:23:6c:1e:6a:fd:b1:e1:5c:84:4c:
64:1c:94:ca:68:5a:a8:fb:85:45:c7:2b:e1:90:a3:
46:61:ac:41:65:2f:1d:5e:71:b8:15:cf:6e:6f:52:
2b:87:b8:0e:8f:79:19:df:0b:4f:95:9e:c9:6e:d5:
18:42:5e:9d:0c:fb:6d:1c:68:0e:9e:66:33:0d:1f:
38:b2:f1:27:a5:b3:dc:cb:e0:b8:25:f1:f8:2f:1b:
f4:85:9d:02:6a:56:a3:9b:4e:7f:0b:c5:e3:1b:7c:
e6:d9:cf:9a:ad:6e:62:99:40:0a:c1:38:05:cb:b3:
68:99:34:20:be:7c:ef:4a:09:30:b2:d6:56:eb:fd:
eb:07:a8:03:73:d0:fc:b9:10:ea:5d:54:43:72:94:
03:8a:07:bd:8e:1e:7b:b9:00:c9:2a:9e:57:7e:f5:
f5:c5:57:1f:90:bc:fd:39:f0:47:6c:8e:d6:fb:e0:
c4:eb:37:70:c1:e2:2f:3c:ff:fe:6a:35:95:77:34:
79:5f:ee:69:12:05:a8:f5:a1:b7:43:d1:24:0b:53:
97:2c:6f:53:5a:34:a1:09:05:d8:98:ab:ee:cb:52:
26:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:66:63:30:23:5D:14:DE:41:86:24:3B:E5:56:A5:2A:23:08:A9:21
X509v3 Authority Key Identifier:
keyid:64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:01:45:dc:e3:7e:db:57:60:39:33:6d:d1:7c:4f:1b:d3:74:
e5:db:a2:67:5a:25:77:4e:e2:63:cc:8b:e9:fd:70:c0:32:e3:
f8:e4:5f:0f:0f:9b:f6:a1:41:a4:d6:87:2b:8c:17:03:7c:7e:
ed:83:48:f8:ad:cf:1f:5c:37:74:2d:fa:6f:1e:10:6a:96:76:
5b:d2:1c:52:a3:4d:6a:ce:37:21:fe:12:63:e7:f4:4d:28:c1:
6c:7f:b5:bb:3e:be:5d:22:6f:f0:e0:e7:01:1c:76:8f:70:c1:
cc:ab:6c:a1:c2:09:9e:f0:ae:52:7d:73:5d:b9:06:50:8e:26:
5f:eb:70:d0:88:46:30:ef:59:a5:c9:12:dc:28:81:3c:bd:d4:
c1:32:67:0d:74:78:d8:94:36:78:f4:f6:15:27:ac:9a:e6:c3:
4f:61:80:28:c8:71:1b:27:26:ed:d6:03:09:27:e3:f2:0e:73:
26:12:41:bd:17:ce:84:82:f9:5c:e6:4a:ca:c6:8b:fa:8c:fa:
34:d1:1e:37:d3:62:a4:ac:9d:ce:25:bb:54:c8:5e:9d:6f:22:
a7:bd:3f:26:9f:43:24:85:04:3f:a1:f5:27:00:b6:07:2c:c2:
92:8f:81:48:dd:70:19:b9:ce:9e:e7:2f:dc:a2:88:07:59:4d:
41:50:9e:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMaOj9vrog5Cz9ji7Wt7SRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjAxMjljMjIxZjdhNDc4MTI4ODVhNjQ4MzhiMTJlZTZi
MTVlZDUwHhcNMjUwNjA3MjIwMDMzWhcNMjUwNjA4MjIwMDMzWjAzMTEwLwYDVQQD
EyhkNDY2NjMzMDIzNWQxNGRlNDE4NjI0M2JlNTU2YTUyYTIzMDhhOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VxCxFQR/BQSz/4t30b+mI4GW8Aw
Ckq24CPc8y1CsRhGHyNsHmr9seFchExkHJTKaFqo+4VFxyvhkKNGYaxBZS8dXnG4
Fc9ub1Irh7gOj3kZ3wtPlZ7JbtUYQl6dDPttHGgOnmYzDR84svEnpbPcy+C4JfH4
Lxv0hZ0Calajm05/C8XjG3zm2c+arW5imUAKwTgFy7NomTQgvnzvSgkwstZW6/3r
B6gDc9D8uRDqXVRDcpQDige9jh57uQDJKp5XfvX1xVcfkLz9OfBHbI7W++DE6zdw
weIvPP/+ajWVdzR5X+5pEgWo9aG3Q9EkC1OXLG9TWjShCQXYmKvuy1ImKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRmYzAjXRTeQYYkO+VWpSojCKkhMB8GA1UdIwQY
MBaAFGRgEpwiH3pHgSiFpkg4sS7msV7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdBU25DSWZla2VCS0lXbVNEaXhMdWF4WHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hNjQ2YWYtZTYxZC00OGI2LTg5ZDIt
ZWJhOTg4YTU0OGU3LzEvWkdBU25DSWZla2VCS0lXbVNEaXhMdWF4WHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hNjQ2YWYtZTYxZC00OGI2LTg5ZDItZWJhOTg4YTU0OGU3
LzEvWkdBU25DSWZla2VCS0lXbVNEaXhMdWF4WHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAFF3ON+
21dgOTNt0XxPG9N05duiZ1old07iY8yL6f1wwDLj+ORfDw+b9qFBpNaHK4wXA3x+
7YNI+K3PH1w3dC36bx4QapZ2W9IcUqNNas43If4SY+f0TSjBbH+1uz6+XSJv8ODn
ARx2j3DBzKtsocIJnvCuUn1zXbkGUI4mX+tw0IhGMO9ZpckS3CiBPL3UwTJnDXR4
2JQ2ePT2FSesmubDT2GAKMhxGycm7dYDCSfj8g5zJhJBvRfOhIL5XOZKysaL+oz6
NNEeN9NipKydziW7VMhenW8ip70/Jp9DJIUEP6H1JwC2ByzCko+BSN1wGbnOnucv
3KKIB1lNQVCeTg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:26:00 2025 by rpki-client