Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
File: z-DfghIUOCcckTwk_1D9O2LUDcY.mft (raw, json)
Hash identifier: tSbu8kfKcy140HI+tVXH20DpbpdXz/M+JIPk0VRT0WE=
Subject key identifier: 00:64:D7:9B:D5:3B:DB:08:09:C4:37:6E:A8:58:DE:28:73:CE:6D:0B
Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Certificate serial: 01974AB13A712276B91A86BC376639EF8199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
Manifest number: 059C
Signing time: Sat 07 Jun 2025 14:00:17 +0000
Manifest this update: Sat 07 Jun 2025 14:00:17 +0000
Manifest next update: Sun 08 Jun 2025 14:00:17 +0000
Files and hashes: 1: dg19fPDPdlao_unFvCVYC9RvrNk.roa (hash: 1cfvjDRPYU7JD/YdM+FbsUT+iUhZddEmRAh2tZhtxpM=)
2: hjhGPiy3UFBr9ANkRCMDMmtPbyY.roa (hash: sqw0T+Zj9m/aPxSyQB0liPAB0Jl/klsDHqYei7sLIoY=)
3: mrfqZX09-GYD22YGA7OHI1KATR0.roa (hash: iAu2ErUzWfhvcM5+CamqqvdYTRwJsRA5N+3mtIKS/Kc=)
4: ovGP4arKXoonSAQIQ1WNcsWj-gQ.roa (hash: T9HKSRGXUzrIsVuq9KTvv/Pp6ahuWPC0kj3dMzK0+WE=)
5: z-DfghIUOCcckTwk_1D9O2LUDcY.crl (hash: XvJJMAaEVohAzIpeeFWXQCrWCrMzio5yZzXpxgFQ+yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:3a:71:22:76:b9:1a:86:bc:37:66:39:ef:81:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Validity
Not Before: Jun 7 14:00:17 2025 GMT
Not After : Jun 8 14:00:17 2025 GMT
Subject: CN=0064d79bd53bdb0809c4376ea858de2873ce6d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b4:59:5d:27:01:fd:95:3b:c8:4e:2d:97:33:
26:4e:ec:89:6c:1b:ae:71:47:65:9d:eb:85:16:d5:
de:c7:9c:82:b3:70:ef:f7:fa:0e:05:77:81:b5:3d:
48:89:9c:e2:92:0f:35:e7:0e:ce:af:8e:e2:78:b6:
c0:d1:e6:f5:13:69:14:dc:5d:23:87:da:9e:bd:67:
d8:63:8b:35:c2:44:52:86:50:b6:fc:d9:5a:c0:47:
57:6d:74:18:2c:d6:b9:d7:ed:35:6a:75:c5:c1:ea:
e4:34:03:0c:98:a3:49:de:9b:ee:54:3d:16:1f:4a:
9a:11:ef:35:5e:8f:98:e9:27:ba:f6:58:c9:31:0a:
4a:5f:5c:63:bd:04:f2:eb:a6:82:2e:c3:f3:5a:2c:
0c:39:55:62:95:12:3f:5c:dd:b5:83:66:f1:c8:be:
be:8c:31:90:eb:73:dc:cf:18:de:89:e0:93:50:49:
8a:99:30:ed:de:6f:d6:7a:9d:ea:49:2f:6d:1e:5c:
3a:d9:3a:72:21:71:cb:e9:ea:1d:5f:80:c5:f1:f2:
e0:2d:49:84:32:87:3d:48:e3:84:07:e9:80:27:66:
a3:61:25:31:e8:a1:ac:2e:23:84:55:04:8b:d1:43:
a8:d6:28:56:f2:6d:a9:e2:46:ed:4d:0e:42:2d:3d:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:64:D7:9B:D5:3B:DB:08:09:C4:37:6E:A8:58:DE:28:73:CE:6D:0B
X509v3 Authority Key Identifier:
keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:fc:d1:d2:45:a8:75:e0:08:6b:fe:5e:91:f8:f1:c2:3f:14:
25:c6:b0:14:ce:8b:5a:83:72:04:d1:25:c1:95:70:81:ba:f9:
eb:91:ce:67:f0:a9:51:51:5c:98:05:bb:bb:99:06:76:3a:86:
8f:f3:76:9c:2e:80:28:52:bb:eb:37:b8:5a:5d:99:0c:0f:f0:
3b:9c:ad:87:d6:df:35:99:52:93:d6:cc:6b:3f:86:a1:eb:a9:
fe:de:ad:09:e5:61:84:45:11:01:85:9b:5e:e2:b7:7f:47:b4:
3a:4a:77:bc:7c:d6:86:bf:3c:2f:16:ab:d0:93:62:cb:a6:be:
d8:7e:26:f8:3c:99:6e:d6:9d:b4:9c:33:8b:e1:ac:15:e6:a6:
d0:46:82:2d:e5:69:2e:eb:16:80:09:85:a9:4e:bb:01:08:b4:
e8:4a:1f:dd:7e:b3:4d:27:60:d5:ec:6e:7b:3e:97:0b:ed:24:
59:a4:ac:f5:a5:f0:11:34:08:2e:5e:84:16:65:0f:e1:6b:07:
04:d5:45:2d:57:fe:3b:98:03:ba:9c:df:55:33:92:ed:50:56:
ba:4e:8e:8d:bf:f0:ec:39:a6:78:de:e2:be:54:4e:7b:1b:e5:
d2:f0:f5:d3:bb:a4:94:54:0a:c9:a2:16:66:2d:b0:6c:cc:93:
6d:2e:4b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsTpxIna5Goa8N2Y574GZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZTBkZjgyMTIxNDM4MjcxYzkxM2MyNGZmNTBmZDNiNjJk
NDBkYzYwHhcNMjUwNjA3MTQwMDE3WhcNMjUwNjA4MTQwMDE3WjAzMTEwLwYDVQQD
EygwMDY0ZDc5YmQ1M2JkYjA4MDljNDM3NmVhODU4ZGUyODczY2U2ZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbRZXScB/ZU7yE4tlzMmTuyJbBuu
cUdlneuFFtXex5yCs3Dv9/oOBXeBtT1IiZzikg815w7Or47ieLbA0eb1E2kU3F0j
h9qevWfYY4s1wkRShlC2/NlawEdXbXQYLNa51+01anXFwerkNAMMmKNJ3pvuVD0W
H0qaEe81Xo+Y6Se69ljJMQpKX1xjvQTy66aCLsPzWiwMOVVilRI/XN21g2bxyL6+
jDGQ63PczxjeieCTUEmKmTDt3m/Wep3qSS9tHlw62TpyIXHL6eodX4DF8fLgLUmE
Moc9SOOEB+mAJ2ajYSUx6KGsLiOEVQSL0UOo1ihW8m2p4kbtTQ5CLT1noQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABk15vVO9sICcQ3bqhY3ihzzm0LMB8GA1UdIwQY
MBaAFM/g34ISFDgnHJE8JP9Q/Tti1A3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMt
ZjJjNzkyMmZhZjMyLzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMtZjJjNzkyMmZhZjMy
LzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtvzR0kWo
deAIa/5ekfjxwj8UJcawFM6LWoNyBNElwZVwgbr565HOZ/CpUVFcmAW7u5kGdjqG
j/N2nC6AKFK76ze4Wl2ZDA/wO5yth9bfNZlSk9bMaz+Goeup/t6tCeVhhEURAYWb
XuK3f0e0Okp3vHzWhr88Lxar0JNiy6a+2H4m+DyZbtadtJwzi+GsFeam0EaCLeVp
LusWgAmFqU67AQi06Eof3X6zTSdg1exuez6XC+0kWaSs9aXwETQILl6EFmUP4WsH
BNVFLVf+O5gDupzfVTOS7VBWuk6Ojb/w7DmmeN7ivlROexvl0vD107uklFQKyaIW
Zi2wbMyTbS5Lrg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:00:17 2025 by rpki-client