Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File: Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier: Ijc4y4vmFZAsP8MAUjxK1a+xKJCEvR/sbTakEB2E+Ys=
Subject key identifier: 05:CD:0E:4C:20:FE:F9:FA:E8:4E:75:F7:97:1B:7F:5A:1D:D0:6F:19
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 01974EC519738B9A6035F7EB705D7C59632F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 09:00:29 +0000
Manifest this update: Sun 08 Jun 2025 09:00:29 +0000
Manifest next update: Mon 09 Jun 2025 09:00:29 +0000
Files and hashes: 1: FePFuzEqB9f7ilajywdQpEPMzKo.roa (hash: I5eMCXbNJhaHcUecOqZBTRMoNOXYmdT0pvUT3eEKqpo=)
2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: jqzSkc+rxQ8r23T8hZiiSEmkmPk7rLcf+i5csNuxGtY=)
3: hfiXuQJrWIHjhJiPlnaZjIZtJqs.roa (hash: ORTJO6ddZYLHT8LgOqJTg/+OzIjgkcwhz85BPQA8qzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:19:73:8b:9a:60:35:f7:eb:70:5d:7c:59:63:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Jun 8 09:00:29 2025 GMT
Not After : Jun 9 09:00:29 2025 GMT
Subject: CN=05cd0e4c20fef9fae84e75f7971b7f5a1dd06f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:15:83:e6:5f:ea:e7:a5:9d:b8:27:f3:87:
71:6c:03:6e:97:02:8d:91:ae:f0:eb:aa:96:39:ed:
96:b4:9a:2c:3e:3f:ec:15:08:d5:b0:c2:d5:5a:07:
47:cd:69:9d:3b:4e:9e:a6:79:2e:9c:bd:0f:62:b4:
d1:03:83:51:3c:7b:8a:5e:22:71:61:90:8d:a5:96:
88:ca:07:4c:d0:f5:ab:0d:a9:4c:1e:7b:cb:04:8d:
75:86:10:91:2e:d8:2e:72:1e:38:ad:1b:87:5f:83:
73:93:7a:aa:82:0c:d4:9b:08:c8:f0:5f:2a:ba:6b:
25:36:f3:0a:89:e2:ea:2d:f4:28:0f:58:da:a9:a3:
40:db:02:91:43:de:27:f1:2e:71:27:89:c9:08:fa:
83:ce:82:7d:bb:c6:e3:9d:e5:34:a6:bd:df:73:e0:
ee:27:d3:8b:18:3a:bb:05:30:7c:17:6c:42:7c:88:
97:67:37:bc:7f:71:f1:a2:f0:6b:46:bd:b1:94:ea:
9e:69:c9:bd:40:51:fa:45:11:dc:87:46:19:0a:3c:
a9:2c:d7:fc:d3:89:92:fc:2d:5a:3f:5d:a7:33:85:
8b:bb:60:62:29:ff:d2:ee:83:4f:7e:24:2a:25:a5:
20:59:b0:22:61:ec:95:dc:42:22:ca:25:2c:42:51:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CD:0E:4C:20:FE:F9:FA:E8:4E:75:F7:97:1B:7F:5A:1D:D0:6F:19
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8b:ca:92:9a:6b:c4:71:aa:57:c1:d3:84:08:7a:7d:31:49:
b5:a0:d8:01:9c:57:5a:bc:a3:0f:48:a0:a7:ec:bb:ec:fd:bb:
93:c2:46:62:0b:3a:02:43:68:3b:99:0f:fb:a2:8c:5a:93:43:
3d:f4:93:9f:b5:d5:b1:76:70:69:9b:d9:d3:0c:97:51:e2:41:
a7:a3:68:ff:c1:0c:84:4b:93:79:ff:58:75:77:45:c6:d6:da:
f3:a1:2e:57:e4:96:65:a2:1e:8b:2b:c1:b9:42:1f:5e:4a:84:
35:ec:78:76:a3:a7:68:6d:9d:c6:e1:09:c3:ac:de:ec:41:5f:
a9:0a:1f:9b:cf:36:86:1a:9d:b3:0e:11:36:12:4d:df:5b:25:
5a:e0:76:00:c2:8d:b1:48:55:8b:87:98:40:84:09:7d:8b:a4:
e6:72:3a:84:cb:ea:aa:bb:6a:1f:b6:2f:d3:5c:d9:18:39:9e:
22:5b:ce:16:e0:65:29:e8:6c:73:bf:7e:54:01:5c:ff:42:de:
90:a1:34:d5:51:65:2a:25:19:b8:97:a8:18:31:e9:ca:c6:0c:
dc:a2:57:92:19:2c:f8:8c:b4:78:00:31:b7:5c:17:58:9e:2c:
fa:80:ea:0a:fd:d8:58:d2:93:6a:09:ff:15:34:b0:d6:6e:35:
ee:d5:e5:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxRlzi5pgNffrcF18WWMvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTI1MmI5ZTIxZGY4MTc2Y2M1MzgwMjc4OTVmN2Y0NTg1
NjY2YWIwHhcNMjUwNjA4MDkwMDI5WhcNMjUwNjA5MDkwMDI5WjAzMTEwLwYDVQQD
EygwNWNkMGU0YzIwZmVmOWZhZTg0ZTc1Zjc5NzFiN2Y1YTFkZDA2ZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKYVg+Zf6uelnbgn84dxbANulwKN
ka7w66qWOe2WtJosPj/sFQjVsMLVWgdHzWmdO06epnkunL0PYrTRA4NRPHuKXiJx
YZCNpZaIygdM0PWrDalMHnvLBI11hhCRLtguch44rRuHX4Nzk3qqggzUmwjI8F8q
umslNvMKieLqLfQoD1jaqaNA2wKRQ94n8S5xJ4nJCPqDzoJ9u8bjneU0pr3fc+Du
J9OLGDq7BTB8F2xCfIiXZze8f3HxovBrRr2xlOqeacm9QFH6RRHch0YZCjypLNf8
04mS/C1aP12nM4WLu2BiKf/S7oNPfiQqJaUgWbAiYeyV3EIiyiUsQlHZyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXNDkwg/vn66E5195cbf1od0G8ZMB8GA1UdIwQY
MBaAFGeSUrniHfgXbMU4AniV9/RYVmarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEt
MzM2ZTViM2RkMDcxLzEvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEtMzM2ZTViM2RkMDcx
LzEvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYvKkppr
xHGqV8HThAh6fTFJtaDYAZxXWryjD0igp+y77P27k8JGYgs6AkNoO5kP+6KMWpND
PfSTn7XVsXZwaZvZ0wyXUeJBp6No/8EMhEuTef9YdXdFxtba86EuV+SWZaIeiyvB
uUIfXkqENex4dqOnaG2dxuEJw6ze7EFfqQofm882hhqdsw4RNhJN31slWuB2AMKN
sUhVi4eYQIQJfYuk5nI6hMvqqrtqH7Yv01zZGDmeIlvOFuBlKehsc79+VAFc/0Le
kKE01VFlKiUZuJeoGDHpysYM3KJXkhks+Iy0eAAxt1wXWJ4s+oDqCv3YWNKTagn/
FTSw1m417tXl4A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:34 2025 by rpki-client