Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: EDKDbvWoqe53kAMecwP2W65gaae7MBiUMherJigYCKY=
Subject key identifier: 9F:F7:F3:DB:BB:F0:43:7D:B2:27:C9:CD:1B:FB:24:03:9C:E8:92:EB
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 0197586CEC5BCE1F179CD118F6F65FD9319B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 124B
Signing time: Tue 10 Jun 2025 06:00:22 +0000
Manifest this update: Tue 10 Jun 2025 06:00:22 +0000
Manifest next update: Wed 11 Jun 2025 06:00:22 +0000
Files and hashes: 1: I9pCIyNdXwO_UmL0GiE3Cg1yOBE.roa (hash: rgdmg36ZiZKltWGUWVab82/ToqNlhoJ2jQiTOIy/cAU=)
2: svzhNq6qtyn4S4aBADhUvEOECPM.roa (hash: PLCvbbOnyIN6lmj0BVGyyI3TGiwUbgBbXCHrA/CAEUE=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: RO1Pz43TFNfFNKxzhFj0+aV9zasEDu+cPX6ledQTBh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6c:ec:5b:ce:1f:17:9c:d1:18:f6:f6:5f:d9:31:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Jun 10 06:00:22 2025 GMT
Not After : Jun 11 06:00:22 2025 GMT
Subject: CN=9ff7f3dbbbf0437db227c9cd1bfb24039ce892eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:4d:cf:e2:c3:d1:cc:01:0a:a7:3e:f4:04:
91:0b:cc:7e:5f:37:d0:e0:cf:d5:17:12:54:7d:b5:
7c:81:e0:af:a0:6d:7c:cf:34:d6:0a:c1:73:79:0f:
05:0f:b7:0c:8f:9b:69:f5:45:42:38:83:33:0f:47:
3d:40:e2:ae:ee:d5:fe:c7:40:a3:a2:70:53:31:95:
34:b6:98:ff:02:b5:8c:40:6d:ed:9c:df:fb:38:f4:
9e:83:81:73:f8:60:4b:f7:f8:f8:8f:86:77:08:0b:
3f:91:eb:b5:4b:63:47:e4:68:e9:5e:e6:ff:3a:46:
00:a5:47:12:50:10:6b:f3:87:7f:7b:e2:63:81:7a:
38:ea:42:0b:97:46:8d:76:a4:65:6e:3e:ac:d2:cf:
89:d3:94:29:60:f6:e9:bb:84:17:e3:c2:34:4d:a3:
84:30:7a:84:0f:28:f0:19:e2:33:37:af:1b:b4:26:
47:c6:d4:df:04:e8:dd:0f:72:98:c3:a7:f4:f7:f7:
dd:41:d5:bc:1e:98:06:ea:2f:2d:1d:1d:3d:a3:9a:
34:e0:c9:48:c0:a0:a5:c7:e3:e3:2e:79:04:29:0d:
b3:71:f2:01:5f:fb:f6:fb:76:9c:0c:78:a1:6d:20:
88:67:4a:16:3f:da:25:54:fe:89:77:4f:b7:55:16:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F7:F3:DB:BB:F0:43:7D:B2:27:C9:CD:1B:FB:24:03:9C:E8:92:EB
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:25:37:53:e4:bc:27:4d:5d:0a:96:48:46:4f:0c:04:86:c9:
a1:d2:d5:8c:11:a6:f4:c7:ce:99:12:51:18:22:69:5a:b4:66:
66:08:1b:aa:78:db:42:4b:a2:0f:ee:7f:2e:46:f8:5c:de:d6:
13:a1:da:6d:6b:25:f6:23:30:86:b9:cd:2b:41:38:85:f6:a2:
0b:d4:62:66:56:a8:1c:18:21:3e:42:1a:58:50:92:4e:51:89:
dd:7c:ca:b8:e4:2c:ab:9d:93:d7:b9:be:cc:67:b9:27:3f:db:
e7:50:a6:2d:e0:10:af:13:98:8d:c9:7c:bd:f1:17:7a:a8:12:
2d:4f:b8:de:76:ea:c1:f8:fd:a7:df:0b:6e:62:e7:93:41:d6:
d2:36:80:64:7e:0d:ae:ab:0f:3f:95:f0:c5:f0:c8:c9:d9:e0:
bf:0c:67:5c:34:ca:15:05:f2:4e:0b:17:b0:21:21:87:27:cd:
4e:8e:2f:78:89:15:57:b8:aa:65:03:33:87:c6:98:d4:3f:c2:
01:5e:d0:96:fa:95:13:8f:a4:d2:4a:e9:9b:a9:2d:c9:1b:82:
f5:16:27:1f:f3:63:13:e1:4d:bf:fe:9a:9b:f7:1d:5a:57:9c:
70:44:47:4b:2c:b4:2c:84:e4:a5:76:cc:67:ac:e1:8d:35:a8:
ef:a4:42:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYbOxbzh8XnNEY9vZf2TGbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTU5YzhhMWU2NGZjNjRmZjY2NmJkOTIxOWRjZTE3NDM3
M2NhZjIwHhcNMjUwNjEwMDYwMDIyWhcNMjUwNjExMDYwMDIyWjAzMTEwLwYDVQQD
Eyg5ZmY3ZjNkYmJiZjA0MzdkYjIyN2M5Y2QxYmZiMjQwMzljZTg5MmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jZNz+LD0cwBCqc+9ASRC8x+XzfQ
4M/VFxJUfbV8geCvoG18zzTWCsFzeQ8FD7cMj5tp9UVCOIMzD0c9QOKu7tX+x0Cj
onBTMZU0tpj/ArWMQG3tnN/7OPSeg4Fz+GBL9/j4j4Z3CAs/keu1S2NH5GjpXub/
OkYApUcSUBBr84d/e+JjgXo46kILl0aNdqRlbj6s0s+J05QpYPbpu4QX48I0TaOE
MHqEDyjwGeIzN68btCZHxtTfBOjdD3KYw6f09/fdQdW8HpgG6i8tHR09o5o04MlI
wKClx+PjLnkEKQ2zcfIBX/v2+3acDHihbSCIZ0oWP9olVP6Jd0+3VRZoZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/389u78EN9sifJzRv7JAOc6JLrMB8GA1UdIwQY
MBaAFMwVnIoeZPxk/2Zr2SGdzhdDc8ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYt
NjQ4MjA0MWE4MjQ2LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYtNjQ4MjA0MWE4MjQ2
LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyU3U+S8
J01dCpZIRk8MBIbJodLVjBGm9MfOmRJRGCJpWrRmZggbqnjbQkuiD+5/Lkb4XN7W
E6HabWsl9iMwhrnNK0E4hfaiC9RiZlaoHBghPkIaWFCSTlGJ3XzKuOQsq52T17m+
zGe5Jz/b51CmLeAQrxOYjcl8vfEXeqgSLU+43nbqwfj9p98LbmLnk0HW0jaAZH4N
rqsPP5XwxfDIydngvwxnXDTKFQXyTgsXsCEhhyfNTo4veIkVV7iqZQMzh8aY1D/C
AV7QlvqVE4+k0krpm6ktyRuC9RYnH/NjE+FNv/6am/cdWleccERHSyy0LITkpXbM
Z6zhjTWo76RC+g==
-----END CERTIFICATE-----
Generated at Tue Jun 10 17:29:45 2025 by rpki-client