Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier: 7RcbilMhQdiAw9zd7XPJxgiR1J3yuk59sEXojK1FG6M=
Subject key identifier: 27:9F:4F:7A:9F:E3:6A:6A:2B:81:17:5A:73:1D:0F:14:D7:51:BA:E4
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 0197469E8A42D2E712719747BE071A96D3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 19:01:24 +0000
Manifest this update: Fri 06 Jun 2025 19:01:24 +0000
Manifest next update: Sat 07 Jun 2025 19:01:24 +0000
Files and hashes: 1: 7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa (hash: EraKJ6RiXoWZD2Rj0FRU/KChelRj7EhOxKUvscIGtvY=)
2: BR1Ii_38AODfT46uM_LQNIk35f0.roa (hash: pnSwgnciRzgnr7iozogNocb3NYdeZrHWudq2Bv1+yUM=)
3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: hodbPMmNSvW+l9tk0k0atrqJzPbnBFIuwYdAh8gwF6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:8a:42:d2:e7:12:71:97:47:be:07:1a:96:d3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Jun 6 19:01:24 2025 GMT
Not After : Jun 7 19:01:24 2025 GMT
Subject: CN=279f4f7a9fe36a6a2b81175a731d0f14d751bae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:61:e6:9f:22:ca:aa:2f:3e:90:3f:d6:c2:
2b:cc:c3:bb:42:34:cf:dd:52:1d:b8:42:f2:16:78:
95:52:e8:e5:24:81:a8:06:d8:c2:7a:d5:18:03:0c:
1f:2f:d0:8a:bf:d6:c9:58:44:db:3f:9c:5a:58:43:
75:fb:ea:7b:c7:6e:6f:6c:64:75:eb:43:ec:13:c1:
8d:f5:3e:f7:89:a1:47:0f:d0:77:cb:ce:24:f8:3b:
07:cf:a5:e6:d9:2e:83:dc:f6:6c:fa:5b:02:50:f3:
1b:b3:e3:a9:c9:ff:30:1d:c1:a0:07:cb:de:42:88:
dd:a2:3a:bf:96:26:c3:a9:5d:39:b8:93:f6:c4:4c:
a9:b0:57:93:a6:84:7c:3f:65:5c:c0:36:c5:30:0b:
a9:a9:e1:5d:f8:d6:a8:cc:40:af:1c:96:3e:6f:0f:
08:36:84:ce:7f:dd:cd:ff:33:5d:c6:ad:04:67:13:
f4:8f:c9:0a:3c:83:51:72:0c:13:18:33:2d:e2:10:
6b:f6:ad:2c:64:6a:7e:c6:fe:7a:e3:9a:d6:7e:83:
42:05:50:a8:43:69:23:86:84:8b:83:ff:3f:e6:2b:
3f:5b:13:af:b4:ca:eb:2c:f5:23:ff:db:2a:d1:ee:
2c:dd:5f:c1:b6:6c:34:ad:5f:f7:0d:e7:85:ef:da:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9F:4F:7A:9F:E3:6A:6A:2B:81:17:5A:73:1D:0F:14:D7:51:BA:E4
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3e:2c:59:39:8e:80:4b:dc:5b:a3:e9:5a:a0:c7:4a:8c:d5:
1d:a7:ca:fd:e7:6f:59:3d:d6:1f:f0:dd:30:47:ca:af:33:4e:
05:7b:53:de:29:aa:43:7c:ee:ab:95:89:8d:7a:ae:95:ae:9b:
97:16:3d:e2:4d:e0:61:64:bf:33:88:59:de:b2:aa:63:cb:74:
07:d1:11:73:ee:13:56:03:66:31:da:be:91:75:07:b6:08:ae:
86:81:47:a5:07:a3:0c:93:60:b9:d1:7a:15:e6:c2:92:db:d7:
36:78:d8:6a:7e:a4:97:32:67:2d:f0:84:eb:29:60:4a:b4:f9:
59:bf:c6:5e:7f:12:23:ee:d7:27:06:1c:93:86:d3:6c:ac:b8:
fe:3d:8f:6a:a7:eb:64:b0:14:ea:06:43:0b:45:c8:4f:fa:52:
a7:00:b6:ab:a0:61:6b:71:84:24:29:5e:c6:b2:4f:ad:77:c0:
a9:70:ed:34:fb:14:80:f2:68:80:e5:36:cb:8f:f8:8c:f8:cd:
c9:fe:30:5f:98:ca:52:df:df:e7:c9:72:32:70:f9:d2:8c:4e:
a1:2a:bf:89:66:32:9d:f0:c0:f0:26:94:27:d6:9d:f2:4e:b1:
55:79:4d:52:e4:a1:af:5c:15:a6:51:dd:84:c7:d9:d9:d8:c9:
a0:ae:55:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnopC0ucScZdHvgcaltPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkN2Y4Nzg5NDkwMTA3MDk3YjIwY2ZhNmUzZDQ1OWYxMzYy
NzRiYTQwHhcNMjUwNjA2MTkwMTI0WhcNMjUwNjA3MTkwMTI0WjAzMTEwLwYDVQQD
EygyNzlmNGY3YTlmZTM2YTZhMmI4MTE3NWE3MzFkMGYxNGQ3NTFiYWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVxh5p8iyqovPpA/1sIrzMO7QjTP
3VIduELyFniVUujlJIGoBtjCetUYAwwfL9CKv9bJWETbP5xaWEN1++p7x25vbGR1
60PsE8GN9T73iaFHD9B3y84k+DsHz6Xm2S6D3PZs+lsCUPMbs+Opyf8wHcGgB8ve
Qojdojq/libDqV05uJP2xEypsFeTpoR8P2VcwDbFMAupqeFd+NaozECvHJY+bw8I
NoTOf93N/zNdxq0EZxP0j8kKPINRcgwTGDMt4hBr9q0sZGp+xv5645rWfoNCBVCo
Q2kjhoSLg/8/5is/WxOvtMrrLPUj/9sq0e4s3V/Btmw0rV/3DeeF79r2pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCefT3qf42pqK4EXWnMdDxTXUbrkMB8GA1UdIwQY
MBaAFM1/h4lJAQcJeyDPpuPUWfE2J0ukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMt
NDk4MGZjYThkMjc3LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMtNDk4MGZjYThkMjc3
LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfD4sWTmO
gEvcW6PpWqDHSozVHafK/edvWT3WH/DdMEfKrzNOBXtT3imqQ3zuq5WJjXqula6b
lxY94k3gYWS/M4hZ3rKqY8t0B9ERc+4TVgNmMdq+kXUHtgiuhoFHpQejDJNgudF6
FebCktvXNnjYan6klzJnLfCE6ylgSrT5Wb/GXn8SI+7XJwYck4bTbKy4/j2Paqfr
ZLAU6gZDC0XIT/pSpwC2q6Bha3GEJClexrJPrXfAqXDtNPsUgPJogOU2y4/4jPjN
yf4wX5jKUt/f58lyMnD50oxOoSq/iWYynfDA8CaUJ9ad8k6xVXlNUuShr1wVplHd
hMfZ2djJoK5V4g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:33 2025 by rpki-client