Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
File: Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft (raw, json)
Hash identifier: nK50tIVFO1ww2DyMj7VB82PaGmluUeUOYyPC3JzciKw=
Subject key identifier: 97:47:13:DC:F1:CB:72:D5:7E:49:D8:7E:A5:18:FC:C3:30:AF:75:B1
Authority key identifier: 67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
Certificate issuer: /CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Certificate serial: 0197507CBE6C062A96082A78258A851FB114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
Manifest number: 11F7
Signing time: Sun 08 Jun 2025 17:00:41 +0000
Manifest this update: Sun 08 Jun 2025 17:00:41 +0000
Manifest next update: Mon 09 Jun 2025 17:00:41 +0000
Files and hashes: 1: R2hIzPH7WznpzB3A9VGA94-nqD4.roa (hash: kT7LJSBIR26R77fVHHIPqJYdfVy6esu3U3f7NvLKrOU=)
2: Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl (hash: IU5XOYt9y1CK4Ft0pWo/Z0kVU1VbNzEFfzg9DQehoVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:be:6c:06:2a:96:08:2a:78:25:8a:85:1f:b1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Validity
Not Before: Jun 8 17:00:41 2025 GMT
Not After : Jun 9 17:00:41 2025 GMT
Subject: CN=974713dcf1cb72d57e49d87ea518fcc330af75b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ab:89:cf:57:49:c2:a6:d7:1f:87:e0:df:7b:
6a:36:ea:e3:03:90:36:3b:45:6d:96:4b:77:74:da:
41:3f:c8:39:37:e3:b1:0e:d5:bb:ee:9e:a2:f1:bb:
ac:17:82:f2:9f:88:d4:64:5c:13:dd:e1:5a:2e:77:
f2:00:7b:14:d1:bc:4b:92:1d:db:18:ea:52:58:cc:
bf:99:cd:a8:67:d6:e2:f9:de:75:1c:7b:ab:34:f8:
a5:85:d8:26:ab:91:ce:b1:c6:8c:8c:79:dd:a2:c1:
c8:5f:16:a6:95:ca:d5:24:ad:48:d7:46:85:ed:3c:
05:78:34:30:9f:ef:e1:14:60:06:26:5f:8a:3b:71:
2a:c3:af:df:9e:fb:4f:30:d8:84:84:c2:24:1a:38:
40:85:b0:d6:b0:6a:db:f6:8c:d5:ae:08:2e:b5:8e:
47:3b:f7:65:07:06:8f:02:8c:6e:66:35:cb:8a:cf:
b9:d1:33:76:b6:60:3a:0b:36:d6:ef:1f:09:3d:da:
68:a3:5a:66:06:d8:1c:f3:e1:57:c6:7d:08:74:cc:
be:07:d7:ca:41:a7:0f:c0:d5:1c:80:e3:9d:bb:de:
dd:73:bb:09:75:d0:85:10:6c:f1:c3:28:5a:5a:60:
ec:59:8a:67:aa:ad:7e:db:9c:90:c5:03:3a:12:f9:
7d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:47:13:DC:F1:CB:72:D5:7E:49:D8:7E:A5:18:FC:C3:30:AF:75:B1
X509v3 Authority Key Identifier:
keyid:67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:45:e1:8d:e7:3b:7e:c2:87:c5:33:11:0c:c8:4f:9b:40:ee:
fd:2c:40:c1:6d:e2:95:b5:22:3a:5e:92:3e:ae:5e:03:28:6e:
38:fc:6c:33:04:b2:77:52:2f:ef:77:7c:8b:88:40:a8:e3:97:
04:16:25:63:b9:e0:36:68:c5:05:1a:ba:f9:86:b3:03:11:4c:
d1:2c:e6:ff:4b:f0:18:ce:f9:3a:31:56:63:a3:de:81:ec:2e:
ee:42:eb:1d:05:e8:f0:e6:e8:5f:a2:f8:ad:36:0a:8a:92:fc:
c3:b9:c3:99:2e:28:c9:48:de:2b:d4:3f:d6:af:31:fb:35:65:
60:90:a8:82:07:4b:47:05:66:bb:60:2a:4f:68:ae:f1:d1:9f:
48:81:99:ec:2a:1f:e9:42:5b:3a:81:1e:04:39:32:44:91:f5:
5f:f4:ad:d9:e3:73:3d:21:3d:62:8a:72:a9:b5:41:94:1d:1f:
d1:f5:b2:e2:3d:d1:84:1b:86:80:36:29:5c:fd:cd:01:db:f9:
d6:f7:bf:a5:af:6d:45:91:06:dd:c6:33:5d:75:63:de:a4:b9:
b5:46:74:4f:c0:6e:3f:e4:c1:03:45:7c:af:51:67:b0:45:92:
40:3a:bf:a9:61:5b:cc:03:ed:b1:33:71:6f:25:d2:c8:7e:a4:
c6:1e:c3:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQfL5sBiqWCCp4JYqFH7EUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2MzYTUyM2JlYTIyNGE3NGJjOTZhNGFmNDE2NGMyNDc4
NmI4MmUwHhcNMjUwNjA4MTcwMDQxWhcNMjUwNjA5MTcwMDQxWjAzMTEwLwYDVQQD
Eyg5NzQ3MTNkY2YxY2I3MmQ1N2U0OWQ4N2VhNTE4ZmNjMzMwYWY3NWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3auJz1dJwqbXH4fg33tqNurjA5A2
O0Vtlkt3dNpBP8g5N+OxDtW77p6i8busF4Lyn4jUZFwT3eFaLnfyAHsU0bxLkh3b
GOpSWMy/mc2oZ9bi+d51HHurNPilhdgmq5HOscaMjHndosHIXxamlcrVJK1I10aF
7TwFeDQwn+/hFGAGJl+KO3Eqw6/fnvtPMNiEhMIkGjhAhbDWsGrb9ozVrggutY5H
O/dlBwaPAoxuZjXLis+50TN2tmA6CzbW7x8JPdpoo1pmBtgc8+FXxn0IdMy+B9fK
QacPwNUcgOOdu97dc7sJddCFEGzxwyhaWmDsWYpnqq1+25yQxQM6Evl9DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdHE9zxy3LVfknYfqUY/MMwr3WxMB8GA1UdIwQY
MBaAFGfMOlI76iJKdLyWpK9BZMJHhrguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iYzkxNzQtYTNkMS00MDU4LWFhMGEt
N2NmYjE5ZjZlMTMzLzEvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iYzkxNzQtYTNkMS00MDU4LWFhMGEtN2NmYjE5ZjZlMTMz
LzEvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEXhjec7
fsKHxTMRDMhPm0Du/SxAwW3ilbUiOl6SPq5eAyhuOPxsMwSyd1Iv73d8i4hAqOOX
BBYlY7ngNmjFBRq6+YazAxFM0Szm/0vwGM75OjFWY6Pegewu7kLrHQXo8OboX6L4
rTYKipL8w7nDmS4oyUjeK9Q/1q8x+zVlYJCoggdLRwVmu2AqT2iu8dGfSIGZ7Cof
6UJbOoEeBDkyRJH1X/St2eNzPSE9YopyqbVBlB0f0fWy4j3RhBuGgDYpXP3NAdv5
1ve/pa9tRZEG3cYzXXVj3qS5tUZ0T8BuP+TBA0V8r1FnsEWSQDq/qWFbzAPtsTNx
byXSyH6kxh7DnA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:40:36 2025 by rpki-client