Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
File: zixQX3fcqBF-8GJXEHRMs1lzaxk.mft (raw, json)
Hash identifier: 8jTqHdSY64qm7EEJrNmkw/Wl7aJG/58QvPVQieJwZJ8=
Subject key identifier: C2:2D:C3:3B:1F:CC:FF:0C:BC:88:54:AE:08:A2:3B:F6:12:27:E2:62
Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
Certificate issuer: /CN=ce2c505f77dca8117ef0625710744cb359736b19
Certificate serial: 01974A7B468651A1194E8FD5A2DC41B96D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:01:22 +0000
Manifest this update: Sat 07 Jun 2025 13:01:22 +0000
Manifest next update: Sun 08 Jun 2025 13:01:22 +0000
Files and hashes: 1: hD4ft5vuw1Wk9UZZqMkIcSTxRFk.roa (hash: h4/9pXQ7Wpk9BBxdxTpq0aRzvgxJkU0Udbbc6bAhob8=)
2: zixQX3fcqBF-8GJXEHRMs1lzaxk.crl (hash: sgSrfhLuJZLs6fEaldUfg+29J7IvqobI9uRZHxerN0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:46:86:51:a1:19:4e:8f:d5:a2:dc:41:b9:6d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19
Validity
Not Before: Jun 7 13:01:22 2025 GMT
Not After : Jun 8 13:01:22 2025 GMT
Subject: CN=c22dc33b1fccff0cbc8854ae08a23bf61227e262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:96:46:80:1b:81:39:93:e8:7a:e8:e0:47:
38:f6:ef:ea:0a:94:c3:96:19:e4:c2:87:e3:75:65:
f4:c4:4f:ac:0b:bd:56:74:39:d6:15:7a:04:80:78:
a5:09:38:21:dc:e9:0c:c6:26:24:be:ac:bf:89:63:
2a:0a:5f:1c:1d:c1:5f:4f:c9:e7:19:18:95:23:49:
e1:f4:2e:07:88:7c:aa:fd:4a:ef:6f:8f:b3:fe:77:
90:50:24:6a:62:f6:45:ea:e8:01:a3:af:20:e4:a2:
b2:b9:4f:d6:a6:9b:18:ff:6b:c5:27:36:94:ae:a7:
38:c1:74:bc:76:07:fb:0e:cb:ea:49:f2:34:02:92:
c7:50:eb:95:c8:85:bb:00:fe:ba:cc:cf:78:b2:4c:
63:74:ea:9e:98:10:4a:59:99:c7:b8:dc:a1:2a:9c:
95:d5:5a:d8:44:4e:5d:bb:10:d4:77:9e:9f:0a:89:
48:02:cb:6e:70:a1:5d:e1:78:0f:26:68:5d:bf:e2:
7d:21:f0:87:68:92:7a:3c:a2:ce:56:0b:6f:c7:37:
a4:1a:ba:05:b7:a2:7e:63:74:59:c9:fb:11:b3:d2:
3e:60:1f:2e:b5:87:31:e6:bc:23:07:80:21:ae:fc:
f5:86:2a:e0:c3:2c:8b:2c:a5:4e:7b:80:c9:f9:a6:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2D:C3:3B:1F:CC:FF:0C:BC:88:54:AE:08:A2:3B:F6:12:27:E2:62
X509v3 Authority Key Identifier:
keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:38:ad:2f:8e:00:f8:76:9f:10:54:21:65:02:e1:cd:8a:c0:
1b:f2:04:00:12:52:ee:15:fd:54:d6:3f:d7:82:b2:ff:0b:f0:
50:94:be:61:68:bc:6f:81:2d:de:2b:d5:b3:50:75:b2:3e:f4:
d5:a7:38:2d:dd:0b:6f:a4:ef:d6:93:b1:81:e2:ab:d7:36:d6:
05:c0:56:9b:b2:bb:bd:e3:96:ad:90:8f:2b:ed:c9:64:d5:4e:
cf:88:85:c0:32:0c:cf:55:c1:62:c5:1d:37:06:ac:47:26:a8:
41:37:ad:b7:69:6c:13:23:ee:f8:9a:8b:b8:f4:c1:a7:59:92:
28:34:67:99:09:ec:b2:09:c0:95:16:b6:42:bf:16:7b:d9:de:
6f:ca:6f:a3:eb:e9:4a:f9:43:bb:86:1b:ab:9e:09:43:d0:54:
c4:2d:fd:1d:37:2d:12:11:91:fb:40:61:07:93:27:9b:c4:95:
f6:b2:8f:d1:95:18:22:06:40:e5:e0:6c:8b:ce:1b:95:3d:1a:
f2:9b:7e:ec:0b:e3:11:77:54:46:c1:4b:bc:91:ba:34:8b:81:
b6:66:8d:db:d1:b5:a6:25:88:2e:91:ac:4c:06:90:4a:22:1c:
00:30:1c:76:be:89:2f:1f:e4:67:a8:63:3f:50:18:6e:7f:61:
0f:21:93:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe0aGUaEZTo/VotxBuW1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMmM1MDVmNzdkY2E4MTE3ZWYwNjI1NzEwNzQ0Y2IzNTk3
MzZiMTkwHhcNMjUwNjA3MTMwMTIyWhcNMjUwNjA4MTMwMTIyWjAzMTEwLwYDVQQD
EyhjMjJkYzMzYjFmY2NmZjBjYmM4ODU0YWUwOGEyM2JmNjEyMjdlMjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHSWRoAbgTmT6Hro4Ec49u/qCpTD
lhnkwofjdWX0xE+sC71WdDnWFXoEgHilCTgh3OkMxiYkvqy/iWMqCl8cHcFfT8nn
GRiVI0nh9C4HiHyq/Urvb4+z/neQUCRqYvZF6ugBo68g5KKyuU/WppsY/2vFJzaU
rqc4wXS8dgf7DsvqSfI0ApLHUOuVyIW7AP66zM94skxjdOqemBBKWZnHuNyhKpyV
1VrYRE5duxDUd56fColIAstucKFd4XgPJmhdv+J9IfCHaJJ6PKLOVgtvxzekGroF
t6J+Y3RZyfsRs9I+YB8utYcx5rwjB4Ahrvz1hirgwyyLLKVOe4DJ+aY4XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMItwzsfzP8MvIhUrgiiO/YSJ+JiMB8GA1UdIwQY
MBaAFM4sUF933KgRfvBiVxB0TLNZc2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2Et
MzNlMjcwNWI0YzNlLzEveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2EtMzNlMjcwNWI0YzNl
LzEveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzitL44A
+HafEFQhZQLhzYrAG/IEABJS7hX9VNY/14Ky/wvwUJS+YWi8b4Et3ivVs1B1sj70
1ac4Ld0Lb6Tv1pOxgeKr1zbWBcBWm7K7veOWrZCPK+3JZNVOz4iFwDIMz1XBYsUd
NwasRyaoQTett2lsEyPu+JqLuPTBp1mSKDRnmQnssgnAlRa2Qr8We9neb8pvo+vp
SvlDu4Ybq54JQ9BUxC39HTctEhGR+0BhB5Mnm8SV9rKP0ZUYIgZA5eBsi84blT0a
8pt+7AvjEXdURsFLvJG6NIuBtmaN29G1piWILpGsTAaQSiIcADAcdr6JLx/kZ6hj
P1AYbn9hDyGTcQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:06:56 2025 by rpki-client