Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
File: zS0l92kTYIeMus6YWJC59e_PfZU.mft (raw, json)
Hash identifier: 9jCuWATXon0uQ55MyE3U9XNqmUvuNItwSUkVj9fwG2I=
Subject key identifier: F8:71:18:86:FC:D0:0D:47:CA:83:FE:2A:60:33:C1:81:91:7B:06:6F
Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Certificate issuer: /CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Certificate serial: 0197481E9361EAC025637C62E6EF100C8991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
Manifest number: 14D2
Signing time: Sat 07 Jun 2025 02:00:52 +0000
Manifest this update: Sat 07 Jun 2025 02:00:52 +0000
Manifest next update: Sun 08 Jun 2025 02:00:52 +0000
Files and hashes: 1: lUKZFEQR5YFLyzQjNbMEJSbndmc.roa (hash: Ev1zfRFSrBx+hG5oLqV3IujShWJmSxI4j5cxDJLVNpw=)
2: zS0l92kTYIeMus6YWJC59e_PfZU.crl (hash: LtxwJo67yUi8zHMFiAwf+LjKprCJySi7CeyUKu0cOAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:93:61:ea:c0:25:63:7c:62:e6:ef:10:0c:89:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Validity
Not Before: Jun 7 02:00:52 2025 GMT
Not After : Jun 8 02:00:52 2025 GMT
Subject: CN=f8711886fcd00d47ca83fe2a6033c181917b066f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:75:a8:e5:92:e1:4e:25:04:de:dc:c5:88:
9e:aa:73:b6:b5:4d:3a:e4:13:10:2b:72:1e:dc:b6:
6b:a1:9f:4d:22:c6:73:a3:17:9a:5e:7d:36:9a:1c:
3f:ca:34:32:f2:7a:9b:58:3e:e5:84:87:06:f4:3f:
29:44:c3:24:a5:c4:05:1a:54:5e:92:1b:c7:ef:39:
b2:68:45:ef:09:f1:fa:b4:6a:86:8c:9a:05:5b:9e:
db:50:ea:7d:6d:63:54:d9:ac:9c:c5:d8:cd:43:e1:
ac:76:8f:2e:8c:b9:07:c3:e8:25:6c:0d:0e:d3:30:
c9:cd:8a:cf:74:0f:91:ba:07:42:9d:25:dd:42:c5:
58:8e:56:6f:d1:f8:f7:62:27:c1:d3:f9:e0:40:02:
4a:f2:1c:0d:e5:f2:19:a3:c6:15:df:20:f7:4f:57:
95:43:ca:8c:54:f9:64:b7:2d:5c:7e:e5:47:1d:9a:
7b:05:67:d9:ad:bd:82:50:3e:62:57:cb:ba:ac:bf:
42:e6:6a:43:ff:67:8b:3a:d8:56:3c:c8:97:32:e5:
4c:11:c3:7a:6d:4a:02:3a:7b:10:de:6a:e2:1b:58:
18:4a:e7:30:c0:85:11:1f:71:e4:3a:53:9a:0b:27:
ef:b1:89:97:08:f3:fc:cd:16:d6:ee:a2:f3:5f:09:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:71:18:86:FC:D0:0D:47:CA:83:FE:2A:60:33:C1:81:91:7B:06:6F
X509v3 Authority Key Identifier:
keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:44:39:23:48:5e:52:48:6a:4f:2c:4e:c4:0e:d8:b0:39:f4:
20:b4:e9:0c:7a:d6:be:e8:60:ae:12:ea:b7:8c:64:65:22:72:
88:68:b4:c0:64:5f:86:5e:6e:85:f0:37:22:24:79:91:2a:69:
96:1c:1a:a6:e1:07:e2:cd:34:c3:ee:8d:9a:93:b8:29:89:ff:
cf:7f:a5:ca:49:b9:d9:98:6b:7d:07:d1:0d:fa:bf:f1:57:73:
47:15:71:f1:53:b0:9c:a1:0f:18:03:0f:70:5d:98:18:6b:d3:
85:d4:ca:08:17:39:a2:a2:7c:a8:a4:fb:4f:5a:a5:70:cd:c3:
09:e0:0b:29:09:31:5d:5c:e6:3c:f1:2a:c9:6b:c1:02:8a:75:
e9:6d:d8:fc:d7:2e:c7:d1:bc:4f:24:82:fb:50:0f:63:98:03:
b0:02:2e:13:47:4a:78:b3:85:fb:dc:d0:9e:ab:c3:65:5d:15:
7d:3c:51:67:54:c7:f1:fa:62:49:65:27:7c:f8:e0:2c:39:0f:
b7:d2:5c:ff:23:d5:f3:f6:8d:bc:ca:08:f0:45:43:fc:4b:1c:
cf:cd:68:86:37:f2:eb:45:9e:de:dc:76:b4:9e:47:dd:b8:d8:
00:db:f4:16:46:98:af:77:04:64:9c:4a:34:e9:b3:3e:e9:13:
79:31:1a:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHpNh6sAlY3xi5u8QDImRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMmQyNWY3NjkxMzYwODc4Y2JhY2U5ODU4OTBiOWY1ZWZj
ZjdkOTUwHhcNMjUwNjA3MDIwMDUyWhcNMjUwNjA4MDIwMDUyWjAzMTEwLwYDVQQD
EyhmODcxMTg4NmZjZDAwZDQ3Y2E4M2ZlMmE2MDMzYzE4MTkxN2IwNjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeR1qOWS4U4lBN7cxYieqnO2tU06
5BMQK3Ie3LZroZ9NIsZzoxeaXn02mhw/yjQy8nqbWD7lhIcG9D8pRMMkpcQFGlRe
khvH7zmyaEXvCfH6tGqGjJoFW57bUOp9bWNU2aycxdjNQ+Gsdo8ujLkHw+glbA0O
0zDJzYrPdA+RugdCnSXdQsVYjlZv0fj3YifB0/ngQAJK8hwN5fIZo8YV3yD3T1eV
Q8qMVPlkty1cfuVHHZp7BWfZrb2CUD5iV8u6rL9C5mpD/2eLOthWPMiXMuVMEcN6
bUoCOnsQ3mriG1gYSucwwIURH3HkOlOaCyfvsYmXCPP8zRbW7qLzXwnbmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhxGIb80A1HyoP+KmAzwYGRewZvMB8GA1UdIwQY
MBaAFM0tJfdpE2CHjLrOmFiQufXvz32VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTct
NjM2OWIxN2ZmMTc4LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTctNjM2OWIxN2ZmMTc4
LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEQ5I0he
UkhqTyxOxA7YsDn0ILTpDHrWvuhgrhLqt4xkZSJyiGi0wGRfhl5uhfA3IiR5kSpp
lhwapuEH4s00w+6NmpO4KYn/z3+lykm52ZhrfQfRDfq/8VdzRxVx8VOwnKEPGAMP
cF2YGGvThdTKCBc5oqJ8qKT7T1qlcM3DCeALKQkxXVzmPPEqyWvBAop16W3Y/Ncu
x9G8TySC+1APY5gDsAIuE0dKeLOF+9zQnqvDZV0VfTxRZ1TH8fpiSWUnfPjgLDkP
t9Jc/yPV8/aNvMoI8EVD/Escz81ohjfy60We3tx2tJ5H3bjYANv0FkaYr3cEZJxK
NOmzPukTeTEauA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:31:34 2025 by rpki-client